last executing test programs: 3.996220948s ago: executing program 2 (id=319): r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x29, 0x40, &(0x7f0000000000)=""/84, &(0x7f0000001ffc)=0x54) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x1}}, 0x10) connect$tipc(r1, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) 3.844888777s ago: executing program 2 (id=321): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7, 0x4, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x4}, 0x0, 0x4000000000030, 0x43a1bd76, 0x7, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, 0x100a}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000110005"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x24000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = dup(r8) write$P9_RLERROR(r9, &(0x7f0000001040)=ANY=[@ANYBLOB="5500000042f3ff0000"], 0x9) io_setup(0x2, &(0x7f0000000040)=0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r11, 0x0) io_submit(r10, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r11, 0x0}]) sendto$inet6(r11, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x100}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r13 = syz_io_uring_setup(0x3a9d, &(0x7f0000000400)={0x0, 0x2804, 0x1, 0xfffffffc, 0x1af}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r14, r15, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r13, 0x7a98, 0xb816, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xa}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x2, 0xeb, 0x4, 0x7fff, 0x0, 0x7, 0x3, 0x0, 0x40011, 0xfffffff3, 0x40, 0x7, 0x57, 0xc, 0xb, 0x9, 0x7ff, 0x683, 0xfffff841, 0x9c8, 0x1000, 0x2c50, 0x2, 0x7, 0x8000, 0x13, 0x6, 0x4, 0xd, 0x2, 0x5, 0x3ff, 0x80000001, 0x5, 0x3, 0x6, 0x3, 0x1ff, 0x0, 0x72, 0x7fff, 0x80000000, 0x6, 0x1, 0x1c00002, 0x0, 0xf, 0x1ff, 0x800, 0x10, 0xfffffbff, 0x1, 0x400fff, 0x9, 0x3, 0x4, 0x4, 0x0, 0xfffffffd, 0x5, 0x6, 0x6, 0x268, 0x2, 0x1, 0x1e0, 0x8, 0x4, 0x8, 0x0, 0x7, 0x7, 0x9395, 0x5, 0x1, 0x2, 0xfffffffc, 0x5, 0x5, 0x2, 0x1, 0x1, 0x6, 0x0, 0x22, 0xfffffff4, 0x0, 0x401, 0xd66a, 0x4, 0x9ca, 0x1, 0x4, 0x1, 0x1096, 0x1, 0x1, 0x1, 0xfffffffd, 0x1, 0x1, 0x3, 0x0, 0xfffff6a5, 0x0, 0x10000, 0x5, 0x425a2927, 0x5, 0xf, 0x0, 0x6, 0xc7b, 0xfffffffd, 0x2, 0x9, 0x10, 0x800, 0xb6b, 0x6, 0x52383756, 0x1, 0xff, 0x101, 0x11e5, 0x10001, 0x2, 0x3ff, 0x81, 0x15, 0xc0000000, 0x8, 0xee0, 0x2, 0xc0c, 0x401, 0x2, 0xfee, 0x3, 0xffffffff, 0x9, 0x8, 0x2, 0x9, 0x9, 0x5, 0x1, 0x9, 0x5, 0x1, 0x7, 0x599, 0x10, 0x5, 0x1, 0x0, 0x7, 0x3, 0xffff0e76, 0x5, 0x8, 0x40, 0x10001, 0x0, 0x9, 0x6, 0x5, 0x7, 0x3, 0x74, 0xfffff1dc, 0x1, 0x5, 0x5, 0x2, 0x8, 0x400, 0x8000, 0x7, 0x5, 0x7, 0xffff, 0x7, 0x8, 0x80, 0xe7e6, 0x8000, 0x7, 0x5, 0x5, 0x3, 0x5, 0x7, 0x10000, 0x6, 0x8, 0x101, 0x7, 0x6, 0x8000, 0x7, 0x3, 0xfffffffb, 0xc5, 0x7fffffff, 0x10000, 0xc, 0xf, 0x36, 0xca, 0x3, 0x0, 0x6dd4, 0x6, 0x1ff, 0x5, 0xfffffff7, 0x9, 0x8, 0x5, 0x80000001, 0x5, 0x1, 0xff, 0xfffffff9, 0x33f6, 0xfffffff7, 0x3, 0x8, 0x2, 0x4, 0x3, 0x2, 0xbf, 0x7, 0x8, 0x6, 0x1, 0x10, 0x81, 0x7, 0x9, 0x10, 0x7f, 0x3, 0x1, 0x8001, 0x9, 0x81, 0x8, 0x1000, 0xe, 0x6, 0x8, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x8, 0xfffffffffffffff9, 0x6, 0x9, 0x6, 0x0, [{0x9, 0x8, 0x4, '\x00', 0xc00}, {0x0, 0x4, 0x666a, '\x00', 0x2000}, {0x8, 0x8, 0x1, '\x00', 0x700}, {0x5, 0x9, 0x1ff, '\x00', 0x782}, {0x5, 0xfffffffffffffffb, 0xfffffffffffffff7, '\x00', 0xc00}, {0xcae, 0x7, 0xc6d4, '\x00', 0x10c}]}) 3.743278623s ago: executing program 2 (id=322): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) stat(0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) socket$inet_sctp(0x2, 0x5, 0x84) (async) setns(r1, 0x24020000) (async, rerun: 64) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async, rerun: 64) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000240012800c0001006d6163766c616e00140002800800030003000000080001000800000008000500", @ANYRES32=r6, @ANYBLOB="9ab476510cdf24ef9de51f76b98e52747ebba1bbb05942393d66da9e7199e7c509f10ca458961c3db21b97fe6c01766584c36b3b2f20385995a6b02d223be86aa69d9b2988e54477c079f8990e92433e152c3b6a369c95c1764c1cf1f1d8e4857bc816e93b393306c2bdf44a8c28f5eb3f89746f422323a03d083ca9e7a91d90f7b059d9f7076ed052e8e5050f75bffcd05290518bac1a815840864f9eb34e3ee2f1e068abc4a1be88f0924e01fde496f326d731bfd1c8186a2f1b485a4a42810b4c5a9cdcfdc581963cb3a040fd401f80b0"], 0x4c}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x8000002) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newroute={0x68, 0x18, 0x300, 0x70bd2a, 0x25dfdbfb, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0xff, 0x8, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @RTA_MULTIPATH={0xc, 0x9, {0x4000, 0x6, 0xa6}}, @RTA_PRIORITY={0x8, 0x6, 0x9}, @RTA_PRIORITY={0x8, 0x6, 0x736a7421}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x15, 0x2, r6}}, @RTA_MARK={0x8, 0x10, 0xb}, @RTA_UID={0x8}]}, 0x68}}, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) r7 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) (async, rerun: 64) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x79, 0x4}, @restrict={0x10, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x61, 0x30]}}, 0x0, 0x39, 0x0, 0x1, 0x9}, 0x28) (async) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811210000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) syz_clone(0x623f, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) io_uring_enter(r7, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 3.411637182s ago: executing program 2 (id=324): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19e5ffff030000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880), 0x2000000}, 0x20) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000040)=0x1ff, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5411, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000140)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c00078005001500000000000500010006000000050005000201000005000400000000000900020073797a300000000011000300686173683a6e65742c6e657400000000"], 0x58}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$l2tp6(0xa, 0x2, 0x73) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="200028bd7000ffdbdf254d000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040), 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a004e2000000080fe88000000000000000000000000000130ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2000000004fe88000000000000000000000000000105000000000000000000000000000000000000000000000000000000000056d3ccd2893caa4900"/272], 0x110) socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010a0000000004000000070000007a"], 0x20}}, 0x40000) socket$can_bcm(0x1d, 0x2, 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) dup3(r5, r4, 0x0) 2.845461664s ago: executing program 2 (id=330): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xa01, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, 0xb029}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffd}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) creat(&(0x7f0000000080)='./bus\x00', 0x48) (async) creat(&(0x7f0000000080)='./bus\x00', 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.70887472s ago: executing program 0 (id=343): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000fcf7efff0000000000000000850000004100000018110000", @ANYBLOB="0000000000000000b7080000150f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.705397221s ago: executing program 2 (id=344): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100"], 0x84}}, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000040)=ANY=[], 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000000080000000004000"}}}]}, 0x48}}, 0x0) 1.701876001s ago: executing program 3 (id=346): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32) copy_file_range(r2, 0x0, r2, 0x0, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}, @IFLA_IFALIASn={0x4}, @IFLA_IFALIASn={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffd]}, 0x8, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0) (async, rerun: 64) semop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12) (rerun: 64) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000480)=[0x9, 0x1000]) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (rerun: 32) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (async) signalfd4(r3, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) (async, rerun: 32) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x6037}], 0x1, 0x1822b, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x730) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) (rerun: 32) 1.680553502s ago: executing program 0 (id=347): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000280)=""/5, 0x2e, 0x5, 0x1, 0x1}, 0x28) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f{\xaav\xe1\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_w\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b9a6, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0x1}, {0xffff, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r6, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r6, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) sendto$packet(r5, &(0x7f0000000480)="ba927abbc9b55400040000db0732a85d86dd", 0x12, 0x0, &(0x7f0000000340)={0x11, 0x88a8, r4, 0x1, 0xd8, 0x6, @random="0e476a04c52a"}, 0x14) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) io_getevents(r0, 0x1a, 0x0, 0x0, 0x0) 1.309611514s ago: executing program 1 (id=351): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f00000012c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\x97d\x00\x00\x00\x00\x00\x00\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc23l\x9c\xda\xed\x98\x0fK=X\xfdY`l\xe7\x00K\xc2K\xb34\xd8\x1e\xa7\nEJ\x9b\x1bb\x80|`\xfb\x16\xcf5F\xac\xae=r\x8c)\x97\x9e7\xd7\x01\x0e\a\x17F\xb8\x1eD\r-\x11o\xa1X\x90\x8f^\xf0S\xb2\xce\x06\xa4\x8e\xc6\x9a:\xd9\x02\x90\x8db\xee\xc7}\xb0W\xea\xcbm\x17.%\"\xec\x9d\x90\xb7[W\xce\xb9^\xa3|\xd4\xeb\xc1\xcd@\x15n/\xbf\x86\xea\xe9O\xaf\xee\x88W\x0f00~\xf2\xe9\xcdm\xb9e|O.\xc8\x85\x1a\xe9\xcf\xe5\x1e\x86\xaa\xed|\x15i\xeb4pv\"\fd\xa4\xf4\xc0\xac\x8eO\xb8\xa8\x8e\x9c\x0f\xf9\x80\x90\xdf3[\xee\r\x88\x9f', 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x401, 0x91) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) fcntl$dupfd(r0, 0x4c2bf71fad182261, r1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x439, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x80, 0x40480}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x200040c0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000cbbbb7000400000b19000000000000"], 0x20}}, 0x4000000) 1.275904235s ago: executing program 4 (id=352): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 1.208456s ago: executing program 3 (id=353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xa8, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="151700000000000008000a00", @ANYRES32=r7, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="214db848b70dd1bb061533545f1e06e787e6353c2383ee5fd22575334118d4369b757c"], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x6, 0x0}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x40) close(r9) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', r7, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r12 = creat(&(0x7f0000000200)='./file0\x00', 0x20) splice(r11, 0x0, r12, 0x0, 0x8000, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x14, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@generic={0x4, 0x5, 0x5, 0xe, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x60700, 0x28, '\x00', r1, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0xd, 0x8, 0x8}, 0x10, r8, r0, 0x1, &(0x7f00000009c0)=[r10, r12, r13, r14], &(0x7f0000000a00)=[{0x2, 0x5, 0xe, 0x3}], 0x10, 0x7}, 0x94) 1.20379596s ago: executing program 4 (id=354): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xffffffff}}, 0x10) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xffffffff}}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket(0xa, 0x5, 0x0) getsockopt$inet6_mreq(r3, 0x84, 0x15, 0x0, &(0x7f0000000b00)) sendto$inet6(r2, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x1040, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x1040, 0x4) sendmmsg$inet6(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="be21aaf00ebad1e49cbefa66d68d1cf3a4022754994a1f69284e614ca01de67ad6feea41329e9bab451c3ecd457de46df94a1dc2e9cac8b71d06854d84ab87813d3637997944ecba92f2468d4cd3aa642c08d191fe4a1be10401e7f9aa51d6", 0x5f}], 0x1}}], 0x1, 0x28) recvfrom$inet6(r2, 0x0, 0x0, 0x40000040, 0x0, 0x0) 1.19890239s ago: executing program 1 (id=355): r0 = socket$packet(0x11, 0x2, 0x300) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffe, 0x7, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x6, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000edd6af004b3a71b5d0a40600fca7281e487e4ff09d3c74f24aeb8a5bac7fa26384c8856f0ea9", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x44014}, 0x4004045) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$kcm(0xa, 0x922000000003, 0x11) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) copy_file_range(r1, &(0x7f0000000240)=0x4, r2, &(0x7f0000000340)=0x9, 0xce, 0x0) r4 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000480)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="0000023f3201"], 0x138) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60e2fa080014060000000000000000000000ffffe0000001f4ce8fce706af37700000000000000bb003c4001ab05d5000f91ef97eb3701e83de9a4550d70fc4e2ccf9b07c6020ba58a39db4a47", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1d, 0x0}, 0x8005d}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010000104000000000300000061560000", @ANYRES32=0x0, @ANYBLOB="10c00000000000001800128008000100677470"], 0x40}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) 1.03653851s ago: executing program 4 (id=356): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0xb4, r1, 0x1, 0x70bd2d, 0x65dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe6c, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) unshare(0x62040200) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0xb4, r1, 0x1, 0x70bd2d, 0x65dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe6c, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket(0x2a, 0x2, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, 0x0) (async) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) (async) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) (async) unshare(0x62040200) (async) 620.724594ms ago: executing program 1 (id=357): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000fcf7efff0000000000000000850000004100000018110000", @ANYBLOB="0000000000000000b7080000150f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 567.289307ms ago: executing program 1 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) 566.185077ms ago: executing program 1 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'xfrm0\x00', 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x100) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@initdev}, &(0x7f0000000600)=0x14) socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x8, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000500f707000b15000100010000400202000077d65f631e1b7b2704000000"], 0x174}}, 0x20000000) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x6a04c2, 0x0) pidfd_send_signal(r8, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f00000001c0)=0x2) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000c80)=ANY=[@ANYRES32=r4, @ANYRES16=r8, @ANYBLOB="018028bd7000fddbdf25090000003c0074ccb103800800010001000000140002006272696467655f736c6176655f3000000800030000001d4efa38c6a087d9c137332c5d862500001400060000000000ac"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4048800) 526.242399ms ago: executing program 1 (id=360): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x4, 0x3fa, &(0x7f00000004c0)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f00000002c0)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_win95}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@utf8no}]}, 0x81, 0x29b, &(0x7f0000000580)="$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") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05032800d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r1, &(0x7f00000002c0)="05032800d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfefffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x10020, 0x7f, 0x0, 0x7, 0xfff, 0x8001, 0xfff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfefffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x10020, 0x7f, 0x0, 0x7, 0xfff, 0x8001, 0xfff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x5, 0xfff2, 0x7, 0xfd0, 0x2}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="f92bd2d22b20", @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x65, 0x0, 0x5, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0x1, 0x0, @empty}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x140, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 501.918381ms ago: executing program 0 (id=361): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x44, "04000787b600eca6aa0825471829a0bc32e5cde91eaf6df1497941f89ca551d1e71f5751669dbe000008000000000000000000000000006379f280a850e86e82ec5ae80a"}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback={0xe0}, 0xfffffffc}, 0x1c) socket(0x1e, 0x805, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) r2 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x6) dup(r2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) 417.340846ms ago: executing program 0 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket(0x10, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000000)=[{&(0x7f00000001c0)="8f00000014006b05c84e21000ab16d8b230675f802000000040002005817530461bc24eeb556a705251e6182149a36c23d3b48dfd8cd81bf9367b098fa51f60a64c9f4080000000000b6c0504bb9189d9193e9bd1c1b7376dc5214168eab57c736b13ae90298536c3aa6b230606b45823c8f8e9616afbb519374c3e3875b0f3252fc5dfbc28369efcd300a95fcfcda", 0x8f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8094) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000240)={&(0x7f00000001c0)="9d3d92c5ebe43baff1aa71718dcc9599487b70e37554fb58debd3cff7bda74179fc787a710cc73cb08b5c6992541f14c34dbebb4a1be6990f45630ab4c64884fdd662453d8f579f5d532386b9653bee7e219dce46845ce8d6c4c3707570a1d1b185a770f27d0260a0033bfd6e89ad20bb1", 0x71}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0xa, 0xf}, {}, {0x4, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xc}}, @TCA_FLOW_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x880) 324.608291ms ago: executing program 3 (id=363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x40) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008821}, 0x6000801) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) setresuid(0x0, 0xee00, 0xffffffffffffffff) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x45a5, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20}) io_uring_enter(r4, 0x22d0, 0x20, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010027bd70000000000000000000", @ANYRES32=r0, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32, @ANYBLOB="0800030011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 321.631521ms ago: executing program 4 (id=364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000011c0)=@gettfilter={0x2c, 0x2e, 0x10, 0x70bd35, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xa, 0x4}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x2}]}, 0x2c}}, 0x8000) timer_create(0x2, &(0x7f0000001200)={0x0, 0x1c, 0x2, @thr={&(0x7f0000001300)="9bfbd2a5742f64f3c3f27d4a4831ec7083c2414797c93056d4ecf2ef61779d0ed38aca3c8fbf5a0700b2c33e3d2ee1f0ab4b9a2cabb0b63c64cac6efbd75c539d8c1bdb5a96ebfd97e77098dbf120c2dd00a48e94b5789687278bbf756b0d856b9d4eaea3c2e1177f4cf83a0ce7e", &(0x7f00000014c0)="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"}}, &(0x7f0000001280)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001800)=""/4104, 0x1008}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x2a, 0x2, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f000001b4c0)=@newtfilter={0xcc, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xfff3}}, @TCA_U32_SEL={0x94, 0x5, {0xe, 0x3, 0x8, 0x9, 0xd, 0x3, 0x2, 0x1, [{0x6, 0x5, 0x9, 0xfffffffb}, {0xfff, 0x8, 0xffff, 0x5}, {0x5, 0xcb, 0x10, 0x2}, {0x400, 0x800, 0x9, 0x5}, {0x6, 0x6, 0xfff, 0x8}, {0x58f3268a, 0x9, 0xfffffff7, 0x8}, {0x3, 0x7, 0x9, 0x2}, {0x10000, 0x3, 0x1, 0x8001}]}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f000001b4c0)=@newtfilter={0xcc, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0xfff3}}, @TCA_U32_SEL={0x94, 0x5, {0xe, 0x3, 0x8, 0x9, 0xd, 0x3, 0x2, 0x1, [{0x6, 0x5, 0x9, 0xfffffffb}, {0xfff, 0x8, 0xffff, 0x5}, {0x5, 0xcb, 0x10, 0x2}, {0x400, 0x800, 0x9, 0x5}, {0x6, 0x6, 0xfff, 0x8}, {0x58f3268a, 0x9, 0xfffffff7, 0x8}, {0x3, 0x7, 0x9, 0x2}, {0x10000, 0x3, 0x1, 0x8001}]}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000240)='\x04\x96\xf4', &(0x7f0000000180)="c704a135", 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x10) (async) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002480)=@newtfilter={0x14c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xc}, {0x0, 0xb}, {0x7, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x1f}, @filter_kind_options=@f_u32={{0x8}, {0xc8, 0x2, [@TCA_U32_SEL={0xc4, 0x5, {0x5, 0x8, 0xb, 0x1, 0x7ff, 0x3ff, 0x4, 0x100, [{0xcb93, 0x1810, 0xa92, 0x9}, {0xfc8e, 0x8, 0x0, 0xc}, {0x9, 0x49ed, 0x0, 0x10001}, {0x0, 0x1, 0xffffa834, 0xcbe}, {0xfffffffd, 0x8, 0x5, 0x5}, {0x7, 0x1, 0x38, 0x3a0}, {0x0, 0x58f0, 0xd, 0x5}, {0xe37, 0x2, 0x2, 0x5}, {0x3ff, 0x3, 0x40, 0x9}, {0x622, 0x6, 0xc, 0x79e14f7e}, {0x1000, 0xf8d0, 0xffffffff, 0x8}]}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="3c010000100013070000000100000000fe8000000000000000000000000000aafe8000000000000000000000000000aa000000004e2200000000202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d63300000064010100000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000400000800000000040000005fd400000100000001020000000000000a00000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000714272e2dcb5e672e74508645346509c222040c51749d305d8c075e42d8a6319f4384d0088616cc2deaa756e5aff5674f9ee4f5de096b25323e7aaa15c4fdb1685d3700ecd284473551b7fe4bb5ad196dd8ce68fea3fb94f897023cf1974f70cd91970b318e8909e2a0acf0613a400"/369], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008804) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 287.132593ms ago: executing program 3 (id=365): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 206.331648ms ago: executing program 0 (id=366): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1006}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r2) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x4}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4005) 136.980802ms ago: executing program 32 (id=366): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1006}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r2) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x4}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4005) 82.705225ms ago: executing program 4 (id=368): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x5, 0x7, 0x1, 0x0, 0x1, 0x200, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x6}, 0x82483, 0x100, 0x200, 0x4, 0x9, 0x4, 0x1, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0xfc, 0x0, 0x0, 0x8000000000000000, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) (async) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x5, 0x7, 0x1, 0x0, 0x1, 0x200, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x6}, 0x82483, 0x100, 0x200, 0x4, 0x9, 0x4, 0x1, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0xfc, 0x0, 0x0, 0x8000000000000000, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) 61.875786ms ago: executing program 3 (id=369): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000fcf7efff0000000000000000850000004100000018110000", @ANYBLOB="0000000000000000b7080000150f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 948.3µs ago: executing program 4 (id=370): r0 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000700)='./file0\x00', 0x1200414, &(0x7f0000000680)={[{@showassoc}, {@uid={'uid', 0x3d, 0xee01}}, {@hide}, {@uid}, {@check_relaxed}, {@overriderock}]}, 0x5, 0x56b, &(0x7f0000000a80)="$eJzs3E1v3MYZAOChbSWyWqgFgsaO4gPj5OAeonBXtQwhl24pSmKyu1yQVCCfiqCWA6NSWjQp0PhS+OK2QPsjgt76C3rKof8n6L0XFVzuyh/6sOoo3rh5HsCeWfJdzjvEYga7wssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIQoXU+SThT6+XB7J37aYgih7aXrZTE4PH5w8HTk9Hr/fKI5ZdwQouZfmJ8PV9tDV197dPonzX/Xw5X21ZUw3zTz4f4PXn81vHbpwvT9RxL+Zn5+ON0z+uyL+7/+eG9v93fnnMhsvXLmyM1smFdFPuhtZnFeFfHa6mry3tZGFW/k/ay6XdXZIE7LrFcXZXwj/WncWVtbibPl28X2cHO918+mB2+9202S1fiD5VHWK6ti+N4Hy1W6lff7+XBzHNOcbmJuNR/ED/M6rrPeII7v3tvbXXlWkk1Q5+jhi5OP2qOg7rOu1E263U6n2+2s3ly7eStJLh05kDwlHIk49w8tL5lzXL3hmzmY7P8AAADA/69o/Bt78/1/bvw7fBQ28n6WzDotAAAA4ByN//J/pWnmwlwIV0PUfv//46wTAwAAAM7Nnx/V2I0LosY1dj9+/7DG7nKoRq9GX/07lOVc9GC0806032vievuT+qmLT1+x3liKFicXGTerlyav0uxa9EYb9MY0+utJc/e4Wr/H8oiic0gg/DUstTFLd9r2zvRMO8rCRt7PltOi/34n9HqLF+psp/79p/f+EMbT/8twsBiFu/f2dpd/9Zu9O6Ody5MRH+xPCiiO1FGcksvnh3WPR2f8rx+1p7KkHfdyaMdNHp//hTbmwv8w5sPwZhvz5kLbLjw5//lm/p3lk2a/0GbRGe28s7j/4Lln/jBca2Ou3Xi7ad6+cUwW3Wdl0R3fi0kWz3UvzpDFymlZvBJCWDkxix+eKQuAWbl7yi7U1tgf2XfPtNZOz7ar3IvZ3R+Gt9qYt5bGC+ulpWNW9ORZ+0ry+Ir+HLvbP8L1Nub6NPikPbYZ929P7KrR/pfNG748cdyq342aW3jx8/3fhtc/++L+u/f2P/5k95PdT7vdldXkZ0lysxvmxtOYNPYeAI6RlV9HC/WforLMR7/srK11evVWFpdF+mFc5uubWZwP66xMt3rDzSwelUVdpEW/6XyUr2dVXG2PRkVZxxtFGY+KKt8ZP/nlPwfto1+qbNAb1nlajfpZr8ritBjWvbSO1/MqjUfbv+jn1VZWjt9cjbI038jTXp0Xw7gqtss0W47jKsseC8zXs2Gdb+RNdxiPynzQK2/HHxX97UEWr2dVWuajumgvOB0rH24U5WB82eXxjL+a9S0HgJk7fILdt9iZ9RwBgCfZpQEAAAAAAAAAAAAA4LvvpLq9v3+rFYGndaaZzWb0l7gz/91I43vWObj4YopoX3hntusSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABznvwEAAP//Uf6fCw==") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, 0x0, 0x0) close_range(r0, r4, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000100), &(0x7f0000000100)=""/13, 0x2}, 0x20) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r8, &(0x7f0000000080)='THAWED\x00', 0x7) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x4004001) 0s ago: executing program 3 (id=371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000080e4541790a2e30a2729d827a6c3df28db33fa677ae117b3f67451711fed842b9eea755a8fae73270224fb059140de4f34b3151c7f0686d6fa9047b960566a43556b6c41d6034ccd4f383e70b5b1e7c04f29fe626a5ea1a4d61f20eb1f3d2716229dfdfc90f21383907001e6b47a54b0ee33eeb1dbd3a036e33ec961b189dfce6f76a8ee166a233fdbb9e61027d1d07d3b6a74aea0c62f29eb55", @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c002d000201aaaaaaaaaaaa0c00050000000000000000000a0001007770616e3000000008002f000500000005002e001500000005002b0003000000"], 0x50}}, 0x40000) socket$kcm(0xa, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000840)={&(0x7f0000000000)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x180}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c0000000000000002900000037000000321400000000000001020000c20400000008040107c910fc000000000000000000000000000000040130010700000000000000df76d40a5d703da4be0c8d8be468d50c756a84bb1d5abaf64c12e3ea927db9d2047c30ae0267d82eef8bdcb9fbd5b1a7869c4bcdec2cc8a1ccc709b20b1fc3379f4b01c7420a1f9a244a73ffe424c749a36743d14c96886914d3a3db2f69baef5556076509236e959cc2c86cd23289b86503951c8368790900010000001400000000000000290000000b00000000000007000000001400000000000000290000000b000000ff"], 0xf0}, 0x4008000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) fcntl$F_GET_RW_HINT(r3, 0x40b, 0xfffffffffffffffc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x1000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x20, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1}, 0x103) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r8 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. [ 33.221233][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.221250][ T29] audit: type=1400 audit(1769535724.074:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.250391][ T29] audit: type=1400 audit(1769535724.104:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.252747][ T3299] cgroup: Unknown subsys name 'net' [ 33.278368][ T29] audit: type=1400 audit(1769535724.134:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.495991][ T3299] cgroup: Unknown subsys name 'cpuset' [ 33.502258][ T3299] cgroup: Unknown subsys name 'rlimit' [ 33.654113][ T29] audit: type=1400 audit(1769535724.504:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.677636][ T29] audit: type=1400 audit(1769535724.514:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.698222][ T29] audit: type=1400 audit(1769535724.514:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.718614][ T29] audit: type=1400 audit(1769535724.514:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.738904][ T29] audit: type=1400 audit(1769535724.524:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.760038][ T29] audit: type=1400 audit(1769535724.544:78): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.774301][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.785110][ T29] audit: type=1400 audit(1769535724.544:79): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.830668][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.715469][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.732968][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.775939][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.839479][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.846720][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.854041][ T3312] bridge_slave_0: entered allmulticast mode [ 35.860807][ T3312] bridge_slave_0: entered promiscuous mode [ 35.872860][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.880059][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.887671][ T3311] bridge_slave_0: entered allmulticast mode [ 35.894352][ T3311] bridge_slave_0: entered promiscuous mode [ 35.901071][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.908269][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.915661][ T3312] bridge_slave_1: entered allmulticast mode [ 35.922287][ T3312] bridge_slave_1: entered promiscuous mode [ 35.946354][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.953443][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.960675][ T3311] bridge_slave_1: entered allmulticast mode [ 35.967057][ T3311] bridge_slave_1: entered promiscuous mode [ 35.983926][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.991044][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.998233][ T3317] bridge_slave_0: entered allmulticast mode [ 36.004793][ T3317] bridge_slave_0: entered promiscuous mode [ 36.014354][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.021461][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.028744][ T3317] bridge_slave_1: entered allmulticast mode [ 36.035171][ T3317] bridge_slave_1: entered promiscuous mode [ 36.055844][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.083768][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.093946][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.112054][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.137559][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.148209][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.161523][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.171716][ T3311] team0: Port device team_slave_0 added [ 36.187085][ T3312] team0: Port device team_slave_0 added [ 36.210184][ T3317] team0: Port device team_slave_0 added [ 36.216527][ T3311] team0: Port device team_slave_1 added [ 36.222817][ T3312] team0: Port device team_slave_1 added [ 36.233297][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.243346][ T3317] team0: Port device team_slave_1 added [ 36.294718][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.301816][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.327824][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.339242][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.346232][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.372753][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.384604][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.391623][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.417752][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.434181][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.441196][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.467144][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.478335][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.485324][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.511394][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.522480][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.529553][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.555562][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.606177][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.613347][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.620590][ T3321] bridge_slave_0: entered allmulticast mode [ 36.627210][ T3321] bridge_slave_0: entered promiscuous mode [ 36.638340][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.645491][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.652683][ T3318] bridge_slave_0: entered allmulticast mode [ 36.659699][ T3318] bridge_slave_0: entered promiscuous mode [ 36.679691][ T3311] hsr_slave_0: entered promiscuous mode [ 36.686218][ T3311] hsr_slave_1: entered promiscuous mode [ 36.692284][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.699537][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.706776][ T3321] bridge_slave_1: entered allmulticast mode [ 36.713330][ T3321] bridge_slave_1: entered promiscuous mode [ 36.722069][ T3317] hsr_slave_0: entered promiscuous mode [ 36.728423][ T3317] hsr_slave_1: entered promiscuous mode [ 36.734202][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.740187][ T3317] Cannot create hsr debugfs directory [ 36.751314][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.758446][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.765696][ T3318] bridge_slave_1: entered allmulticast mode [ 36.772335][ T3318] bridge_slave_1: entered promiscuous mode [ 36.820378][ T3312] hsr_slave_0: entered promiscuous mode [ 36.827090][ T3312] hsr_slave_1: entered promiscuous mode [ 36.833162][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 36.839076][ T3312] Cannot create hsr debugfs directory [ 36.855587][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.877188][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.889979][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.910357][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.968635][ T3321] team0: Port device team_slave_0 added [ 36.984970][ T3318] team0: Port device team_slave_0 added [ 36.991434][ T3321] team0: Port device team_slave_1 added [ 37.010442][ T3318] team0: Port device team_slave_1 added [ 37.029455][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.036491][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.062436][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.088592][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.095696][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.122021][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.133136][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.140213][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.166435][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.180451][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.187519][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.213705][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.276872][ T3321] hsr_slave_0: entered promiscuous mode [ 37.282979][ T3321] hsr_slave_1: entered promiscuous mode [ 37.289008][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.294730][ T3321] Cannot create hsr debugfs directory [ 37.321701][ T3318] hsr_slave_0: entered promiscuous mode [ 37.328021][ T3318] hsr_slave_1: entered promiscuous mode [ 37.334043][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.339939][ T3318] Cannot create hsr debugfs directory [ 37.345576][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.372259][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.390186][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.405755][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.454488][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.463399][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.482865][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.494817][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.535382][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.556144][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.565821][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.583964][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.612851][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.633160][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.642923][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.653903][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.670277][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.710613][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.721604][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.738133][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.745329][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.755802][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.764688][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.774421][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.787316][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.794537][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.807344][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.866695][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.884008][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.891191][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.908473][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.923399][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.930685][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.954596][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.970221][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.994718][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.009619][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.016890][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.038269][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.045426][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.066951][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.088075][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.095318][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.105712][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.139002][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.151388][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.158586][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.207158][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.247298][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.271365][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.283932][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.313116][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.320400][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.334193][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.362880][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.370372][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.404084][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.518400][ T3312] veth0_vlan: entered promiscuous mode [ 38.552858][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.563954][ T3311] veth0_vlan: entered promiscuous mode [ 38.577140][ T3312] veth1_vlan: entered promiscuous mode [ 38.589547][ T3321] veth0_vlan: entered promiscuous mode [ 38.606193][ T3311] veth1_vlan: entered promiscuous mode [ 38.614983][ T3317] veth0_vlan: entered promiscuous mode [ 38.626879][ T3321] veth1_vlan: entered promiscuous mode [ 38.635576][ T3317] veth1_vlan: entered promiscuous mode [ 38.646552][ T3312] veth0_macvtap: entered promiscuous mode [ 38.665678][ T3312] veth1_macvtap: entered promiscuous mode [ 38.689715][ T3321] veth0_macvtap: entered promiscuous mode [ 38.698050][ T3311] veth0_macvtap: entered promiscuous mode [ 38.706285][ T3311] veth1_macvtap: entered promiscuous mode [ 38.722916][ T3321] veth1_macvtap: entered promiscuous mode [ 38.732868][ T3317] veth0_macvtap: entered promiscuous mode [ 38.751507][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.763128][ T3317] veth1_macvtap: entered promiscuous mode [ 38.777130][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.788200][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.800027][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.811398][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.829593][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.839612][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.854969][ T3335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.867394][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.877419][ T3335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.889116][ T3335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.910247][ T3335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.922713][ T3318] veth0_vlan: entered promiscuous mode [ 38.933913][ T3335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.943244][ T3335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.961082][ T3335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.970069][ T3335] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.979229][ T3335] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.991579][ T3318] veth1_vlan: entered promiscuous mode [ 39.002846][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 39.002865][ T29] audit: type=1400 audit(1769535729.854:90): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.kr3FNT/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.005019][ T3335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.025331][ T29] audit: type=1400 audit(1769535729.874:91): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.064412][ T29] audit: type=1400 audit(1769535729.874:92): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.kr3FNT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.089907][ T29] audit: type=1400 audit(1769535729.874:93): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.112071][ T29] audit: type=1400 audit(1769535729.874:94): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.kr3FNT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.139292][ T29] audit: type=1400 audit(1769535729.874:95): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.kr3FNT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.169107][ T29] audit: type=1400 audit(1769535729.904:96): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.189773][ T29] audit: type=1400 audit(1769535730.044:97): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.223226][ T3318] veth0_macvtap: entered promiscuous mode [ 39.226275][ T29] audit: type=1400 audit(1769535730.044:98): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.257294][ T3335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.266615][ T3335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.279979][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.304143][ T3318] veth1_macvtap: entered promiscuous mode [ 39.315427][ T3335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.334713][ T29] audit: type=1400 audit(1769535730.184:99): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.362164][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.412185][ T3335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.442977][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.474833][ T3335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.482236][ C1] hrtimer: interrupt took 97392 ns [ 39.522051][ T3491] lo speed is unknown, defaulting to 1000 [ 39.527780][ T3335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.541015][ T3493] loop4: detected capacity change from 0 to 1024 [ 39.554548][ T3335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.559828][ T3495] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6'. [ 39.575137][ T3491] lo speed is unknown, defaulting to 1000 [ 39.583606][ T3497] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.594944][ T3335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.625644][ T3497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.638850][ T3495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 39.656067][ T3497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.666691][ T3497] bond0 (unregistering): Released all slaves [ 39.696209][ T3335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.705148][ T3335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.705538][ T3491] lo speed is unknown, defaulting to 1000 [ 39.796673][ T3491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.828496][ T3491] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.973347][ T3491] lo speed is unknown, defaulting to 1000 [ 40.018585][ T3510] serio: Serial port ttyS3 [ 40.040724][ T3491] lo speed is unknown, defaulting to 1000 [ 40.060953][ T3491] lo speed is unknown, defaulting to 1000 [ 40.090251][ T3510] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 40.108137][ T3491] lo speed is unknown, defaulting to 1000 [ 40.132178][ T3491] lo speed is unknown, defaulting to 1000 [ 40.202760][ T3513] loop4: detected capacity change from 0 to 8192 [ 40.222073][ T3491] syz.2.3 (3491) used greatest stack depth: 10248 bytes left [ 40.276749][ T3516] loop1: detected capacity change from 0 to 512 [ 40.284990][ T3516] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.298368][ T3516] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.333261][ T3516] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.372136][ T3513] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 40.379514][ T3513] FAT-fs (loop4): Filesystem has been set read-only [ 40.406964][ T3518] Illegal XDP return value 4294967283 on prog (id 4) dev N/A, expect packet loss! [ 40.448010][ T3516] EXT4-fs (loop1): 1 truncate cleaned up [ 40.505935][ T3516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.619257][ T3524] syzkaller0: entered promiscuous mode [ 40.624917][ T3524] syzkaller0: entered allmulticast mode [ 40.660000][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 40.694173][ T3530] netlink: 'syz.1.11': attribute type 16 has an invalid length. [ 40.702872][ T3530] netlink: 'syz.1.11': attribute type 17 has an invalid length. [ 40.819851][ T3535] process 'syz.4.16' launched './file1' with NULL argv: empty string added [ 40.860088][ T36] IPVS: starting estimator thread 0... [ 40.955662][ T3537] IPVS: using max 2208 ests per chain, 110400 per kthread [ 41.103597][ T3540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17'. [ 41.141345][ T3530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.161386][ T3532] pim6reg: entered allmulticast mode [ 41.167684][ T3536] pim6reg: left allmulticast mode [ 41.190349][ T3516] pim6reg: entered allmulticast mode [ 41.196218][ T3525] pim6reg: left allmulticast mode [ 41.206700][ T3539] tipc: Enabling of bearer rejected, failed to enable media [ 41.228688][ T3527] syz.2.15 (3527) used greatest stack depth: 10224 bytes left [ 41.286000][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.304104][ T3544] loop2: detected capacity change from 0 to 1024 [ 41.333825][ T3544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.371936][ T3546] loop1: detected capacity change from 0 to 1024 [ 41.384387][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.416788][ T3546] EXT4-fs: Ignoring removed orlov option [ 41.422707][ T3546] EXT4-fs: test_dummy_encryption option not supported [ 41.454264][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.469769][ T3551] siw: device registration error -23 [ 41.501305][ T3551] netlink: 14 bytes leftover after parsing attributes in process `syz.4.21'. [ 41.604051][ T3546] loop1: detected capacity change from 0 to 164 [ 41.675069][ T3553] loop0: detected capacity change from 0 to 8192 [ 41.772158][ T3553] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 41.779599][ T3553] FAT-fs (loop0): Filesystem has been set read-only [ 41.862772][ T3551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.903085][ T3551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.930795][ T3551] bond0 (unregistering): Released all slaves [ 42.019773][ T23] lo speed is unknown, defaulting to 1000 [ 42.029086][ T3546] lo speed is unknown, defaulting to 1000 [ 42.059495][ T3565] loop0: detected capacity change from 0 to 128 [ 42.146484][ T3564] syz.0.24: attempt to access beyond end of device [ 42.146484][ T3564] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 42.379502][ T3584] tipc: Enabling of bearer rejected, failed to enable media [ 42.390312][ T3584] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30'. [ 42.430911][ T3590] loop1: detected capacity change from 0 to 164 [ 42.679877][ T3593] loop2: detected capacity change from 0 to 512 [ 42.847688][ T3590] rock: directory entry would overflow storage [ 42.854211][ T3590] rock: sig=0x4543, size=28, remaining=18 [ 42.894270][ T3593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.956487][ T3593] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.981789][ T3593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 43.052295][ T3614] capability: warning: `syz.3.37' uses deprecated v2 capabilities in a way that may be insecure [ 43.192398][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.229053][ T3613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.36'. [ 43.250845][ T3620] syzkaller0: mtu greater than device maximum [ 43.324495][ T3628] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.366828][ T3627] tipc: Started in network mode [ 43.371906][ T3627] tipc: Node identity 4, cluster identity 4711 [ 43.378406][ T3627] tipc: Node number set to 4 [ 43.416821][ T3639] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 43.532470][ T3653] tipc: Enabling of bearer rejected, failed to enable media [ 43.567379][ T3653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45'. [ 43.678277][ T3662] Zero length message leads to an empty skb [ 43.883336][ T3670] ======================================================= [ 43.883336][ T3670] WARNING: The mand mount option has been deprecated and [ 43.883336][ T3670] and is ignored by this kernel. Remove the mand [ 43.883336][ T3670] option from the mount to silence this warning. [ 43.883336][ T3670] ======================================================= [ 43.961156][ T3675] tipc: Started in network mode [ 43.966216][ T3675] tipc: Node identity 4, cluster identity 4711 [ 43.972425][ T3675] tipc: Node number set to 4 [ 44.047993][ T3670] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.060588][ T3670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.088585][ T3670] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.126053][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 44.126074][ T29] audit: type=1400 audit(1769535734.984:584): avc: denied { connect } for pid=3683 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.158313][ T3670] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.51: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 44.197649][ T3691] bridge0: port 3(syz_tun) entered blocking state [ 44.204191][ T3691] bridge0: port 3(syz_tun) entered disabled state [ 44.231465][ T3691] syz_tun: entered allmulticast mode [ 44.237199][ T3670] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.51: couldn't read orphan inode 11 (err -117) [ 44.250072][ T3693] mmap: syz.0.60 (3693) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.287923][ T3691] syz_tun: entered promiscuous mode [ 44.293688][ T3691] bridge0: port 3(syz_tun) entered blocking state [ 44.300230][ T3691] bridge0: port 3(syz_tun) entered forwarding state [ 44.346091][ T29] audit: type=1400 audit(1769535735.184:585): avc: denied { read } for pid=3699 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.365403][ T29] audit: type=1400 audit(1769535735.194:586): avc: denied { perfmon } for pid=3694 comm="syz.4.61" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.386356][ T29] audit: type=1326 audit(1769535735.194:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 44.409652][ T29] audit: type=1326 audit(1769535735.194:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 44.433036][ T29] audit: type=1326 audit(1769535735.194:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 44.433440][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.469291][ T29] audit: type=1326 audit(1769535735.194:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 44.492483][ T29] audit: type=1326 audit(1769535735.194:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 44.516063][ T29] audit: type=1326 audit(1769535735.194:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 44.539586][ T29] audit: type=1326 audit(1769535735.194:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.4.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 44.794101][ T3670] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.51: Invalid block bitmap block 0 in block_group 0 [ 44.823016][ T3670] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.51: Failed to acquire dquot type 0 [ 45.133339][ T3670] syz.2.51 (3670) used greatest stack depth: 9864 bytes left [ 45.145378][ T31] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm kworker/u8:1: Invalid inode table block 8589934593 in block_group 0 [ 45.178990][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.321918][ T3726] set_capacity_and_notify: 1 callbacks suppressed [ 45.321939][ T3726] loop0: detected capacity change from 0 to 512 [ 45.385904][ T3732] option changes via remount are deprecated (pid=3720 comm=syz.1.67) [ 45.394139][ T3732] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 45.408742][ T3736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.410289][ T3726] EXT4-fs: Ignoring removed nobh option [ 45.422971][ T3726] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.429569][ T3726] EXT4-fs: Ignoring removed i_version option [ 45.436059][ T3727] __nla_validate_parse: 1 callbacks suppressed [ 45.436113][ T3727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'. [ 45.452206][ T3736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.545025][ T3726] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.725743][ T3726] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 45.818521][ T3742] loop3: detected capacity change from 0 to 164 [ 45.833908][ T3742] Unable to read rock-ridge attributes [ 45.856963][ T3745] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.872965][ T3742] Unable to read rock-ridge attributes [ 45.879830][ T3742] syz.3.72: attempt to access beyond end of device [ 45.879830][ T3742] loop3: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 45.912798][ T3743] bridge_slave_0: left allmulticast mode [ 45.918658][ T3743] bridge_slave_0: left promiscuous mode [ 45.924433][ T3743] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.939950][ T3742] syz.3.72: attempt to access beyond end of device [ 45.939950][ T3742] loop3: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 45.957179][ T3743] bridge_slave_1: left allmulticast mode [ 45.957232][ T3743] bridge_slave_1: left promiscuous mode [ 45.957365][ T3743] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.974899][ T3743] bond0: (slave bond_slave_0): Releasing backup interface [ 46.003969][ T3743] bond0: (slave bond_slave_1): Releasing backup interface [ 46.025833][ T3743] team0: Port device team_slave_0 removed [ 46.029345][ T3743] team0: Port device team_slave_1 removed [ 46.031210][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.031233][ T3743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.046904][ T3743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.046933][ T3743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.055666][ T3743] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 46.154170][ T3754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.163139][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 46.195350][ T3754] wireguard0: entered promiscuous mode [ 46.200928][ T3754] wireguard0: entered allmulticast mode [ 46.213050][ T3754] geneve2: entered promiscuous mode [ 46.283685][ T3764] loop2: detected capacity change from 0 to 512 [ 46.311628][ T3764] EXT4-fs: inline encryption not supported [ 46.359551][ T3754] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 46.385862][ T3764] EXT4-fs (loop2): 1 orphan inode deleted [ 46.407176][ T60] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 1 [ 46.421615][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.454126][ T3764] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.485742][ T3771] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.78: iget: bad i_size value: 360287970189639690 [ 46.624609][ T3775] loop4: detected capacity change from 0 to 256 [ 46.685685][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.708398][ T3782] loop3: detected capacity change from 0 to 512 [ 46.729341][ T3782] ------------[ cut here ]------------ [ 46.734884][ T3782] EA inode 11 i_nlink=2 [ 46.734907][ T3782] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.87/3782 [ 46.749816][ T3782] Modules linked in: [ 46.753769][ T3782] CPU: 0 UID: 0 PID: 3782 Comm: syz.3.87 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.763537][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.773717][ T3782] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 46.780430][ T3782] Code: c4 e7 9a ff 4c 8d 2d 5d 22 3e 05 49 8d 7e 40 e8 d4 d1 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 cd b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f d3 d0 03 66 66 66 66 66 66 2e [ 46.800354][ T3782] RSP: 0018:ffffc9000133f778 EFLAGS: 00010246 [ 46.806553][ T3782] RAX: ffff88811b9e4c90 RBX: ffff88811b455c18 RCX: ffffffff81be1808 [ 46.814648][ T3782] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3a50 [ 46.823070][ T3782] RBP: 000000000000000b R08: 000188811b455bcb R09: 0000000000000000 [ 46.831245][ T3782] R10: ffffc9000133f6a8 R11: 0001c9000133f6a8 R12: ffff88811b455bc8 [ 46.839285][ T3782] R13: ffffffff86fc3a50 R14: ffff88811b455b80 R15: 0000000000000001 [ 46.847320][ T3782] FS: 00007f3b925776c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 46.856341][ T3782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.862974][ T3782] CR2: 00007f3b93b040c0 CR3: 000000011c8fa000 CR4: 00000000003506f0 [ 46.871039][ T3782] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 46.879238][ T3782] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 46.887373][ T3782] Call Trace: [ 46.890785][ T3782] [ 46.893798][ T3782] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 46.899871][ T3782] ? errseq_check+0x2c/0x50 [ 46.904523][ T3782] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 46.910171][ T3782] ? ext4_truncate+0x92b/0xad0 [ 46.915108][ T3782] ext4_evict_inode+0xa1f/0xd40 [ 46.920147][ T3782] ? __pfx_ext4_evict_inode+0x10/0x10 [ 46.925661][ T3782] evict+0x2af/0x510 [ 46.929695][ T3782] ? __dquot_initialize+0x146/0x7c0 [ 46.934996][ T3782] iput+0x4b9/0x650 [ 46.938973][ T3782] ext4_process_orphan+0x1a9/0x1c0 [ 46.944139][ T3782] ext4_orphan_cleanup+0x6a8/0xa00 [ 46.949416][ T3782] ext4_fill_super+0x3476/0x3800 [ 46.954412][ T3782] ? set_blocksize+0x1a3/0x310 [ 46.959378][ T3782] ? setup_bdev_super+0x30e/0x370 [ 46.964442][ T3782] ? __pfx_ext4_fill_super+0x10/0x10 [ 46.969792][ T3782] get_tree_bdev_flags+0x291/0x300 [ 46.974999][ T3782] ? __pfx_ext4_fill_super+0x10/0x10 [ 46.980438][ T3782] get_tree_bdev+0x1f/0x30 [ 46.984891][ T3782] ext4_get_tree+0x1c/0x30 [ 46.989412][ T3782] vfs_get_tree+0x57/0x1d0 [ 46.993961][ T3782] do_new_mount+0x288/0x700 [ 46.998583][ T3782] path_mount+0x4d0/0xbc0 [ 47.003035][ T3782] ? user_path_at+0xbf/0x130 [ 47.007722][ T3782] __se_sys_mount+0x28c/0x2e0 [ 47.012429][ T3782] __x64_sys_mount+0x67/0x80 [ 47.017255][ T3782] x64_sys_call+0x2cca/0x3000 [ 47.022039][ T3782] do_syscall_64+0xc0/0x2a0 [ 47.026725][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.032665][ T3782] RIP: 0033:0x7f3b93b1c14a [ 47.037185][ T3782] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.056875][ T3782] RSP: 002b:00007f3b92576e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.065420][ T3782] RAX: ffffffffffffffda RBX: 00007f3b92576ee0 RCX: 00007f3b93b1c14a [ 47.073440][ T3782] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f3b92576ea0 [ 47.081607][ T3782] RBP: 0000200000000180 R08: 00007f3b92576ee0 R09: 0000000000800718 [ 47.089722][ T3782] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 47.097788][ T3782] R13: 00007f3b92576ea0 R14: 000000000000047f R15: 0000200000000200 [ 47.105871][ T3782] [ 47.108962][ T3782] ---[ end trace 0000000000000000 ]--- [ 47.116968][ T3782] EXT4-fs (loop3): 1 orphan inode deleted [ 47.123230][ T3782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.207434][ T3790] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 47.215085][ T3790] netlink: 'syz.1.82': attribute type 4 has an invalid length. [ 47.222800][ T3790] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.82'. [ 47.249338][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.262410][ T3792] syz.2.88 uses obsolete (PF_INET,SOCK_PACKET) [ 47.299101][ T3798] loop3: detected capacity change from 0 to 256 [ 47.399879][ T3807] lo speed is unknown, defaulting to 1000 [ 47.463789][ T3825] tipc: Started in network mode [ 47.469008][ T3825] tipc: Node identity 4, cluster identity 4711 [ 47.475273][ T3825] tipc: Node number set to 4 [ 47.517924][ T3824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 47.679453][ T3835] option changes via remount are deprecated (pid=3833 comm=syz.2.99) [ 47.687710][ T3835] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 "" [ 47.898609][ T3845] loop2: detected capacity change from 0 to 128 [ 47.905718][ T3845] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.971090][ T3910] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.029235][ T3917] netlink: 'syz.4.113': attribute type 13 has an invalid length. [ 49.037137][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.113'. [ 49.135421][ T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.144873][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 49.144899][ T29] audit: type=1326 audit(1769535739.994:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1863aeb9 code=0x7ffc0000 [ 49.174644][ T29] audit: type=1326 audit(1769535739.994:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1863aeb9 code=0x7ffc0000 [ 49.201900][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.212923][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.222299][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.231341][ T29] audit: type=1326 audit(1769535740.064:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1863aeb9 code=0x7ffc0000 [ 49.255020][ T29] audit: type=1326 audit(1769535740.064:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1863aeb9 code=0x7ffc0000 [ 49.278400][ T29] audit: type=1326 audit(1769535740.064:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fdd1863aeb9 code=0x7ffc0000 [ 49.301815][ T29] audit: type=1326 audit(1769535740.064:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1863aeb9 code=0x7ffc0000 [ 49.325459][ T29] audit: type=1326 audit(1769535740.064:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd185fb78e code=0x7ffc0000 [ 49.349280][ T29] audit: type=1326 audit(1769535740.064:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1863aeb9 code=0x7ffc0000 [ 49.372776][ T29] audit: type=1326 audit(1769535740.064:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd185fb78e code=0x7ffc0000 [ 49.396546][ T29] audit: type=1326 audit(1769535740.064:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdd185fb78e code=0x7ffc0000 [ 49.473676][ T3927] loop1: detected capacity change from 0 to 256 [ 49.538757][ T3931] netlink: 'syz.3.118': attribute type 39 has an invalid length. [ 49.572147][ T3934] tipc: Started in network mode [ 49.577148][ T3934] tipc: Node identity 4, cluster identity 4711 [ 49.583332][ T3934] tipc: Node number set to 4 [ 49.608052][ T3927] FAT-fs (loop1): error, clusters badly computed (0 != 128) [ 49.615546][ T3927] FAT-fs (loop1): Filesystem has been set read-only [ 49.627940][ T3927] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 49.745750][ T3949] netlink: 'syz.0.124': attribute type 1 has an invalid length. [ 49.800333][ T3956] netlink: 'syz.1.127': attribute type 21 has an invalid length. [ 49.808239][ T3956] netlink: 128 bytes leftover after parsing attributes in process `syz.1.127'. [ 49.829072][ T3956] netlink: 'syz.1.127': attribute type 5 has an invalid length. [ 49.837015][ T3956] netlink: 3 bytes leftover after parsing attributes in process `syz.1.127'. [ 49.872055][ T3955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3955 comm=syz.4.126 [ 49.893317][ T3961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 49.926508][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 49.976919][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 50.005681][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 50.026576][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 50.082744][ T3975] erspan0: entered promiscuous mode [ 50.087180][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 50.117569][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 50.134117][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 50.178172][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 50.201477][ T3962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3962 comm=syz.0.129 [ 50.243817][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3984 comm=syz.1.136 [ 50.354993][ T4001] random: crng reseeded on system resumption [ 50.364350][ T4001] Unrecognized hibernate image header format! [ 50.370629][ T4001] PM: hibernation: Image mismatch: architecture specific data [ 50.391757][ T3998] loop2: detected capacity change from 0 to 4096 [ 50.432129][ T4008] loop0: detected capacity change from 0 to 128 [ 50.450712][ T3998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.490578][ T4014] netlink: 'syz.3.146': attribute type 8 has an invalid length. [ 50.598899][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.677742][ T4028] loop0: detected capacity change from 0 to 1024 [ 50.684579][ T4028] ext4: Invalid uid '0x00000000ffffffff' [ 50.706634][ T4028] 9p: Bad value for 'rfdno' [ 50.776235][ T4030] loop1: detected capacity change from 0 to 512 [ 50.803410][ T4035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.820320][ T4033] loop3: detected capacity change from 0 to 512 [ 50.841686][ T4035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.851960][ T4033] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.861271][ T4033] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 50.911819][ T4033] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.920901][ T4033] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.151: bad orphan inode 15 [ 50.940566][ T4033] ext4_test_bit(bit=14, block=18) = 1 [ 50.946125][ T4033] is_bad_inode(inode)=0 [ 50.950728][ T4033] NEXT_ORPHAN(inode)=1023 [ 50.955165][ T4033] max_ino=32 [ 50.958559][ T4033] i_nlink=0 [ 50.974702][ T4033] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.151: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 51.021493][ T4033] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 51.035781][ T4033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.061758][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.130768][ T4049] loop3: detected capacity change from 0 to 512 [ 51.154495][ T4049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.167305][ T4049] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.185726][ T4049] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 4 (only 1 groups) [ 51.216675][ T4051] loop1: detected capacity change from 0 to 1024 [ 51.216707][ T4054] __nla_validate_parse: 1 callbacks suppressed [ 51.216744][ T4054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 51.242425][ T4051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.361672][ T4066] netlink: 36 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.370860][ T4066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.379774][ T4066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.159'. [ 51.406257][ T4063] loop4: detected capacity change from 0 to 1024 [ 51.423231][ T4066] loop0: detected capacity change from 0 to 512 [ 51.461833][ T4066] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.159: bg 0: block 248: padding at end of block bitmap is not set [ 51.483974][ T4063] EXT4-fs: Ignoring removed orlov option [ 51.525975][ T4066] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.159: Failed to acquire dquot type 1 [ 51.551428][ T4063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.570265][ T4066] EXT4-fs (loop0): 1 truncate cleaned up [ 51.576960][ T4066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.589755][ T4066] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.605639][ T4088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 51.643079][ T4092] loop2: detected capacity change from 0 to 512 [ 51.658405][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.674469][ T4066] syz.0.159 (4066) used greatest stack depth: 9136 bytes left [ 51.678266][ T4092] EXT4-fs: Ignoring removed oldalloc option [ 51.693518][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.705569][ T31] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 51.724592][ T4092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.742422][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.762708][ T4092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.795504][ T4092] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.840457][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.089734][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.127269][ T4134] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.138634][ T4134] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.239085][ T4152] syz_tun: entered allmulticast mode [ 52.262614][ T4152] dvmrp8: entered allmulticast mode [ 52.281776][ T4156] syzkaller0: entered promiscuous mode [ 52.287471][ T4156] syzkaller0: entered allmulticast mode [ 52.299165][ T4147] syz_tun: left allmulticast mode [ 52.345292][ T4134] JBD2: no valid journal superblock found [ 52.351071][ T4134] EXT4-fs (loop4): Could not load journal inode [ 52.407590][ T4169] netlink: 116 bytes leftover after parsing attributes in process `syz.3.182'. [ 52.421104][ T4164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.466604][ T4164] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.558636][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.596506][ T4187] netlink: 'syz.1.186': attribute type 7 has an invalid length. [ 52.604264][ T4187] netlink: 148 bytes leftover after parsing attributes in process `syz.1.186'. [ 52.706461][ T4195] netlink: 'syz.3.190': attribute type 13 has an invalid length. [ 52.714276][ T4195] netlink: 'syz.3.190': attribute type 27 has an invalid length. [ 52.868477][ T4207] lo speed is unknown, defaulting to 1000 [ 52.881725][ T4198] syz.0.189 (4198) used greatest stack depth: 8152 bytes left [ 52.919632][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.945094][ T4211] syzkaller0: entered promiscuous mode [ 52.945161][ T4216] netlink: 'syz.4.196': attribute type 13 has an invalid length. [ 52.958588][ T4211] syzkaller0: entered allmulticast mode [ 53.089780][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.097126][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.155116][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.166562][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.241135][ T60] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.250232][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.266698][ T60] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.275858][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.289922][ T60] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.298880][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.308106][ T60] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.317050][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.474739][ T4234] msdos: Unknown parameter 'dos1xfl%4?օy' [ 53.484317][ T4232] netlink: 40 bytes leftover after parsing attributes in process `syz.4.198'. [ 53.496612][ T4241] netlink: 'syz.0.202': attribute type 32 has an invalid length. [ 53.507521][ T4239] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.553671][ T3459] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.653948][ T4258] xt_hashlimit: size too large, truncated to 1048576 [ 53.661133][ T4258] xt_hashlimit: invalid rate [ 53.747294][ T4262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 53.753907][ T4262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.761521][ T4262] vhci_hcd vhci_hcd.0: Device attached [ 53.778747][ T4265] usbip_core: unknown command [ 53.783469][ T4265] vhci_hcd: unknown pdu 0 [ 53.787923][ T4265] usbip_core: unknown command [ 53.856027][ T37] vhci_hcd vhci_hcd.3: stop threads [ 53.861294][ T37] vhci_hcd vhci_hcd.3: release socket [ 53.866744][ T37] vhci_hcd vhci_hcd.3: disconnect device [ 54.228875][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 54.228896][ T29] audit: type=1400 audit(1769535745.084:1495): avc: denied { audit_read } for pid=4280 comm="syz.4.213" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.285320][ T29] audit: type=1400 audit(1769535745.124:1496): avc: denied { name_bind } for pid=4286 comm="syz.2.214" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 54.329940][ T29] audit: type=1326 audit(1769535745.164:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.353467][ T29] audit: type=1326 audit(1769535745.164:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.377113][ T29] audit: type=1326 audit(1769535745.164:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.400538][ T29] audit: type=1326 audit(1769535745.164:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.424172][ T29] audit: type=1326 audit(1769535745.164:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.447660][ T29] audit: type=1326 audit(1769535745.164:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.471120][ T29] audit: type=1326 audit(1769535745.164:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.495233][ T29] audit: type=1326 audit(1769535745.164:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c4e5aeb9 code=0x7ffc0000 [ 54.669756][ T4304] ext4: Bad value for 'mb_optimize_scan' [ 54.725431][ T4312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.222'. [ 54.957112][ T4335] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 54.963855][ T4335] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.971596][ T4335] vhci_hcd vhci_hcd.0: Device attached [ 54.976428][ T3578] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.979942][ T4214] Bluetooth: hci0: command 0x1003 tx timeout [ 54.995718][ T4336] netlink: 188 bytes leftover after parsing attributes in process `syz.3.227'. [ 55.007722][ T4337] usbip_core: unknown command [ 55.012502][ T4337] vhci_hcd: unknown pdu 0 [ 55.016929][ T4337] usbip_core: unknown command [ 55.038679][ T415] vhci_hcd vhci_hcd.0: stop threads [ 55.044296][ T415] vhci_hcd vhci_hcd.0: release socket [ 55.049906][ T415] vhci_hcd vhci_hcd.0: disconnect device [ 55.190605][ T4352] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.295108][ T4357] EXT4-fs: Ignoring removed i_version option [ 55.312828][ T4360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.338607][ T4357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.359046][ T4360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.378955][ T4357] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 55.445551][ T4360] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.504233][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.835980][ T4378] syzkaller0: entered promiscuous mode [ 55.841599][ T4378] syzkaller0: entered allmulticast mode [ 55.918310][ T4384] IPVS: length: 243 != 8 [ 55.973507][ T4388] gretap0: entered promiscuous mode [ 55.997512][ T4388] macsec1: entered promiscuous mode [ 56.007585][ T4388] macsec1: entered allmulticast mode [ 56.014435][ T4388] gretap0: entered allmulticast mode [ 56.218960][ T4406] bridge0: port 3(syz_tun) entered disabled state [ 56.256357][ T4415] tmpfs: Unknown parameter '8iz' [ 56.265416][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.276900][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.366562][ T4422] set_capacity_and_notify: 9 callbacks suppressed [ 56.366587][ T4422] loop3: detected capacity change from 0 to 164 [ 56.406158][ T4422] iso9660: Unknown parameter 'celaxed' [ 56.614744][ T4433] FAULT_INJECTION: forcing a failure. [ 56.614744][ T4433] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.620573][ T4430] FAULT_INJECTION: forcing a failure. [ 56.620573][ T4430] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.628419][ T4433] CPU: 1 UID: 0 PID: 4433 Comm: syz.1.257 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.628524][ T4433] Tainted: [W]=WARN [ 56.628557][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.628631][ T4433] Call Trace: [ 56.628653][ T4433] [ 56.628685][ T4433] __dump_stack+0x1d/0x30 [ 56.628829][ T4433] dump_stack_lvl+0x95/0xd0 [ 56.629009][ T4433] dump_stack+0x15/0x1b [ 56.629081][ T4433] should_fail_ex+0x263/0x280 [ 56.629220][ T4433] should_fail+0xb/0x20 [ 56.629350][ T4433] should_fail_usercopy+0x1a/0x20 [ 56.629484][ T4433] _copy_to_user+0x20/0xa0 [ 56.629585][ T4433] bpf_prog_test_run_syscall+0x299/0x350 [ 56.629747][ T4433] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 56.629980][ T4433] bpf_prog_test_run+0x204/0x340 [ 56.630095][ T4433] __sys_bpf+0x4c0/0x7b0 [ 56.630222][ T4433] __x64_sys_bpf+0x41/0x50 [ 56.630300][ T4433] x64_sys_call+0x28e1/0x3000 [ 56.630374][ T4433] do_syscall_64+0xc0/0x2a0 [ 56.630522][ T4433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.630610][ T4433] RIP: 0033:0x7f4251c5aeb9 [ 56.630672][ T4433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.630736][ T4433] RSP: 002b:00007f42506b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.631011][ T4433] RAX: ffffffffffffffda RBX: 00007f4251ed5fa0 RCX: 00007f4251c5aeb9 [ 56.631085][ T4433] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 56.631135][ T4433] RBP: 00007f42506b7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.631350][ T4433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.631402][ T4433] R13: 00007f4251ed6038 R14: 00007f4251ed5fa0 R15: 00007ffd8f59ab58 [ 56.631478][ T4433] [ 56.665556][ T4436] FAULT_INJECTION: forcing a failure. [ 56.665556][ T4436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.667197][ T4430] CPU: 0 UID: 0 PID: 4430 Comm: syz.4.256 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.667365][ T4430] Tainted: [W]=WARN [ 56.667388][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.667430][ T4430] Call Trace: [ 56.667460][ T4430] [ 56.667555][ T4430] __dump_stack+0x1d/0x30 [ 56.667687][ T4430] dump_stack_lvl+0x95/0xd0 [ 56.667764][ T4430] dump_stack+0x15/0x1b [ 56.667836][ T4430] should_fail_ex+0x263/0x280 [ 56.667957][ T4430] should_fail+0xb/0x20 [ 56.668053][ T4430] should_fail_usercopy+0x1a/0x20 [ 56.668204][ T4430] _copy_from_user+0x1c/0xb0 [ 56.668371][ T4430] ___sys_sendmsg+0xc1/0x1e0 [ 56.668486][ T4430] __x64_sys_sendmsg+0xd4/0x160 [ 56.668588][ T4430] x64_sys_call+0x17ba/0x3000 [ 56.668768][ T4430] do_syscall_64+0xc0/0x2a0 [ 56.668869][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.668959][ T4430] RIP: 0033:0x7fe6c4e5aeb9 [ 56.669081][ T4430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.669143][ T4430] RSP: 002b:00007fe6c38b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.669209][ T4430] RAX: ffffffffffffffda RBX: 00007fe6c50d5fa0 RCX: 00007fe6c4e5aeb9 [ 56.669253][ T4430] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 56.669297][ T4430] RBP: 00007fe6c38b7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.669384][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.669508][ T4430] R13: 00007fe6c50d6038 R14: 00007fe6c50d5fa0 R15: 00007ffeded95f38 [ 56.669574][ T4430] [ 57.003673][ T4436] CPU: 1 UID: 0 PID: 4436 Comm: syz.3.259 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.003715][ T4436] Tainted: [W]=WARN [ 57.003725][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.003795][ T4436] Call Trace: [ 57.003803][ T4436] [ 57.003815][ T4436] __dump_stack+0x1d/0x30 [ 57.003913][ T4436] dump_stack_lvl+0x95/0xd0 [ 57.003944][ T4436] dump_stack+0x15/0x1b [ 57.003972][ T4436] should_fail_ex+0x263/0x280 [ 57.004011][ T4436] should_fail+0xb/0x20 [ 57.004049][ T4436] should_fail_usercopy+0x1a/0x20 [ 57.004093][ T4436] _copy_to_user+0x20/0xa0 [ 57.004122][ T4436] simple_read_from_buffer+0xb5/0x130 [ 57.004181][ T4436] proc_fail_nth_read+0x10e/0x150 [ 57.004220][ T4436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.004288][ T4436] vfs_read+0x1ab/0x7f0 [ 57.004313][ T4436] ? __fput+0x555/0x650 [ 57.004349][ T4436] ? __rcu_read_unlock+0x4e/0x70 [ 57.004428][ T4436] ? __fget_files+0x184/0x1c0 [ 57.004536][ T4436] ? mutex_lock+0x57/0x90 [ 57.004569][ T4436] ksys_read+0xdc/0x1a0 [ 57.004596][ T4436] __x64_sys_read+0x40/0x50 [ 57.004620][ T4436] x64_sys_call+0x2889/0x3000 [ 57.004677][ T4436] do_syscall_64+0xc0/0x2a0 [ 57.004719][ T4436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.004751][ T4436] RIP: 0033:0x7f3b93adb78e [ 57.004773][ T4436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 57.004798][ T4436] RSP: 002b:00007f3b92576fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.004963][ T4436] RAX: ffffffffffffffda RBX: 00007f3b925776c0 RCX: 00007f3b93adb78e [ 57.004983][ T4436] RDX: 000000000000000f RSI: 00007f3b925770a0 RDI: 0000000000000004 [ 57.005001][ T4436] RBP: 00007f3b92577090 R08: 0000000000000000 R09: 0000000000000000 [ 57.005018][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.005033][ T4436] R13: 00007f3b93d96038 R14: 00007f3b93d95fa0 R15: 00007ffe515e71d8 [ 57.005059][ T4436] [ 57.413951][ T4456] loop4: detected capacity change from 0 to 2048 [ 57.463002][ T4465] 9p: Bad value for 'rfdno' [ 57.469596][ T4465] __nla_validate_parse: 2 callbacks suppressed [ 57.469616][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 57.491883][ T4462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 57.515960][ T4456] loop4: p1 < > p4 < > [ 57.535022][ T4469] FAULT_INJECTION: forcing a failure. [ 57.535022][ T4469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.548244][ T4469] CPU: 1 UID: 0 PID: 4469 Comm: syz.1.272 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.548412][ T4469] Tainted: [W]=WARN [ 57.548421][ T4469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.548438][ T4469] Call Trace: [ 57.548445][ T4469] [ 57.548454][ T4469] __dump_stack+0x1d/0x30 [ 57.548482][ T4469] dump_stack_lvl+0x95/0xd0 [ 57.548507][ T4469] dump_stack+0x15/0x1b [ 57.548530][ T4469] should_fail_ex+0x263/0x280 [ 57.548609][ T4469] should_fail+0xb/0x20 [ 57.548644][ T4469] should_fail_usercopy+0x1a/0x20 [ 57.548735][ T4469] _copy_to_user+0x20/0xa0 [ 57.548829][ T4469] bpf_prog_test_run_syscall+0x299/0x350 [ 57.548871][ T4469] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 57.548914][ T4469] bpf_prog_test_run+0x204/0x340 [ 57.549035][ T4469] __sys_bpf+0x4c0/0x7b0 [ 57.549073][ T4469] __x64_sys_bpf+0x41/0x50 [ 57.549097][ T4469] x64_sys_call+0x28e1/0x3000 [ 57.549205][ T4469] do_syscall_64+0xc0/0x2a0 [ 57.549239][ T4469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.549269][ T4469] RIP: 0033:0x7f4251c5aeb9 [ 57.549287][ T4469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.549306][ T4469] RSP: 002b:00007f42506b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.549408][ T4469] RAX: ffffffffffffffda RBX: 00007f4251ed5fa0 RCX: 00007f4251c5aeb9 [ 57.549426][ T4469] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 57.549442][ T4469] RBP: 00007f42506b7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.549515][ T4469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.549527][ T4469] R13: 00007f4251ed6038 R14: 00007f4251ed5fa0 R15: 00007ffd8f59ab58 [ 57.549548][ T4469] [ 57.744331][ T4439] loop2: detected capacity change from 0 to 1024 [ 57.751352][ T4462] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 57.759115][ T4462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.266'. [ 57.770768][ T4462] : entered promiscuous mode [ 57.859522][ T4462] bridge0: port 1() entered blocking state [ 57.860517][ T4474] loop3: detected capacity change from 0 to 512 [ 57.865928][ T4462] bridge0: port 1() entered disabled state [ 57.878637][ T4476] FAULT_INJECTION: forcing a failure. [ 57.878637][ T4476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.891934][ T4476] CPU: 1 UID: 0 PID: 4476 Comm: syz.1.275 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 57.891998][ T4476] Tainted: [W]=WARN [ 57.892007][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.892024][ T4476] Call Trace: [ 57.892033][ T4476] [ 57.892044][ T4476] __dump_stack+0x1d/0x30 [ 57.892081][ T4476] dump_stack_lvl+0x95/0xd0 [ 57.892109][ T4476] dump_stack+0x15/0x1b [ 57.892145][ T4476] should_fail_ex+0x263/0x280 [ 57.892190][ T4476] should_fail+0xb/0x20 [ 57.892227][ T4476] should_fail_usercopy+0x1a/0x20 [ 57.892273][ T4476] _copy_from_user+0x1c/0xb0 [ 57.892308][ T4476] __copy_msghdr+0x244/0x300 [ 57.892350][ T4476] ___sys_sendmsg+0x10c/0x1e0 [ 57.892501][ T4476] __x64_sys_sendmsg+0xd4/0x160 [ 57.892532][ T4476] x64_sys_call+0x17ba/0x3000 [ 57.892617][ T4476] do_syscall_64+0xc0/0x2a0 [ 57.892662][ T4476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.892717][ T4476] RIP: 0033:0x7f4251c5aeb9 [ 57.892734][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.892754][ T4476] RSP: 002b:00007f42506b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.892781][ T4476] RAX: ffffffffffffffda RBX: 00007f4251ed5fa0 RCX: 00007f4251c5aeb9 [ 57.892866][ T4476] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 57.892879][ T4476] RBP: 00007f42506b7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.892892][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.892904][ T4476] R13: 00007f4251ed6038 R14: 00007f4251ed5fa0 R15: 00007ffd8f59ab58 [ 57.892930][ T4476] [ 58.106557][ T4462] : entered allmulticast mode [ 58.111479][ T4462] bridge0: entered allmulticast mode [ 58.117408][ T4462] : left allmulticast mode [ 58.121980][ T4462] bridge0: left allmulticast mode [ 58.134102][ T4479] selinux_netlink_send: 61 callbacks suppressed [ 58.134122][ T4479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4479 comm=syz.0.266 [ 58.153901][ T4474] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.274: inode has both inline data and extents flags [ 58.176224][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.196465][ T4439] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 58.210423][ T4474] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.274: couldn't read orphan inode 15 (err -117) [ 58.214495][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 58.245694][ T4474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.268321][ T4439] System zones: 0-1, 3-8 [ 58.312745][ T4439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.333017][ T4439] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.333299][ T4487] loop6: detected capacity change from 0 to 7 [ 58.333934][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.359772][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.368521][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.378171][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.391197][ T4487] loop6: unable to read partition table [ 58.397462][ T4487] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 58.416422][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.426084][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.434208][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 58.444586][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.454268][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.462622][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.472261][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.485232][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.494887][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.503105][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 58.512758][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 58.531776][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.542363][ T4474] SELinux: security_context_str_to_sid (_:;Y-_ IQRVOѹoΞ>GL?@) failed with errno=-22 [ 58.581880][ T4478] netlink: 148 bytes leftover after parsing attributes in process `syz.4.273'. [ 58.666613][ T4493] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 58.666613][ T4493] The task syz.3.274 (4493) triggered the difference, watch for misbehavior. [ 58.797238][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.449390][ T29] kauditd_printk_skb: 597 callbacks suppressed [ 79.449481][ T29] audit: type=1400 audit(1769535770.304:2102): avc: denied { create } for pid=4499 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.487315][ T4507] lo speed is unknown, defaulting to 1000 [ 79.535443][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 79.544383][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 79.555831][ T29] audit: type=1400 audit(1769535770.344:2103): avc: denied { create } for pid=4501 comm="syz.2.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 79.575823][ T29] audit: type=1400 audit(1769535770.354:2104): avc: denied { sys_admin } for pid=4501 comm="syz.2.280" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 79.585699][ T4517] netlink: 56 bytes leftover after parsing attributes in process `syz.0.283'. [ 79.596894][ T29] audit: type=1400 audit(1769535770.354:2105): avc: denied { connect } for pid=4499 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 79.642137][ T4514] loop4: detected capacity change from 0 to 512 [ 79.652365][ T4514] msdos: Bad value for 'dmask' [ 79.736719][ T29] audit: type=1400 audit(1769535770.584:2106): avc: denied { bind } for pid=4516 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.780714][ T4523] pimreg: entered allmulticast mode [ 79.795481][ T4522] pimreg: left allmulticast mode [ 79.801483][ T29] audit: type=1400 audit(1769535770.624:2107): avc: denied { accept } for pid=4522 comm="syz.2.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.821090][ T29] audit: type=1400 audit(1769535770.644:2108): avc: denied { execute } for pid=4522 comm="syz.2.285" path="/49/cpu.stat" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.847140][ T4524] netlink: 64 bytes leftover after parsing attributes in process `syz.0.283'. [ 79.862330][ T4524] loop0: detected capacity change from 0 to 512 [ 79.885272][ T4524] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.894356][ T4524] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 79.925260][ T29] audit: type=1326 audit(1769535770.714:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1adaeb9 code=0x7ffc0000 [ 79.948796][ T29] audit: type=1326 audit(1769535770.714:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f75c1adaeb9 code=0x7ffc0000 [ 79.972494][ T29] audit: type=1326 audit(1769535770.714:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.0.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75c1adac22 code=0x7ffc0000 [ 80.027634][ T4524] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 80.065998][ T4524] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 80.084343][ T4524] System zones: 0-2, 18-18, 34-35 [ 80.118702][ T4531] siw: device registration error -23 [ 80.136399][ T4524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.272847][ T4542] xt_l2tp: v2 doesn't support IP mode [ 80.275994][ T4544] FAULT_INJECTION: forcing a failure. [ 80.275994][ T4544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.291469][ T4544] CPU: 0 UID: 0 PID: 4544 Comm: syz.1.291 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.291585][ T4544] Tainted: [W]=WARN [ 80.291594][ T4544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.291608][ T4544] Call Trace: [ 80.291617][ T4544] [ 80.291626][ T4544] __dump_stack+0x1d/0x30 [ 80.291657][ T4544] dump_stack_lvl+0x95/0xd0 [ 80.291724][ T4544] dump_stack+0x15/0x1b [ 80.291786][ T4544] should_fail_ex+0x263/0x280 [ 80.291824][ T4544] should_fail+0xb/0x20 [ 80.291927][ T4544] should_fail_usercopy+0x1a/0x20 [ 80.292037][ T4544] _copy_from_user+0x1c/0xb0 [ 80.292063][ T4544] ____sys_sendmsg+0x1e2/0x600 [ 80.292139][ T4544] ___sys_sendmsg+0x195/0x1e0 [ 80.292255][ T4544] __x64_sys_sendmsg+0xd4/0x160 [ 80.292282][ T4544] x64_sys_call+0x17ba/0x3000 [ 80.292356][ T4544] do_syscall_64+0xc0/0x2a0 [ 80.292451][ T4544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.292503][ T4544] RIP: 0033:0x7f4251c5aeb9 [ 80.292523][ T4544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.292617][ T4544] RSP: 002b:00007f42506b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.292642][ T4544] RAX: ffffffffffffffda RBX: 00007f4251ed5fa0 RCX: 00007f4251c5aeb9 [ 80.292658][ T4544] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 80.292673][ T4544] RBP: 00007f42506b7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.292688][ T4544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.292741][ T4544] R13: 00007f4251ed6038 R14: 00007f4251ed5fa0 R15: 00007ffd8f59ab58 [ 80.292764][ T4544] [ 80.578881][ T4548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'. [ 80.762103][ T4561] loop1: detected capacity change from 0 to 512 [ 80.785263][ T4533] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 80.794154][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 80.809080][ T4565] netlink: 'syz.2.297': attribute type 11 has an invalid length. [ 80.816855][ T4565] netlink: 'syz.2.297': attribute type 14 has an invalid length. [ 80.845388][ T4561] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.298: inode has both inline data and extents flags [ 80.865368][ T4565] vxlan0: entered promiscuous mode [ 80.880923][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.900267][ T4561] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.298: couldn't read orphan inode 15 (err -117) [ 80.916023][ T4561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.920249][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.969519][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.969893][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.005368][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.031095][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.072548][ T4577] FAULT_INJECTION: forcing a failure. [ 81.072548][ T4577] name failslab, interval 1, probability 0, space 0, times 0 [ 81.085439][ T4577] CPU: 1 UID: 0 PID: 4577 Comm: syz.1.303 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.085483][ T4577] Tainted: [W]=WARN [ 81.085519][ T4577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.085537][ T4577] Call Trace: [ 81.085547][ T4577] [ 81.085558][ T4577] __dump_stack+0x1d/0x30 [ 81.085592][ T4577] dump_stack_lvl+0x95/0xd0 [ 81.085621][ T4577] dump_stack+0x15/0x1b [ 81.085649][ T4577] should_fail_ex+0x263/0x280 [ 81.085749][ T4577] should_failslab+0x8c/0xb0 [ 81.085808][ T4577] kmem_cache_alloc_noprof+0x68/0x490 [ 81.085847][ T4577] ? dst_alloc+0xbd/0x100 [ 81.085890][ T4577] dst_alloc+0xbd/0x100 [ 81.085921][ T4577] ? ip_route_input_rcu+0x1492/0x1c10 [ 81.085957][ T4577] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 81.086000][ T4577] ip_route_output_flow+0x65/0x110 [ 81.086056][ T4577] udp_sendmsg+0x13c3/0x15d0 [ 81.086090][ T4577] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 81.086123][ T4577] ? css_rstat_updated+0xbb/0x280 [ 81.086232][ T4577] ? __account_obj_stock+0x211/0x350 [ 81.086275][ T4577] udpv6_sendmsg+0x621/0x17b0 [ 81.086338][ T4577] ? _raw_spin_lock+0x52/0xa0 [ 81.086400][ T4577] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 81.086430][ T4577] inet6_sendmsg+0xac/0xd0 [ 81.086488][ T4577] ____sys_sendmsg+0x3c4/0x600 [ 81.086520][ T4577] ___sys_sendmsg+0x195/0x1e0 [ 81.086558][ T4577] __x64_sys_sendmsg+0xd4/0x160 [ 81.086611][ T4577] x64_sys_call+0x17ba/0x3000 [ 81.086645][ T4577] do_syscall_64+0xc0/0x2a0 [ 81.086676][ T4577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.086704][ T4577] RIP: 0033:0x7f4251c5aeb9 [ 81.086728][ T4577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.086753][ T4577] RSP: 002b:00007f42506b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.086782][ T4577] RAX: ffffffffffffffda RBX: 00007f4251ed5fa0 RCX: 00007f4251c5aeb9 [ 81.086801][ T4577] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 81.086819][ T4577] RBP: 00007f42506b7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.086854][ T4577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.086872][ T4577] R13: 00007f4251ed6038 R14: 00007f4251ed5fa0 R15: 00007ffd8f59ab58 [ 81.086899][ T4577] [ 81.382070][ T4578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.302'. [ 81.463267][ T4584] lo speed is unknown, defaulting to 1000 [ 81.514465][ T4594] xt_l2tp: v2 doesn't support IP mode [ 81.586620][ T4591] lo speed is unknown, defaulting to 1000 [ 81.712097][ T4605] loop1: detected capacity change from 0 to 1764 [ 81.740857][ T4605] iso9660: Unknown parameter 'H' [ 81.842879][ T4610] pimreg: entered allmulticast mode [ 81.879606][ T4609] pimreg: left allmulticast mode [ 81.951349][ T4614] loop0: detected capacity change from 0 to 2048 [ 81.996137][ T4512] loop0: p1 < > p3 [ 82.002602][ T4616] loop1: detected capacity change from 0 to 512 [ 82.011424][ T4512] loop0: p3 size 134217728 extends beyond EOD, truncated [ 82.030280][ T4614] loop0: p1 < > p3 [ 82.040927][ T4614] loop0: p3 size 134217728 extends beyond EOD, truncated [ 82.048970][ T4616] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 82.060830][ T4616] syz.1.315 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 82.163937][ T4512] udevd[4512]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 82.181040][ T4626] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 82.182960][ T4624] udevd[4624]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 82.190551][ T4628] loop0: detected capacity change from 0 to 512 [ 82.217686][ T4630] loop3: detected capacity change from 0 to 512 [ 82.250547][ T4628] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.317: inode has both inline data and extents flags [ 82.251631][ T4630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.280666][ T4628] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.317: couldn't read orphan inode 15 (err -117) [ 82.364995][ T4628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.400944][ T4630] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.437261][ T4630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.446994][ T4628] SELinux: security_context_str_to_sid (_:;Y-_ IQRVOѹoΞ>GL?@) failed with errno=-22 [ 82.460330][ T4630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.491342][ T4643] loop1: detected capacity change from 0 to 512 [ 82.517080][ T4643] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.567392][ T4643] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 82.583903][ T4643] EXT4-fs (loop1): Remounting filesystem read-only [ 82.591768][ T4643] EXT4-fs (loop1): 1 truncate cleaned up [ 82.599033][ T4643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.658658][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.742665][ T4661] bridge_slave_0: left allmulticast mode [ 82.744035][ T4663] loop1: detected capacity change from 0 to 512 [ 82.748425][ T4661] bridge_slave_0: left promiscuous mode [ 82.760405][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.810239][ T4661] bridge_slave_1: left allmulticast mode [ 82.816237][ T4661] bridge_slave_1: left promiscuous mode [ 82.822049][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.866540][ T4663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.879503][ T4661] bond0: (slave bond_slave_0): Releasing backup interface [ 82.898098][ T4661] bond0: (slave bond_slave_1): Releasing backup interface [ 82.908462][ T4663] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.930497][ T4661] team0: Port device team_slave_0 removed [ 82.948467][ T4661] team0: Port device team_slave_1 removed [ 82.955565][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.963310][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.972313][ T4661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.979873][ T4661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.991264][ T4661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.027576][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.054625][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.085641][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.173925][ T4675] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 83.181912][ T4675] netlink: 668 bytes leftover after parsing attributes in process `syz.3.326'. [ 83.223587][ T4677] netlink: 40 bytes leftover after parsing attributes in process `syz.0.328'. [ 83.421761][ T4688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.572306][ T4689] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.735336][ T4689] EXT4-fs (loop2): 1 truncate cleaned up [ 83.746617][ T4512] loop0: p1 p3 < > [ 83.757358][ T4690] loop0: p1 p3 < > [ 83.774517][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 83.870946][ T4689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.955590][ T4696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.032022][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.048633][ T4512] udevd[4512]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.058741][ T4618] udevd[4618]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 84.090645][ T4708] sg_write: data in/out 262124/120 bytes for SCSI command 0x0-- guessing data in; [ 84.090645][ T4708] program syz.1.337 not setting count and/or reply_len properly [ 84.161633][ T4624] udevd[4624]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 84.169631][ T4512] udevd[4512]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 84.203997][ T4705] EXT4-fs: Ignoring removed oldalloc option [ 84.213018][ T4689] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 84.236785][ T4718] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4718 comm=syz.4.339 [ 84.260011][ T4705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.335: Parent and EA inode have the same ino 15 [ 84.377161][ T4705] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.335: Parent and EA inode have the same ino 15 [ 84.406336][ T4705] EXT4-fs (loop3): 1 orphan inode deleted [ 84.415882][ T4705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.490239][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.520340][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.542593][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 84.542615][ T29] audit: type=1400 audit(1769535775.394:2197): avc: denied { accept } for pid=4737 comm="syz.4.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 84.582771][ T4742] FAULT_INJECTION: forcing a failure. [ 84.582771][ T4742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.596006][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.1.348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 84.596051][ T4742] Tainted: [W]=WARN [ 84.596058][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.596071][ T4742] Call Trace: [ 84.596080][ T4742] [ 84.596089][ T4742] __dump_stack+0x1d/0x30 [ 84.596161][ T4742] dump_stack_lvl+0x95/0xd0 [ 84.596203][ T4742] dump_stack+0x15/0x1b [ 84.596234][ T4742] should_fail_ex+0x263/0x280 [ 84.596268][ T4742] should_fail+0xb/0x20 [ 84.596296][ T4742] should_fail_usercopy+0x1a/0x20 [ 84.596336][ T4742] _copy_from_user+0x1c/0xb0 [ 84.596374][ T4742] kstrtouint_from_user+0x69/0xf0 [ 84.596417][ T4742] proc_fail_nth_write+0x50/0x160 [ 84.596455][ T4742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 84.596490][ T4742] vfs_write+0x269/0x9f0 [ 84.596577][ T4742] ? __rcu_read_unlock+0x4e/0x70 [ 84.596614][ T4742] ? __fget_files+0x184/0x1c0 [ 84.596640][ T4742] ? mutex_lock+0x57/0x90 [ 84.596672][ T4742] ksys_write+0xdc/0x1a0 [ 84.596736][ T4742] __x64_sys_write+0x40/0x50 [ 84.596762][ T4742] x64_sys_call+0x2847/0x3000 [ 84.596794][ T4742] do_syscall_64+0xc0/0x2a0 [ 84.596825][ T4742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.596869][ T4742] RIP: 0033:0x7f4251c1b78e [ 84.596891][ T4742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.596915][ T4742] RSP: 002b:00007f42506b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.596941][ T4742] RAX: ffffffffffffffda RBX: 00007f42506b76c0 RCX: 00007f4251c1b78e [ 84.596959][ T4742] RDX: 0000000000000001 RSI: 00007f42506b70a0 RDI: 0000000000000004 [ 84.596974][ T4742] RBP: 00007f42506b7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.596987][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.597000][ T4742] R13: 00007f4251ed6038 R14: 00007f4251ed5fa0 R15: 00007ffd8f59ab58 [ 84.597027][ T4742] [ 84.867228][ T4744] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 84.888026][ T4750] syzkaller0: entered promiscuous mode [ 84.893643][ T4750] syzkaller0: entered allmulticast mode [ 84.915602][ T29] audit: type=1400 audit(1769535775.764:2198): avc: denied { read } for pid=4747 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 85.079874][ T29] audit: type=1400 audit(1769535775.924:2199): avc: denied { read write } for pid=4762 comm="syz.4.354" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.104936][ T29] audit: type=1400 audit(1769535775.924:2200): avc: denied { open } for pid=4762 comm="syz.4.354" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.130212][ T29] audit: type=1400 audit(1769535775.924:2201): avc: denied { execute_no_trans } for pid=4759 comm="syz.3.353" path="/69/file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.180412][ T4760] bridge0: entered promiscuous mode [ 85.191655][ T4771] __nla_validate_parse: 1 callbacks suppressed [ 85.191743][ T4771] netlink: 120 bytes leftover after parsing attributes in process `syz.4.356'. [ 85.207510][ T4760] macvtap1: entered promiscuous mode [ 85.215111][ T4760] macvtap1: entered allmulticast mode [ 85.221611][ T4760] bridge0: entered allmulticast mode [ 85.245295][ T29] audit: type=1400 audit(1769535776.064:2202): avc: denied { write } for pid=4761 comm="syz.1.355" path="socket:[8596]" dev="sockfs" ino=8596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.269047][ T29] audit: type=1400 audit(1769535776.074:2203): avc: denied { ioctl } for pid=4770 comm="syz.4.356" path="socket:[8615]" dev="sockfs" ino=8615 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.320131][ T4760] bridge0: port 4(macvtap1) entered blocking state [ 85.332648][ T4760] bridge0: port 4(macvtap1) entered disabled state [ 85.399398][ T4760] bridge0: left allmulticast mode [ 85.408871][ T4760] bridge0: left promiscuous mode [ 85.499652][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 85.508587][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 85.523690][ T4771] lo speed is unknown, defaulting to 1000 [ 85.631936][ T29] audit: type=1400 audit(1769535776.484:2204): avc: denied { ioctl } for pid=4784 comm="syz.1.359" path="socket:[9488]" dev="sockfs" ino=9488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.659902][ T4785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'. [ 85.723834][ T4789] set_capacity_and_notify: 5 callbacks suppressed [ 85.723857][ T4789] loop1: detected capacity change from 0 to 512 [ 85.769963][ T29] audit: type=1400 audit(1769535776.624:2205): avc: denied { mount } for pid=4791 comm="syz.0.361" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.959190][ T4803] netlink: 56 bytes leftover after parsing attributes in process `syz.4.364'. [ 85.965272][ T4789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.968544][ T4803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'. [ 85.991173][ T29] audit: type=1400 audit(1769535776.624:2206): avc: denied { mounton } for pid=4791 comm="syz.0.361" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 86.151328][ T4809] capability: warning: `syz.4.368' uses 32-bit capabilities (legacy support in use) [ 86.247633][ T4814] loop4: detected capacity change from 0 to 736 [ 86.269579][ T3000] ================================================================== [ 86.277730][ T3000] BUG: KCSAN: data-race in set_nlink / set_nlink [ 86.284108][ T3000] [ 86.286585][ T3000] read to 0xffff88810795f5f0 of 4 bytes by task 4512 on cpu 1: [ 86.294153][ T3000] set_nlink+0x29/0xb0 [ 86.298261][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 86.303609][ T3000] inode_permission+0x2de/0x3c0 [ 86.308496][ T3000] link_path_walk+0x779/0xe30 [ 86.313217][ T3000] path_openat+0x1bf/0x23c0 [ 86.317769][ T3000] do_filp_open+0x15d/0x280 [ 86.322316][ T3000] do_sys_openat2+0xa6/0x150 [ 86.326970][ T3000] __x64_sys_openat+0xf2/0x120 [ 86.331872][ T3000] x64_sys_call+0x2b07/0x3000 [ 86.336600][ T3000] do_syscall_64+0xc0/0x2a0 [ 86.341160][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.347100][ T3000] [ 86.349459][ T3000] write to 0xffff88810795f5f0 of 4 bytes by task 3000 on cpu 0: [ 86.357115][ T3000] set_nlink+0x99/0xb0 [ 86.361309][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 86.366635][ T3000] inode_permission+0x2de/0x3c0 [ 86.371607][ T3000] link_path_walk+0x779/0xe30 [ 86.376339][ T3000] path_lookupat+0x8c/0x500 [ 86.380897][ T3000] filename_lookup+0x190/0x390 [ 86.385711][ T3000] vfs_statx+0x96/0x170 [ 86.389906][ T3000] vfs_fstatat+0x115/0x170 [ 86.394441][ T3000] __se_sys_newfstatat+0x55/0x3e0 [ 86.399591][ T3000] __x64_sys_newfstatat+0x55/0x70 [ 86.404660][ T3000] x64_sys_call+0x111f/0x3000 [ 86.409374][ T3000] do_syscall_64+0xc0/0x2a0 [ 86.414009][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.419934][ T3000] [ 86.422293][ T3000] value changed: 0x00000008 -> 0x00000009 [ 86.428032][ T3000] [ 86.430378][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 86.436559][ T3000] CPU: 0 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.447711][ T3000] Tainted: [W]=WARN [ 86.451538][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.461720][ T3000] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 86.676811][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.698047][ T4817] bridge0: port 3(syz_tun) entered disabled state [ 86.738458][ T4817] syz_tun (unregistering): left allmulticast mode [ 86.744968][ T4817] syz_tun (unregistering): left promiscuous mode [ 86.751593][ T4817] bridge0: port 3(syz_tun) entered disabled state [ 86.766017][ T4790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.782968][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.874378][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.949580][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.159127][ T60] bond0 (unregistering): Released all slaves [ 87.220073][ T60] tipc: Left network mode [ 87.237330][ T60] hsr_slave_0: left promiscuous mode [ 87.253974][ T60] hsr_slave_1: left promiscuous mode [ 87.263662][ T60] veth1_macvtap: left promiscuous mode [ 87.269389][ T60] veth0_macvtap: left promiscuous mode [ 87.275615][ T60] veth1_vlan: left promiscuous mode [ 87.281050][ T60] veth0_vlan: left promiscuous mode [ 87.735034][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.745736][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.799559][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.812024][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.878413][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.888910][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.928213][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.938637][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.999439][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.038398][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.099337][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.148674][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.233890][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.291922][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.348680][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.388748][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.644740][ T60] bridge_slave_1: left allmulticast mode [ 88.650601][ T60] bridge_slave_1: left promiscuous mode [ 88.656460][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.667536][ T60] bridge_slave_0: left allmulticast mode [ 88.673220][ T60] bridge_slave_0: left promiscuous mode [ 88.679066][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.688394][ T60] bridge_slave_1: left allmulticast mode [ 88.694044][ T60] bridge_slave_1: left promiscuous mode [ 88.699873][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.707770][ T60] bridge_slave_0: left allmulticast mode [ 88.713462][ T60] bridge_slave_0: left promiscuous mode [ 88.719159][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.727703][ T60] bridge_slave_1: left allmulticast mode [ 88.733370][ T60] bridge_slave_1: left promiscuous mode [ 88.739182][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.747697][ T60] bridge_slave_0: left allmulticast mode [ 88.753472][ T60] bridge_slave_0: left promiscuous mode [ 88.759664][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.884412][ T60] dvmrp8 (unregistering): left allmulticast mode [ 89.006941][ T60] bond0 (unregistering): Released all slaves [ 89.024906][ T60] gretap0 (unregistering): left allmulticast mode [ 89.127710][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.137876][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.147546][ T60] bond0 (unregistering): Released all slaves [ 89.285458][ T60] tipc: Left network mode [ 89.290057][ T60] tipc: Left network mode [ 89.294921][ T60] tipc: Left network mode [ 89.308158][ T60] hsr_slave_0: left promiscuous mode [ 89.314197][ T60] hsr_slave_1: left promiscuous mode [ 89.321422][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.328952][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.336956][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.344457][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.352930][ T60] hsr_slave_0: left promiscuous mode [ 89.358980][ T60] hsr_slave_1: left promiscuous mode [ 89.367790][ T60] hsr_slave_0: left promiscuous mode [ 89.373891][ T60] hsr_slave_1: left promiscuous mode [ 89.380569][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.388048][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.396402][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.404082][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.414743][ T60] hsr_slave_0: left promiscuous mode [ 89.420863][ T60] hsr_slave_1: left promiscuous mode [ 89.426658][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.434245][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.449301][ T60] veth1_macvtap: left promiscuous mode [ 89.454815][ T60] veth0_macvtap: left promiscuous mode [ 89.460741][ T60] veth1_vlan: left promiscuous mode [ 89.466114][ T60] veth0_vlan: left promiscuous mode [ 89.471799][ T60] veth1_macvtap: left promiscuous mode [ 89.477320][ T60] veth0_macvtap: left promiscuous mode [ 89.483676][ T60] veth1_macvtap: left promiscuous mode [ 89.489212][ T60] veth0_macvtap: left promiscuous mode [ 89.494720][ T60] veth1_vlan: left promiscuous mode [ 89.500080][ T60] veth0_vlan: left promiscuous mode [ 89.632778][ T60] team0 (unregistering): Port device team_slave_1 removed [ 89.643834][ T60] team0 (unregistering): Port device team_slave_0 removed [ 89.756038][ T60] team0 (unregistering): Port device team_slave_1 removed [ 89.766069][ T60] team0 (unregistering): Port device team_slave_0 removed [ 89.828909][ T60] team0 (unregistering): Port device team_slave_1 removed [ 89.839264][ T60] team0 (unregistering): Port device team_slave_0 removed [ 89.872979][ T10] lo speed is unknown, defaulting to 1000 [ 89.878895][ T10] infiniband syz2: ib_query_port failed (-19) [ 90.731120][ T60] IPVS: stop unused estimator thread 0...