last executing test programs: 4.492195697s ago: executing program 0 (id=140): r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9, @broadcast}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0xff000000, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x7, 0x0, 0x0, 0x9}}, @common=@inet=@hashlimit2={{0x150}, {'vxcan1\x00', {0x8, 0xcc5, 0x1a, 0x7, 0x17f2, 0x3, 0x38, 0xb0, 0x8}, {0x5}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 4.089125711s ago: executing program 0 (id=146): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.711201203s ago: executing program 4 (id=149): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$P9_RGETLOCK(r2, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r0], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) io_setup(0x8f0, &(0x7f0000002400)) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') socket$packet(0x11, 0x3, 0x300) getpid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) setrlimit(0x9, 0x0) 2.989714925s ago: executing program 0 (id=158): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 2.864639702s ago: executing program 1 (id=161): sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0xb, 0x7, 0x5, 0x22, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_key={0x6, 0x9, 0x108, 0x0, "74084d0ac32767c7efaeafb4042f80fac6aa5fac1756ce5e90e0fb59c5beb26395"}, @sadb_x_sec_ctx={0xd, 0x18, 0xa, 0x3, 0x59, "90946c54a6b870c08a3140afcc25ddb176b1c1ee04d98aa90195f57c4ad1a2b85a766fbd6763d256cc2ad9984882622cb3829e879c0cb85b3f3a7b0a51c87974baf5733a07d0d7bed6a25abd28c3c062f0db730d942cd69e70"}, @sadb_address={0x5, 0x7, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8}}, @sadb_address={0x3, 0x17, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x8, 0x0, 0x10}]}, 0x110}}, 0x4009010) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ff"], 0x15) 2.792219857s ago: executing program 1 (id=164): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x40001, 0x0, 0x6}, 0x62) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) 2.752124589s ago: executing program 1 (id=165): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="7379030000"], 0x42) (fail_nth: 5) 2.466934326s ago: executing program 4 (id=166): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10003, 0x3, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x37, 0x9, 0x70bd2c, 0x0, {0x4}, [@typed={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) fallocate(r0, 0x0, 0x200800, 0x200001000f7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket(0xa, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x18, 0x17}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) listen(r6, 0x100) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000d800800000000010000", @ANYRES32=0x0], 0x20, 0x4000000}, 0x8010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r8, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4089, 0xff9}, {&(0x7f000000bcc0)=""/63, 0x3f}], 0x2}, 0x20) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x0, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff, 0x2}, 0xfe, 0x1}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xfb, 0xfd}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x2, 0xff}], 0xe0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000200), 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRES8=r1, @ANYRES64=r1, @ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.430045628s ago: executing program 1 (id=167): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000003240)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '*'}, {0x20, '\xff\xff'}], 0xa, "9fafdb9881729d8f83f3da7893a5b364fbb76f275f947a76a305000000000000003f669435a8a9c8d9af155c2155928e89f66558722d6f312ddb13dd85622702386ae92703b32f4e14a9a3067f0588fa000000000000"}, 0x104c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000000207050000000006a3014000000000080002400000f73208000140000008000800014000000005080002400000000b0820014000000009080002400000000908000140000000070c0003400000000000007fff040007800c00064000000000000100012c0007800800024000000006080002400000000208000240000000070800024000000101080001407125c46e0c000340000000000000000908000540310ed0b7a94278a68b354c0000000379b28f4793ca46"], 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x800000, 0x11, r1, 0x7ac87000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf95b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/4070, 0xfe6, 0x0, 0x0}, &(0x7f0000000400)=0x40) 1.787593565s ago: executing program 2 (id=168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18030000000000140000", @ANYRES32, @ANYBLOB="000000000000000018000000000000000000000000000000650000000000000018000000000000200000000001000000950000000000000064030000100000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/158, 0x9e}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x52, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/hibernate_compression_threads', 0xa0042, 0x11) write$P9_RLINK(r2, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x48044) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x21, 0xa, 0x12d1, 0x4, 0x41}, 0x50) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x2000400c) sendmsg(r8, &(0x7f0000000400)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)="a4bdaca17e31bf80c8de1fc6e66fb0cbc71278e0c631a48219f330c14c2f62eca5061c15a1a57249d9bc6aa71e1e36460a5a88523e4bf92f481003e403df00e02087f8bd790a9040db3445986d18fc61f0e1d0e44c4bba0b062b243edaaebd03b5642dcf1cf1080d966ad8c8bc80a2d30da5daa48017c22363d5492cd43f70e890551fe0fddd76ac0d21ad16c88e379b74357440a9d09971813e1726f13ae34f23ba83ad77761ad2c0b72a6b94660a8d4a36501d47b8d58ce28fc65b0f6dc25950e958e39fb4d7cf0ab3a90d28b74317855ba572b927432f49ef9421b6ae14c5e19de605875aa9d120022822dfa2d2729f172637e05ce2", 0xf7}, {&(0x7f0000000bc0)="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", 0x1000}, {}], 0x3, &(0x7f0000001bc0)=[{0xb8, 0x108, 0x76c, "5a6a5ec550d2b5b1f16fa067e0ee7db021e34f6df145e1356d321e9d6f66300452a03bb3c62ccd35418e2f0653123bb807b452b7b6c100b623843d81cc5b971f88822f0afdb19d74216dc81893bf90b52965321822b4d552346c0e8ab019c759bea16ff42361374ce2e3f5453b827489171eed2e9b3f78e9fef43b492f5463c20efada90827621adb95b1593614f4d60a17ff2a8d31290462e8d4de5cda0b3dcfb96"}, {0xa8, 0x1, 0x7, "bfcd50d298289a2585828167646973849d6cc60f4e5d2725cc3135e6dbdf8d33ef52bbe0298270cf21703bf5b3009c164faac79e25ce3ca7711656e5e817bf556459bae9668caa9bcd5761c780fe7c4ec29fec9dd48ea0352077f673fe4e0820a8272edcddd5f05920ba520db215361dd4b7a264454e14c8d6ec36541ddc62db22b029c80e7fa99d4fef56ab86f01c0fe5ab4d"}, {0x38, 0x84, 0x6, "a568ad42f907aba8429ac219c3581effde2d089a382b94d6ea4195c2de5f799ba64080fd3d"}, {0x88, 0x6, 0x629, "dc42d6404d005468c85eaeb1aa6cfa6357f2e3c42d0d76c5ed6091caaf4c3871777b698ed6fdb0e949d6b2f1fb8f42cf8d23904cb57aa5afb77d6751e4a187398b92b9bcdbe86104480d9fccc9a3c6fd4931003f567a31388a255f1fe25bc0f3c1ed202bb410fb351fddc63dd2be3b135963856549"}, {0x90, 0x119, 0xf3c1, "be0125c5b3054b85ab0d4b358d5ab76fc6aad7ff58685d7108e90664790aa25c75f849ee3ea27fede5ec1c252c06978b8cdfeb5c98e69055134b2c05e92b66abb85cb3900a1c9bd3b001b10d63504cf3cddfb7ce6a8bd43196205fc6150d4f9c636571f9144f730a33f985e0cdabb9bc1b7a01c73023cb2f107d170b"}, {0xd0, 0x118, 0x1, "9e8b0acb8c5c9fb0944a8a9304b715687e8233ef2b3956fb767a66f3370b27626182fe92c8e0f8012ca4cfc1ee1f65be9c0a1fff853f5c96e7e231bba99d07e6045f4a4729dd09ad15aad8a90984a07c320c940812d31a600b40fa19e6fca85938debb3575bd0f41228e9f1e5de40dc5660b538ab88bdbc6355e1bbbca1c7512e9c5fd57fb6be3e2a19fa45926ab48346cafee1f92e9a1536a05cdeed0a3308e4f3850961cf6b634ebccdfe6c86a5f799733ee81026bd0f3a5"}, {0x48, 0x114, 0x7, "d2a0905ea414cc3863f781e76ce41bd12d5073ac4fee20826e14d74660ffd3809e4108ee43e92d7254bf92b4675d2620691759976f10"}, {0x50, 0x102, 0x6, "5738a6ac30b4279cfb84baa6c6bf59d435fcb48595065062a0e453d49fb94c8356f7d9fd724dff2be3b60102762a0c44d06e0890abea09eb028e"}, {0xf8, 0x112, 0xbbd, "785707e2cd8719ff578214956079d3f27a3ba99fdf34f6769b5e7a8dba2bf456d4387992e69032d354a95b481f082e55ed6f1aac5610b8a4551680efe1fe893c3fd505acbc16c533790b062a28e39334722ce118e8315f6420d3ce5d28aa8633f190291d62ddce63beb4cb596d6d40a3d208bc8603ba1391a05f26bb42fd34335542123c8f44602ffb9cdef58ddbbe44bc8b333877426422e2f1f083173239d41f15262c343ec254e00148352b9e86c63d6067751fa9a1363558e496094b22414b59b426de3ea1a24f56d23a6edc537f56ad789bc6b43745a9b2bfcafe7b4fa5db6d6b71"}], 0x510}, 0x1) 1.757354407s ago: executing program 1 (id=169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.53090498s ago: executing program 2 (id=170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffe, 0x1, @perf_config_ext={0x3, 0xb2}, 0x0, 0x3, 0xb, 0x1, 0x800008, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x80, 0x700, 0x3, 0x6, {{0xa, 0x4, 0x2, 0x2f, 0x28, 0x66, 0x0, 0x5, 0x29, 0x0, @broadcast, @private=0xa010102, {[@noop, @generic={0x82, 0x3, 'l'}, @timestamp={0x44, 0x10, 0xf0, 0x0, 0x1, [0x6d1, 0xfff, 0x91]}]}}}}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x1e8, 0xfeffffff, 0x290, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'dummy0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x290}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x89, 0x1, 0xa}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id=0x67, @gre_key=0x4}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {0x0, 0x9}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) lsetxattr$security_ima(&(0x7f00000002c0)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) 1.344174211s ago: executing program 4 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000580)="96eb4c953dc5bda8b5ce388a13e0ca22e95564a01305280d3635fe4fb5e922056f2488f4c93c42c07aa5683efb5907508fd6c531a9ba0d1b0f2a4a6826062190d096c2b16ca4c820f9b6215300e9b3f9553b34dcfc56d169c24b5ccbfeccf01780b01de362b6b5a73f866d3aaf8b656e6d964ac062a72a8fb3601673a3ba5446f567d4fcab00c1521fdadafe70f2d36fb67a6a49eae9b3ac97485e480bd9eed8c57177516b4d1c8505605bd8c9f95ee8f488ded78fcf93d685bd3c1fe9817830d42fc094", &(0x7f0000001700)=""/4096, 0x4}, 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x5ba8aec43a755617, 0x70ad27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40009, 0x40b53}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x7fff}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x80}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200008c4}, 0x4c040) 1.301396514s ago: executing program 2 (id=173): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffef8, 0x2, 0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x202, 0x1c, 0x1000}, 0x10) sendto$inet6(r0, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 1.083483137s ago: executing program 2 (id=175): sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2, 0xb, 0x7, 0x5, 0x22, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_key={0x6, 0x9, 0x108, 0x0, "74084d0ac32767c7efaeafb4042f80fac6aa5fac1756ce5e90e0fb59c5beb26395"}, @sadb_x_sec_ctx={0xd, 0x18, 0xa, 0x3, 0x59, "90946c54a6b870c08a3140afcc25ddb176b1c1ee04d98aa90195f57c4ad1a2b85a766fbd6763d256cc2ad9984882622cb3829e879c0cb85b3f3a7b0a51c87974baf5733a07d0d7bed6a25abd28c3c062f0db730d942cd69e70"}, @sadb_address={0x5, 0x7, 0x6c, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8}}, @sadb_address={0x3, 0x17, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x8, 0x0, 0x10}]}, 0x110}}, 0x4009010) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 986.209373ms ago: executing program 2 (id=176): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$P9_RGETLOCK(r2, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES32=r0], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) io_setup(0x8f0, &(0x7f0000002400)) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') socket$packet(0x11, 0x3, 0x300) getpid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) setrlimit(0x9, 0x0) 915.381996ms ago: executing program 3 (id=177): perf_event_open(&(0x7f0000000500)={0x2, 0xa5, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x12a00, 0x32, 0x43a1bd76, 0x9, 0x382, 0xa3b9, 0x2, 0x0, 0x0, 0x0, 0x1006}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xb6, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x80, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, [{0x4, 0xb, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b7"}]}}}}}}, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001800013000000000900"], 0x0, 0x5, 0x0, 0x0, 0x8f4ecf96622e2494, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000002, 0xd, 0xf, 0x9, 0x1}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r4}, 0xc) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xf) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000480)='R', 0x1}, {0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="814f04000000000020001280080001006873720014000280"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 741.654997ms ago: executing program 1 (id=178): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x1, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) io_setup(0x8f0, &(0x7f0000002400)) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() write$P9_RGETLOCK(r3, 0x0, 0x200002e6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x4, &(0x7f0000002400)) 634.803883ms ago: executing program 3 (id=179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 630.840413ms ago: executing program 0 (id=180): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3000002) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 409.376056ms ago: executing program 4 (id=181): getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x82980, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x49618, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x170}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = dup(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5c, 0xa}}, @qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6, 0x770, 0xf29, 0x2, 0x971}}, {0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x854) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) syz_emit_ethernet(0x1aa, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) 408.836606ms ago: executing program 3 (id=191): syz_emit_ethernet(0x0, 0x0, 0x0) 309.146612ms ago: executing program 3 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x60707}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) (fail_nth: 10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) 294.986932ms ago: executing program 0 (id=183): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x20001010) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x18, 0x72, 0x301, 0x4000001, 0x4}, 0x18}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48084) unshare(0x28040680) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) 213.682638ms ago: executing program 3 (id=184): perf_event_open(&(0x7f0000000440)={0x2, 0x90, 0x99, 0x0, 0x0, 0x0, 0x0, 0x80000000000003, 0x86a2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 157.108191ms ago: executing program 0 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010145}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11ff, 0x2}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0xdc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x6, 0x6, 0x107}]}) getdents64(r2, &(0x7f0000001ac0)=""/4095, 0xfff) 148.092831ms ago: executing program 2 (id=186): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x7ff}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x1, 0x7f}, &(0x7f0000000100)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e21, 0x1, @empty, 0xff}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000180), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='wchan\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a0101000000000000d300000000000000020073797a31000000000900010073797a31000000001800038014efff7f0800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) setreuid(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x50483}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9005}, 0x800) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r9, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="003e0000001400000000c49646d834b22c730000a6e0f010b86bfcb36bea85c7d9f94c8d3787c986b8ac70f156f809c9204bf4597433fdebb29a2b7998744ffbe4380a2a41a13ff0021696eb05c0ded31de21c0b2325cc5fd4a128373e4ba77c51c5f604db975903aeabd5bbff8061977e7e22a634af9d0d4076851b2426", @ANYRES32=r8, @ANYBLOB="1e000003"], 0x38, 0x40044}}], 0x1, 0x44) fchown(r0, 0x0, r14) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000480)={'vxcan1\x00'}) 122.623673ms ago: executing program 4 (id=187): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) 73.420415ms ago: executing program 4 (id=188): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 3 (id=189): syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) fsopen(&(0x7f0000000000)='reiserfs\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 36.183008][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 36.183026][ T29] audit: type=1400 audit(1770636984.205:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.215583][ T29] audit: type=1400 audit(1770636984.235:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.218323][ T3301] cgroup: Unknown subsys name 'net' [ 36.245024][ T29] audit: type=1400 audit(1770636984.265:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.386404][ T3301] cgroup: Unknown subsys name 'cpuset' [ 36.392779][ T3301] cgroup: Unknown subsys name 'rlimit' [ 36.566456][ T29] audit: type=1400 audit(1770636984.595:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.591908][ T29] audit: type=1400 audit(1770636984.595:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.613307][ T29] audit: type=1400 audit(1770636984.595:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.634485][ T29] audit: type=1400 audit(1770636984.595:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.655902][ T29] audit: type=1400 audit(1770636984.615:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.681183][ T29] audit: type=1400 audit(1770636984.615:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.705105][ T29] audit: type=1400 audit(1770636984.635:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.734361][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 36.806593][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.084801][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 38.099641][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 38.130233][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 38.160155][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 38.267731][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.274842][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.282396][ T3315] bridge_slave_0: entered allmulticast mode [ 38.289006][ T3315] bridge_slave_0: entered promiscuous mode [ 38.296009][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.303096][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.310773][ T3315] bridge_slave_1: entered allmulticast mode [ 38.317420][ T3315] bridge_slave_1: entered promiscuous mode [ 38.324447][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.331725][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.339281][ T3313] bridge_slave_0: entered allmulticast mode [ 38.346048][ T3313] bridge_slave_0: entered promiscuous mode [ 38.362833][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.370483][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.377987][ T3321] bridge_slave_0: entered allmulticast mode [ 38.385035][ T3321] bridge_slave_0: entered promiscuous mode [ 38.396640][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.404089][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.411388][ T3313] bridge_slave_1: entered allmulticast mode [ 38.418097][ T3313] bridge_slave_1: entered promiscuous mode [ 38.429412][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.436527][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.444001][ T3321] bridge_slave_1: entered allmulticast mode [ 38.451073][ T3321] bridge_slave_1: entered promiscuous mode [ 38.474267][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.490843][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.500788][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.508084][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.515722][ T3318] bridge_slave_0: entered allmulticast mode [ 38.522291][ T3318] bridge_slave_0: entered promiscuous mode [ 38.532847][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.544445][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.565102][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.574536][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.581920][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.589494][ T3318] bridge_slave_1: entered allmulticast mode [ 38.596439][ T3318] bridge_slave_1: entered promiscuous mode [ 38.602672][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 38.627979][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.651579][ T3321] team0: Port device team_slave_0 added [ 38.662606][ T3315] team0: Port device team_slave_0 added [ 38.678472][ T3321] team0: Port device team_slave_1 added [ 38.685232][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.700221][ T3315] team0: Port device team_slave_1 added [ 38.707236][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.717457][ T3313] team0: Port device team_slave_0 added [ 38.745417][ T3313] team0: Port device team_slave_1 added [ 38.761651][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.768858][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.795941][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.815221][ T3318] team0: Port device team_slave_0 added [ 38.822507][ T3318] team0: Port device team_slave_1 added [ 38.828455][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.835403][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.861925][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.873205][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.880316][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.909590][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.933539][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.940710][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.967017][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.979195][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.986554][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.014561][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.049297][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.056452][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.084458][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.106825][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.114335][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.122223][ T3314] bridge_slave_0: entered allmulticast mode [ 39.128795][ T3314] bridge_slave_0: entered promiscuous mode [ 39.135979][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.143830][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.171586][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.206833][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.214200][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.221675][ T3314] bridge_slave_1: entered allmulticast mode [ 39.228257][ T3314] bridge_slave_1: entered promiscuous mode [ 39.235190][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.242358][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.270945][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.287681][ T3313] hsr_slave_0: entered promiscuous mode [ 39.294133][ T3313] hsr_slave_1: entered promiscuous mode [ 39.307721][ T3315] hsr_slave_0: entered promiscuous mode [ 39.314092][ T3315] hsr_slave_1: entered promiscuous mode [ 39.320487][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 39.326733][ T3315] Cannot create hsr debugfs directory [ 39.359601][ T3318] hsr_slave_0: entered promiscuous mode [ 39.365748][ T3318] hsr_slave_1: entered promiscuous mode [ 39.371905][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 39.378183][ T3318] Cannot create hsr debugfs directory [ 39.391143][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.404271][ T3321] hsr_slave_0: entered promiscuous mode [ 39.411230][ T3321] hsr_slave_1: entered promiscuous mode [ 39.417385][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 39.423439][ T3321] Cannot create hsr debugfs directory [ 39.441575][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.492582][ T3314] team0: Port device team_slave_0 added [ 39.522365][ T3314] team0: Port device team_slave_1 added [ 39.576183][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.583508][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.610501][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.638508][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.645820][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.673490][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.750146][ T3314] hsr_slave_0: entered promiscuous mode [ 39.756512][ T3314] hsr_slave_1: entered promiscuous mode [ 39.762579][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 39.768412][ T3314] Cannot create hsr debugfs directory [ 39.783532][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.797029][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.818864][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.831355][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.856557][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.880537][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.891108][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.913969][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.938734][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.953053][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.962664][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.974433][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.015011][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.027306][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.042970][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.053561][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.101254][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.111696][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.131141][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.148749][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.170755][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.206082][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.216652][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.238492][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.248134][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.257711][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.277524][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.284665][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.294126][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.301391][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.310447][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.317815][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.334535][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.342284][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.372421][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.391042][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.411996][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.419489][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.429802][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.436965][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.458885][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.469310][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.476962][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.496589][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.519614][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.533448][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.540855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.591002][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.599258][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.616860][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.624088][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.659485][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.701781][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.773537][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.799219][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.844894][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.874938][ T3313] veth0_vlan: entered promiscuous mode [ 40.895861][ T3313] veth1_vlan: entered promiscuous mode [ 40.964289][ T3313] veth0_macvtap: entered promiscuous mode [ 41.001976][ T3314] veth0_vlan: entered promiscuous mode [ 41.026669][ T3313] veth1_macvtap: entered promiscuous mode [ 41.039069][ T3315] veth0_vlan: entered promiscuous mode [ 41.053406][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.063118][ T3314] veth1_vlan: entered promiscuous mode [ 41.081484][ T3315] veth1_vlan: entered promiscuous mode [ 41.090420][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.116743][ T1658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.141639][ T1658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.159078][ T3321] veth0_vlan: entered promiscuous mode [ 41.185342][ T1658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.200072][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.209156][ T3314] veth0_macvtap: entered promiscuous mode [ 41.229842][ T3318] veth0_vlan: entered promiscuous mode [ 41.236486][ T1658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.249768][ T3321] veth1_vlan: entered promiscuous mode [ 41.257987][ T3315] veth0_macvtap: entered promiscuous mode [ 41.267769][ T3314] veth1_macvtap: entered promiscuous mode [ 41.274323][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 41.274340][ T29] audit: type=1400 audit(1770636989.295:99): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.297133][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.306708][ T29] audit: type=1400 audit(1770636989.295:100): avc: denied { open } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.306746][ T29] audit: type=1400 audit(1770636989.295:101): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.334884][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.391504][ T29] audit: type=1400 audit(1770636989.415:102): avc: denied { prog_load } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.412358][ T29] audit: type=1400 audit(1770636989.415:103): avc: denied { bpf } for pid=3481 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.434521][ T3315] veth1_macvtap: entered promiscuous mode [ 41.442059][ T29] audit: type=1400 audit(1770636989.425:104): avc: denied { perfmon } for pid=3481 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.468786][ T3482] rdma_op ffff88811bce2580 conn xmit_rdma 0000000000000000 [ 41.477339][ T3318] veth1_vlan: entered promiscuous mode [ 41.483679][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.493334][ T29] audit: type=1400 audit(1770636989.465:105): avc: denied { create } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.515102][ T29] audit: type=1400 audit(1770636989.495:106): avc: denied { create } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.535304][ T29] audit: type=1400 audit(1770636989.495:107): avc: denied { bind } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.542580][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 41.558562][ T29] audit: type=1400 audit(1770636989.495:108): avc: denied { write } for pid=3481 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.569732][ T3482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 41.611683][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.635470][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.647531][ T3321] veth0_macvtap: entered promiscuous mode [ 41.655238][ T71] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.684072][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.701491][ T1658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.726748][ T3318] veth0_macvtap: entered promiscuous mode [ 41.727357][ C1] hrtimer: interrupt took 44175 ns [ 41.752878][ T1658] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.762185][ T3321] veth1_macvtap: entered promiscuous mode [ 41.788206][ T3318] veth1_macvtap: entered promiscuous mode [ 41.801922][ T1658] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.814352][ T3490] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 41.826188][ T3491] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6'. [ 41.839287][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.852790][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.864106][ T1658] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.879756][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.897346][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.919997][ T1658] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.946554][ T1658] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.979473][ T1658] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.987728][ T3498] execmem: unable to allocate memory [ 42.003112][ T1658] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.015060][ T3495] loop1: detected capacity change from 0 to 512 [ 42.022407][ T1658] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.052742][ T1658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.059962][ T3495] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.075838][ T3495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.094528][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.138767][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.159509][ T3495] EXT4-fs (loop1): 1 truncate cleaned up [ 42.184603][ T3505] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 42.186117][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.210532][ T3495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.349072][ T3523] loop3: detected capacity change from 0 to 512 [ 42.372646][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.401101][ T3523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.423697][ T3521] uprobe: syz.0.13:3521 failed to unregister, leaking uprobe [ 42.446293][ T71] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.468888][ T3523] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.494012][ T3523] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 42.494361][ T3523] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 42.494466][ T3523] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.12: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 42.494730][ T3523] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.12: couldn't read orphan inode 13 (err -117) [ 42.495244][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.561926][ T3534] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 42.632841][ T3527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.656637][ T3527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.762921][ T3513] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.12: inode #15: comm syz.3.12: iget: illegal inode # [ 42.777711][ T3513] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.12: inode #15: comm syz.3.12: iget: illegal inode # [ 42.782045][ T3542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.814637][ T3513] vhci_hcd vhci_hcd.0: invalid port number 97 [ 42.821224][ T3513] vhci_hcd vhci_hcd.0: invalid port number 97 [ 42.884396][ T3549] rdma_op ffff88811c49b980 conn xmit_rdma 0000000000000000 [ 42.899319][ T3549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 42.908767][ T3549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 42.920721][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.144201][ T3572] loop0: detected capacity change from 0 to 512 [ 43.200393][ T3576] uprobe: syz.4.32:3576 failed to unregister, leaking uprobe [ 43.214664][ T3572] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.255802][ T3572] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.264922][ T3572] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 43.289945][ T3581] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 43.297740][ T3572] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 43.322186][ T3572] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.28: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 43.328367][ T3584] FAULT_INJECTION: forcing a failure. [ 43.328367][ T3584] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.342398][ T3572] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.28: couldn't read orphan inode 13 (err -117) [ 43.356648][ T3584] CPU: 1 UID: 0 PID: 3584 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.356841][ T3584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 43.356894][ T3584] Call Trace: [ 43.356928][ T3584] [ 43.356953][ T3584] __dump_stack+0x1d/0x30 [ 43.357045][ T3584] dump_stack_lvl+0x95/0xd0 [ 43.357157][ T3584] dump_stack+0x15/0x1b [ 43.357375][ T3584] should_fail_ex+0x263/0x280 [ 43.357597][ T3584] should_fail+0xb/0x20 [ 43.357732][ T3584] should_fail_usercopy+0x1a/0x20 [ 43.357905][ T3584] _copy_from_iter+0xcf/0xea0 [ 43.358003][ T3584] ? alloc_pages_mpol+0x217/0x260 [ 43.358119][ T3584] copy_page_from_iter+0x178/0x2a0 [ 43.358174][ T3584] tun_get_user+0xbbd/0x27c0 [ 43.358205][ T3584] ? ref_tracker_alloc+0x1f2/0x2f0 [ 43.358353][ T3584] tun_chr_write_iter+0x15e/0x210 [ 43.358507][ T3584] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 43.358575][ T3584] vfs_write+0x5a6/0x9f0 [ 43.358654][ T3584] ksys_write+0xdc/0x1a0 [ 43.358721][ T3584] __x64_sys_write+0x40/0x50 [ 43.358819][ T3584] x64_sys_call+0x2847/0x3000 [ 43.358907][ T3584] do_syscall_64+0xc0/0x2a0 [ 43.359151][ T3584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.359222][ T3584] RIP: 0033:0x7f7fc9d6b84e [ 43.359272][ T3584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.359378][ T3584] RSP: 002b:00007f7fc8806fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.359475][ T3584] RAX: ffffffffffffffda RBX: 00007f7fc88076c0 RCX: 00007f7fc9d6b84e [ 43.359521][ T3584] RDX: 0000000000000066 RSI: 0000200000000480 RDI: 00000000000000c8 [ 43.359558][ T3584] RBP: 00007f7fc8807090 R08: 0000000000000000 R09: 0000000000000000 [ 43.359619][ T3584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.359681][ T3584] R13: 00007f7fca026038 R14: 00007f7fca025fa0 R15: 00007ffca61377a8 [ 43.359718][ T3584] [ 43.572402][ T3572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.626214][ T3565] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.28: inode #15: comm syz.0.28: iget: illegal inode # [ 43.647287][ T3565] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.28: inode #15: comm syz.0.28: iget: illegal inode # [ 43.664416][ T3565] vhci_hcd vhci_hcd.0: invalid port number 97 [ 43.671389][ T3565] vhci_hcd vhci_hcd.0: invalid port number 97 [ 43.708232][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.767228][ T3600] loop1: detected capacity change from 0 to 1024 [ 43.778350][ T3600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.787140][ T3600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.799643][ T3600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 43.820460][ T3600] System zones: 0-1, 3-36 [ 43.837057][ T3600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.875386][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.976103][ T3623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.48'. [ 44.140842][ T3634] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 44.148485][ T3634] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 44.171288][ T3635] loop3: detected capacity change from 0 to 512 [ 44.229020][ T3635] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.256587][ T3635] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.264698][ T3635] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 44.315760][ T3635] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 44.339657][ T3635] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.52: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 44.359721][ T3635] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.52: couldn't read orphan inode 13 (err -117) [ 44.372574][ T3635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.408829][ T3640] netlink: 92 bytes leftover after parsing attributes in process `syz.0.55'. [ 44.451310][ T3642] loop0: detected capacity change from 0 to 1024 [ 44.468522][ T3632] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.52: inode #15: comm syz.3.52: iget: illegal inode # [ 44.471318][ T3642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.481870][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.494938][ T3528] Bluetooth: hci0: command 0x1003 tx timeout [ 44.513704][ T3632] EXT4-fs error (device loop3): ext4_lookup:1785: comm syz.3.52: inode #15: comm syz.3.52: iget: illegal inode # [ 44.538299][ T3632] vhci_hcd vhci_hcd.0: invalid port number 97 [ 44.544816][ T3632] vhci_hcd vhci_hcd.0: invalid port number 97 [ 44.626095][ T3647] loop2: detected capacity change from 0 to 256 [ 44.643834][ T3647] msdos: Unknown parameter '_j^$L9۾l)mTE_ XKuRÜܙ07Fܠ$6OW r [ 44.968114][ T3663] __dump_stack+0x1d/0x30 [ 44.968187][ T3663] dump_stack_lvl+0x95/0xd0 [ 44.968218][ T3663] dump_stack+0x15/0x1b [ 44.968259][ T3663] should_fail_ex+0x263/0x280 [ 44.968300][ T3663] should_fail+0xb/0x20 [ 44.968379][ T3663] should_fail_usercopy+0x1a/0x20 [ 44.968423][ T3663] _copy_to_user+0x20/0xa0 [ 44.968487][ T3663] bpf_test_finish+0x157/0x500 [ 44.968576][ T3663] bpf_prog_test_run_xdp+0x663/0xa10 [ 44.968625][ T3663] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 44.968751][ T3663] bpf_prog_test_run+0x204/0x340 [ 44.968820][ T3663] __sys_bpf+0x4c0/0x7b0 [ 44.968867][ T3663] __x64_sys_bpf+0x41/0x50 [ 44.968901][ T3663] x64_sys_call+0x28e1/0x3000 [ 44.969015][ T3663] do_syscall_64+0xc0/0x2a0 [ 44.969126][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.969168][ T3663] RIP: 0033:0x7ff88e55af79 [ 44.969190][ T3663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.969266][ T3663] RSP: 002b:00007ff88cfaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.969293][ T3663] RAX: ffffffffffffffda RBX: 00007ff88e7d5fa0 RCX: 00007ff88e55af79 [ 44.969312][ T3663] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 44.969335][ T3663] RBP: 00007ff88cfaf090 R08: 0000000000000000 R09: 0000000000000000 [ 44.969353][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.969370][ T3663] R13: 00007ff88e7d6038 R14: 00007ff88e7d5fa0 R15: 00007ffd2e239818 [ 44.969399][ T3663] [ 45.524231][ T3674] Zero length message leads to an empty skb [ 45.816141][ T3690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 45.859046][ T3693] rdma_op ffff888100068d80 conn xmit_rdma 0000000000000000 [ 45.900578][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 45.932646][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.946339][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.981183][ T3695] bridge0: entered allmulticast mode [ 46.083292][ T3698] bridge_slave_1: left allmulticast mode [ 46.089248][ T3698] bridge_slave_1: left promiscuous mode [ 46.095288][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.116750][ T3698] bridge_slave_0: left allmulticast mode [ 46.122467][ T3698] bridge_slave_0: left promiscuous mode [ 46.128614][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.212309][ T3709] FAULT_INJECTION: forcing a failure. [ 46.212309][ T3709] name failslab, interval 1, probability 0, space 0, times 0 [ 46.225341][ T3709] CPU: 1 UID: 0 PID: 3709 Comm: syz.4.81 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.225366][ T3709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 46.225388][ T3709] Call Trace: [ 46.225395][ T3709] [ 46.225402][ T3709] __dump_stack+0x1d/0x30 [ 46.225425][ T3709] dump_stack_lvl+0x95/0xd0 [ 46.225444][ T3709] dump_stack+0x15/0x1b [ 46.225479][ T3709] should_fail_ex+0x263/0x280 [ 46.225593][ T3709] should_failslab+0x8c/0xb0 [ 46.225683][ T3709] __kmalloc_noprof+0xb8/0x580 [ 46.225714][ T3709] ? sock_kmalloc+0x85/0xc0 [ 46.225800][ T3709] ? terminate_walk+0x1e6/0x210 [ 46.225871][ T3709] ? path_openat+0x1d94/0x23c0 [ 46.225912][ T3709] sock_kmalloc+0x85/0xc0 [ 46.225953][ T3709] ____sys_sendmsg+0xf9/0x600 [ 46.225986][ T3709] ___sys_sendmsg+0x195/0x1e0 [ 46.226024][ T3709] __x64_sys_sendmsg+0xd4/0x160 [ 46.226101][ T3709] x64_sys_call+0x17ba/0x3000 [ 46.226138][ T3709] do_syscall_64+0xc0/0x2a0 [ 46.226178][ T3709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.226231][ T3709] RIP: 0033:0x7f1c70e6af79 [ 46.226248][ T3709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.226266][ T3709] RSP: 002b:00007f1c6f8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.226292][ T3709] RAX: ffffffffffffffda RBX: 00007f1c710e5fa0 RCX: 00007f1c70e6af79 [ 46.226359][ T3709] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000005 [ 46.226374][ T3709] RBP: 00007f1c6f8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 46.226412][ T3709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.226424][ T3709] R13: 00007f1c710e6038 R14: 00007f1c710e5fa0 R15: 00007ffefba53298 [ 46.226448][ T3709] [ 46.432913][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 46.432984][ T29] audit: type=1400 audit(1770636994.455:621): avc: denied { create } for pid=3711 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.487330][ T29] audit: type=1400 audit(1770636994.495:622): avc: denied { write } for pid=3711 comm="syz.2.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.565748][ T3725] __nla_validate_parse: 2 callbacks suppressed [ 46.565770][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 46.613195][ T29] audit: type=1400 audit(1770636994.635:623): avc: denied { shutdown } for pid=3726 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.650344][ T29] audit: type=1400 audit(1770636994.635:624): avc: denied { write } for pid=3726 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.693512][ T29] audit: type=1400 audit(1770636994.715:625): avc: denied { relabelfrom } for pid=3734 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.713489][ T29] audit: type=1400 audit(1770636994.715:626): avc: denied { relabelto } for pid=3734 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 46.762465][ T3735] syzkaller0: entered promiscuous mode [ 46.768354][ T3735] syzkaller0: entered allmulticast mode [ 46.778753][ T29] audit: type=1400 audit(1770636994.805:627): avc: denied { create } for pid=3736 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.798716][ T29] audit: type=1326 audit(1770636994.805:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3736 comm="syz.4.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c70e6af79 code=0x0 [ 46.911494][ T29] audit: type=1400 audit(1770636994.935:629): avc: denied { firmware_load } for pid=3736 comm="syz.4.92" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 46.995090][ T3749] loop1: detected capacity change from 0 to 256 [ 47.048835][ T29] audit: type=1400 audit(1770636995.065:630): avc: denied { mount } for pid=3750 comm="syz.0.98" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.081581][ T3753] loop3: detected capacity change from 0 to 512 [ 47.098688][ T3756] loop0: detected capacity change from 0 to 128 [ 47.105291][ T3749] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.114425][ T3749] FAT-fs (loop1): Filesystem has been set read-only [ 47.125656][ T3756] msdos: Bad value for 'dmask' [ 47.137585][ T3753] EXT4-fs (loop3): 1 truncate cleaned up [ 47.146429][ T3749] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.159582][ T3749] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.169911][ T3748] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.181526][ T3749] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.189575][ T3753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.209072][ T3748] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.225679][ T3749] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.251561][ T3748] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.275519][ T3749] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.287856][ T3753] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.295494][ T3753] IPv6: NLM_F_CREATE should be set when creating new route [ 47.319009][ T3748] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.358789][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.400445][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.96'. [ 47.433318][ T3772] FAULT_INJECTION: forcing a failure. [ 47.433318][ T3772] name failslab, interval 1, probability 0, space 0, times 0 [ 47.447531][ T3772] CPU: 1 UID: 0 PID: 3772 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.447611][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 47.447625][ T3772] Call Trace: [ 47.447632][ T3772] [ 47.447643][ T3772] __dump_stack+0x1d/0x30 [ 47.447675][ T3772] dump_stack_lvl+0x95/0xd0 [ 47.447785][ T3772] dump_stack+0x15/0x1b [ 47.447814][ T3772] should_fail_ex+0x263/0x280 [ 47.447858][ T3772] should_failslab+0x8c/0xb0 [ 47.447892][ T3772] kmem_cache_alloc_noprof+0x68/0x490 [ 47.447986][ T3772] ? skb_clone+0x151/0x1f0 [ 47.448014][ T3772] skb_clone+0x151/0x1f0 [ 47.448039][ T3772] __netlink_deliver_tap+0x2c9/0x500 [ 47.448142][ T3772] netlink_unicast+0x66b/0x690 [ 47.448179][ T3772] netlink_sendmsg+0x5c8/0x6f0 [ 47.448208][ T3772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.448226][ T3772] ____sys_sendmsg+0x5af/0x600 [ 47.448252][ T3772] ___sys_sendmsg+0x195/0x1e0 [ 47.448287][ T3772] __x64_sys_sendmsg+0xd4/0x160 [ 47.448315][ T3772] x64_sys_call+0x17ba/0x3000 [ 47.448383][ T3772] do_syscall_64+0xc0/0x2a0 [ 47.448425][ T3772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.448473][ T3772] RIP: 0033:0x7ff88e55af79 [ 47.448527][ T3772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.448550][ T3772] RSP: 002b:00007ff88cfaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.448577][ T3772] RAX: ffffffffffffffda RBX: 00007ff88e7d5fa0 RCX: 00007ff88e55af79 [ 47.448596][ T3772] RDX: 0000000020000084 RSI: 0000200000004340 RDI: 0000000000000004 [ 47.448613][ T3772] RBP: 00007ff88cfaf090 R08: 0000000000000000 R09: 0000000000000000 [ 47.448660][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.448674][ T3772] R13: 00007ff88e7d6038 R14: 00007ff88e7d5fa0 R15: 00007ffd2e239818 [ 47.448774][ T3772] [ 47.696195][ T3744] syz.4.92 (3744) used greatest stack depth: 10224 bytes left [ 47.725144][ T3775] netlink: 'syz.1.96': attribute type 2 has an invalid length. [ 47.877118][ T3794] rdma_op ffff888105a1f180 conn xmit_rdma 0000000000000000 [ 47.891074][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 47.901481][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.112'. [ 47.985879][ T3798] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 48.004279][ T3792] FAULT_INJECTION: forcing a failure. [ 48.004279][ T3792] name failslab, interval 1, probability 0, space 0, times 0 [ 48.019111][ T3792] CPU: 1 UID: 0 PID: 3792 Comm: syz.0.111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.019140][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 48.019153][ T3792] Call Trace: [ 48.019161][ T3792] [ 48.019177][ T3792] __dump_stack+0x1d/0x30 [ 48.019238][ T3792] dump_stack_lvl+0x95/0xd0 [ 48.019262][ T3792] dump_stack+0x15/0x1b [ 48.019288][ T3792] should_fail_ex+0x263/0x280 [ 48.019330][ T3792] should_failslab+0x8c/0xb0 [ 48.019412][ T3792] kmem_cache_alloc_noprof+0x68/0x490 [ 48.019443][ T3792] ? alloc_empty_file+0x76/0x200 [ 48.019491][ T3792] alloc_empty_file+0x76/0x200 [ 48.019527][ T3792] path_openat+0x62/0x23c0 [ 48.019581][ T3792] ? _parse_integer_limit+0x170/0x190 [ 48.019612][ T3792] ? _parse_integer+0x27/0x40 [ 48.019639][ T3792] ? kstrtoull+0x111/0x140 [ 48.019673][ T3792] ? kstrtouint+0x76/0xc0 [ 48.019761][ T3792] do_filp_open+0x15d/0x280 [ 48.019810][ T3792] do_sys_openat2+0xa6/0x150 [ 48.019925][ T3792] __x64_sys_openat+0xf2/0x120 [ 48.020008][ T3792] x64_sys_call+0x2b07/0x3000 [ 48.020042][ T3792] do_syscall_64+0xc0/0x2a0 [ 48.020092][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.020115][ T3792] RIP: 0033:0x7ffba13daf79 [ 48.020132][ T3792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.020176][ T3792] RSP: 002b:00007ffb9fe2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.020204][ T3792] RAX: ffffffffffffffda RBX: 00007ffba1655fa0 RCX: 00007ffba13daf79 [ 48.020227][ T3792] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 48.020275][ T3792] RBP: 00007ffb9fe2f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.020292][ T3792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.020310][ T3792] R13: 00007ffba1656038 R14: 00007ffba1655fa0 R15: 00007ffccf5ddc98 [ 48.020345][ T3792] [ 48.579902][ T3816] FAULT_INJECTION: forcing a failure. [ 48.579902][ T3816] name failslab, interval 1, probability 0, space 0, times 0 [ 48.593241][ T3816] CPU: 0 UID: 0 PID: 3816 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.593278][ T3816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 48.593295][ T3816] Call Trace: [ 48.593306][ T3816] [ 48.593317][ T3816] __dump_stack+0x1d/0x30 [ 48.593350][ T3816] dump_stack_lvl+0x95/0xd0 [ 48.593436][ T3816] dump_stack+0x15/0x1b [ 48.593457][ T3816] should_fail_ex+0x263/0x280 [ 48.593492][ T3816] should_failslab+0x8c/0xb0 [ 48.593525][ T3816] __kvmalloc_node_noprof+0x148/0x680 [ 48.593635][ T3816] ? page_pool_create_percpu+0x223/0x640 [ 48.593680][ T3816] page_pool_create_percpu+0x223/0x640 [ 48.593723][ T3816] page_pool_create+0x1a/0x30 [ 48.593778][ T3816] bpf_test_run_xdp_live+0x1a8/0x1360 [ 48.593817][ T3816] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 48.593847][ T3816] ? __pfx_autoremove_wake_function+0x10/0x10 [ 48.593936][ T3816] ? mutex_unlock+0x4e/0x90 [ 48.593962][ T3816] ? 0xffffffffa0205240 [ 48.593976][ T3816] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 48.594034][ T3816] ? 0xffffffffa0205240 [ 48.594068][ T3816] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 48.594101][ T3816] bpf_prog_test_run_xdp+0x57b/0xa10 [ 48.594137][ T3816] ? __rcu_read_unlock+0x4e/0x70 [ 48.594228][ T3816] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 48.594274][ T3816] bpf_prog_test_run+0x204/0x340 [ 48.594313][ T3816] __sys_bpf+0x4c0/0x7b0 [ 48.594432][ T3816] __x64_sys_bpf+0x41/0x50 [ 48.594465][ T3816] x64_sys_call+0x28e1/0x3000 [ 48.594500][ T3816] do_syscall_64+0xc0/0x2a0 [ 48.594614][ T3816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.594645][ T3816] RIP: 0033:0x7ffba13daf79 [ 48.594666][ T3816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.594691][ T3816] RSP: 002b:00007ffb9fe2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 48.594814][ T3816] RAX: ffffffffffffffda RBX: 00007ffba1655fa0 RCX: 00007ffba13daf79 [ 48.594833][ T3816] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 48.594887][ T3816] RBP: 00007ffb9fe2f090 R08: 0000000000000000 R09: 0000000000000000 [ 48.594903][ T3816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.594927][ T3816] R13: 00007ffba1656038 R14: 00007ffba1655fa0 R15: 00007ffccf5ddc98 [ 48.594955][ T3816] [ 48.594966][ T3816] page_pool_create_percpu() gave up with errno -12 [ 48.951339][ T3828] rdma_op ffff888104b9c180 conn xmit_rdma 0000000000000000 [ 49.005034][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 49.023641][ T3831] sctp: [Deprecated]: syz.0.125 (pid 3831) Use of int in max_burst socket option deprecated. [ 49.023641][ T3831] Use struct sctp_assoc_value instead [ 49.051879][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 49.148499][ T3838] process 'syz.3.128' launched './file2' with NULL argv: empty string added [ 49.203089][ T3840] loop4: detected capacity change from 0 to 1024 [ 49.216469][ T3840] ======================================================= [ 49.216469][ T3840] WARNING: The mand mount option has been deprecated and [ 49.216469][ T3840] and is ignored by this kernel. Remove the mand [ 49.216469][ T3840] option from the mount to silence this warning. [ 49.216469][ T3840] ======================================================= [ 49.273592][ T3837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.358781][ T3840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.375291][ T3842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.648454][ T3869] loop0: detected capacity change from 0 to 512 [ 49.808909][ T3874] FAULT_INJECTION: forcing a failure. [ 49.808909][ T3874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.822833][ T3874] CPU: 0 UID: 0 PID: 3874 Comm: syz.3.134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.822944][ T3874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 49.822958][ T3874] Call Trace: [ 49.822966][ T3874] [ 49.823020][ T3874] __dump_stack+0x1d/0x30 [ 49.823052][ T3874] dump_stack_lvl+0x95/0xd0 [ 49.823081][ T3874] dump_stack+0x15/0x1b [ 49.823103][ T3874] should_fail_ex+0x263/0x280 [ 49.823139][ T3874] should_fail+0xb/0x20 [ 49.823184][ T3874] should_fail_usercopy+0x1a/0x20 [ 49.823227][ T3874] _copy_to_user+0x20/0xa0 [ 49.823260][ T3874] bpf_test_finish+0x117/0x500 [ 49.823303][ T3874] ? ktime_get+0x1eb/0x210 [ 49.823327][ T3874] bpf_prog_test_run_flow_dissector+0x2c9/0x360 [ 49.823440][ T3874] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 49.823479][ T3874] bpf_prog_test_run+0x204/0x340 [ 49.823516][ T3874] __sys_bpf+0x4c0/0x7b0 [ 49.823576][ T3874] __x64_sys_bpf+0x41/0x50 [ 49.823608][ T3874] x64_sys_call+0x28e1/0x3000 [ 49.823688][ T3874] do_syscall_64+0xc0/0x2a0 [ 49.823730][ T3874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.823760][ T3874] RIP: 0033:0x7f393190af79 [ 49.823780][ T3874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.823804][ T3874] RSP: 002b:00007f3930367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 49.823888][ T3874] RAX: ffffffffffffffda RBX: 00007f3931b85fa0 RCX: 00007f393190af79 [ 49.823906][ T3874] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 49.824000][ T3874] RBP: 00007f3930367090 R08: 0000000000000000 R09: 0000000000000000 [ 49.824044][ T3874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.824060][ T3874] R13: 00007f3931b86038 R14: 00007f3931b85fa0 R15: 00007fff34c0e0b8 [ 49.824086][ T3874] [ 50.156749][ T3876] loop3: detected capacity change from 0 to 1024 [ 50.306139][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.436430][ T3881] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.136'. [ 50.446594][ T3881] netlink: zone id is out of range [ 50.451742][ T3881] netlink: zone id is out of range [ 50.467172][ T3881] netlink: set zone limit has 8 unknown bytes [ 50.533890][ T3885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 50.557491][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.645788][ T3889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.139'. [ 50.832995][ T3901] SELinux: Context ømMAh`ix: is not valid (left unmapped). [ 51.267193][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.364039][ T3912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 51.384091][ T3912] netlink: 'syz.3.147': attribute type 22 has an invalid length. [ 51.424804][ T1658] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.438041][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 51.438060][ T29] audit: type=1400 audit(1770636999.465:872): avc: denied { read } for pid=3913 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 51.465584][ T3912] netlink: 'syz.3.147': attribute type 22 has an invalid length. [ 51.475979][ T1658] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.485242][ T1658] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.494853][ T1658] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.542154][ T3918] loop4: detected capacity change from 0 to 1024 [ 51.581295][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.694548][ T29] audit: type=1400 audit(1770636999.715:873): avc: denied { read } for pid=3928 comm="syz.3.153" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.719146][ T29] audit: type=1400 audit(1770636999.715:874): avc: denied { open } for pid=3928 comm="syz.3.153" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 51.792869][ T3931] __nla_validate_parse: 2 callbacks suppressed [ 51.792889][ T3931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 51.823443][ T3933] loop3: detected capacity change from 0 to 512 [ 51.839281][ T3933] ext4: Unknown parameter 'fowner' [ 51.850662][ T3307] udevd[3307]: incorrect ext4 checksum on /dev/loop3 [ 51.919725][ T29] audit: type=1326 audit(1770636999.945:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393190af79 code=0x7ffc0000 [ 51.969898][ T29] audit: type=1326 audit(1770636999.945:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393190af79 code=0x7ffc0000 [ 51.996323][ T29] audit: type=1326 audit(1770636999.945:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393190af79 code=0x7ffc0000 [ 52.026929][ T29] audit: type=1326 audit(1770636999.945:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393190af79 code=0x7ffc0000 [ 52.054412][ T29] audit: type=1326 audit(1770636999.945:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f393190af79 code=0x7ffc0000 [ 52.079016][ T29] audit: type=1326 audit(1770636999.945:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393190af79 code=0x7ffc0000 [ 52.103053][ T29] audit: type=1326 audit(1770636999.945:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393190af79 code=0x7ffc0000 [ 52.155835][ T3940] loop2: detected capacity change from 0 to 1024 [ 52.178339][ T3940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.241416][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 52.425854][ T3957] FAULT_INJECTION: forcing a failure. [ 52.425854][ T3957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.439662][ T3957] CPU: 0 UID: 0 PID: 3957 Comm: syz.1.165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.439763][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 52.439776][ T3957] Call Trace: [ 52.439784][ T3957] [ 52.439792][ T3957] __dump_stack+0x1d/0x30 [ 52.439825][ T3957] dump_stack_lvl+0x95/0xd0 [ 52.439855][ T3957] dump_stack+0x15/0x1b [ 52.439935][ T3957] should_fail_ex+0x263/0x280 [ 52.439978][ T3957] should_fail+0xb/0x20 [ 52.440015][ T3957] should_fail_usercopy+0x1a/0x20 [ 52.440125][ T3957] _copy_to_user+0x20/0xa0 [ 52.440202][ T3957] simple_read_from_buffer+0xb5/0x130 [ 52.440250][ T3957] proc_fail_nth_read+0x10e/0x150 [ 52.440287][ T3957] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.440322][ T3957] vfs_read+0x1ab/0x7f0 [ 52.440393][ T3957] ? __rcu_read_unlock+0x4e/0x70 [ 52.440469][ T3957] ? __fget_files+0x184/0x1c0 [ 52.440493][ T3957] ? fdget_pos+0x26/0x1d0 [ 52.440522][ T3957] ? mutex_lock+0x57/0x90 [ 52.440685][ T3957] ksys_read+0xdc/0x1a0 [ 52.440712][ T3957] __x64_sys_read+0x40/0x50 [ 52.440738][ T3957] x64_sys_call+0x2889/0x3000 [ 52.440772][ T3957] do_syscall_64+0xc0/0x2a0 [ 52.440851][ T3957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.440947][ T3957] RIP: 0033:0x7f7fc9d6b84e [ 52.441003][ T3957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 52.441026][ T3957] RSP: 002b:00007f7fc8806fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.441053][ T3957] RAX: ffffffffffffffda RBX: 00007f7fc88076c0 RCX: 00007f7fc9d6b84e [ 52.441137][ T3957] RDX: 000000000000000f RSI: 00007f7fc88070a0 RDI: 0000000000000004 [ 52.441154][ T3957] RBP: 00007f7fc8807090 R08: 0000000000000000 R09: 0000000000000000 [ 52.441172][ T3957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.441188][ T3957] R13: 00007f7fca026038 R14: 00007f7fca025fa0 R15: 00007ffca61377a8 [ 52.441214][ T3957] [ 52.651787][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.682097][ T3959] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 52.759359][ T3960] netlink: 160 bytes leftover after parsing attributes in process `syz.1.167'. [ 53.089640][ T3965] vlan0: entered promiscuous mode [ 53.336052][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.447831][ T3972] rdma_op ffff88811bfdb980 conn xmit_rdma 0000000000000000 [ 53.459531][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 53.469652][ T3972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 53.512143][ T3964] Set syz1 is full, maxelem 65536 reached [ 53.615124][ T3976] loop2: detected capacity change from 0 to 1024 [ 53.678623][ T3976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.767326][ T3981] loop3: detected capacity change from 0 to 1024 [ 53.817897][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.842191][ T3981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.957207][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.967875][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 54.038544][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 54.176274][ T3996] loop3: detected capacity change from 0 to 128 [ 54.194118][ T3996] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.219191][ T3998] loop2: detected capacity change from 0 to 1024 [ 54.232230][ T3996] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.265870][ T3998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.398423][ T4003] loop1: detected capacity change from 0 to 1024 [ 54.406457][ T3996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.177'. [ 54.436874][ T4003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.499447][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.531675][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.179'. [ 54.786030][ T4016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.864078][ T4016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.940042][ T4027] syzkaller1: entered promiscuous mode [ 54.946174][ T4027] syzkaller1: entered allmulticast mode [ 54.970686][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.022912][ T4031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.186'. [ 55.051874][ T4031] loop2: detected capacity change from 0 to 1024 [ 55.097388][ T4031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.118499][ T3402] ================================================================== [ 55.127136][ T3402] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 55.134300][ T3402] [ 55.136666][ T3402] read-write to 0xffff888237c2a524 of 4 bytes by task 3388 on cpu 0: [ 55.145055][ T3402] wq_worker_running+0x95/0x120 [ 55.150372][ T3402] synchronize_rcu_expedited+0x5f8/0x770 [ 55.156131][ T3402] synchronize_rcu+0x35/0x2e0 [ 55.160849][ T3402] free_ipc+0x82/0x200 [ 55.164958][ T3402] process_scheduled_works+0x4cd/0x9d0 [ 55.171392][ T3402] worker_thread+0x6bc/0x8b0 [ 55.176099][ T3402] kthread+0x488/0x510 [ 55.180236][ T3402] ret_from_fork+0x148/0x280 [ 55.184862][ T3402] ret_from_fork_asm+0x1a/0x30 [ 55.189853][ T3402] [ 55.192493][ T3402] read to 0xffff888237c2a524 of 4 bytes by task 3402 on cpu 1: [ 55.200604][ T3402] kick_pool+0x49/0x2d0 [ 55.204897][ T3402] __queue_work+0x896/0xad0 [ 55.209742][ T3402] queue_work_on+0xa9/0x140 [ 55.214433][ T3402] wg_packet_encrypt_worker+0xbdd/0xde0 [ 55.220270][ T3402] process_scheduled_works+0x4cd/0x9d0 [ 55.225784][ T3402] worker_thread+0x6bc/0x8b0 [ 55.230387][ T3402] kthread+0x488/0x510 [ 55.234840][ T3402] ret_from_fork+0x148/0x280 [ 55.239613][ T3402] ret_from_fork_asm+0x1a/0x30 [ 55.245411][ T3402] [ 55.247837][ T3402] value changed: 0x00000000 -> 0x00000001 [ 55.253818][ T3402] [ 55.256150][ T3402] Reported by Kernel Concurrency Sanitizer on: [ 55.262410][ T3402] CPU: 1 UID: 0 PID: 3402 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.272314][ T3402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 55.282383][ T3402] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 55.288905][ T3402] ================================================================== [ 55.307152][ T4031] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.353734][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.448524][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.