last executing test programs:

3.026369312s ago: executing program 2 (id=931):
unshare(0x2040400)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x2, 0x6ee78b90ef7fb6da, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000005c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x5, 0x84)

851.46473ms ago: executing program 4 (id=1018):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fstatfs(r0, &(0x7f0000000500)=""/131)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

801.344733ms ago: executing program 4 (id=1019):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0xe, 0x3, 0x2, 0x800, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r1, 0x4, 0x1, 0x0, 0xc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0xfffffe08, 0x2, {{0x4664, 0x6, 0x20000001, 0x101, 0xef6b}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0xfffffe08, 0x2, {{0x4664, 0x6, 0x20000001, 0x101, 0xef6b}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000010560100300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac14142a0500090029000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711102000000000085100000020000001c0000009500a5050000000000000000000000000046ce00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

775.498394ms ago: executing program 4 (id=1020):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x24, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}}, 0x24}}, 0x0)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
unshare(0x6a040000)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x84, @private=0xa010101, 0x15, 0x3, 'lblc\x00', 0x1, 0x0, 0x7b}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

688.514419ms ago: executing program 0 (id=1023):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x480}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5, 0x480}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async)

638.783942ms ago: executing program 1 (id=1025):
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x140c040, &(0x7f0000000080), 0x3e, 0x514, &(0x7f0000000140)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x1}, 0x1c)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/18, 0x12}], 0x1, &(0x7f0000000700)=""/161, 0xa1}, 0x100e3)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @loopback, 0x5}, 0x1c)

638.259572ms ago: executing program 4 (id=1026):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24a202, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
close(r0)

580.528806ms ago: executing program 4 (id=1027):
r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x100, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x1}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e63925789381db3fe455e8dadc7dcf81189517730bed5d8036168bd2e27cc611027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc506c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7964a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

579.211966ms ago: executing program 1 (id=1028):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000140)=0x7, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==")
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="967766640d8b58", @ANYRESHEX=r6, @ANYBLOB=',version=9p2000.u,\x00'])
write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xb5, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

579.042806ms ago: executing program 0 (id=1029):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fstatfs(r0, &(0x7f0000000500)=""/131)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

578.563506ms ago: executing program 0 (id=1030):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000240)={0x80})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0xfe, 0x4, 0x8, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x7], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0xfffd, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0xa, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x78bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff2, 0xffe0}, {0xc, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044881}, 0x4041080)
syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100), &(0x7f00000007c0))
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r13)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@local]})
r16 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r16, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r15, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14)

516.401039ms ago: executing program 4 (id=1031):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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")
creat(&(0x7f00000004c0)='./bus\x00', 0x75)
mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0)
unlink(0x0)
setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000300)=0x3, 0x4)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d)
preadv2(r2, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x7fff, 0x9, 0x1b)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x200, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r5, &(0x7f00000001c0)="f1", 0x1)
sendfile(r5, r3, 0x0, 0x40001)
sendfile(r5, r3, 0x0, 0x7ffff000)
sendmsg$tipc(r4, &(0x7f00000005c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="6d7b98afc819fca1c6", 0x9}, {&(0x7f0000000180)="8f53cc59aa473006ea", 0x9}, {&(0x7f0000000280)="9bfc7916c33559c61638b31ad55ca4539f13f0bdc5f5120426dedc14ca0728a17f3c33023b0cd68015e7b685b6d35842d6762abe9d", 0x35}, {&(0x7f00000002c0)="b8605e1da908e063c46e89313d8ffa36e60b6083b0f469686e48d8030b6fcbc758a28304bb4372aedb77555d2883e05b6a5c4f39a66f922c93747850bda84292a7f8ad6f999461b4307345b9bd14aa87b3e2fd21e326412575716d3100e330fd6bd64ffabc2c8bd73639f47fb9e6dea0df17b483ae3939b7e6170fd9f259986a3a227a3f00dc55145ee57e0fee6546aa5d548343c66844b4e72357693e4fc2c190611a0b16ae4c99a9baeb4f439d4f7cab91eab941ad9c3274d2e2e8278ed695d3def604ac84389f1da8a899e26526a195c1b0", 0xd3}, {&(0x7f00000003c0)="9fc05f233444294e860cac5c5d69b272dbb7c33606715451abe2c424dfe95b0ca20750e12ffcc8b0a5af793d53537e04ac4387b33733d08ad850964aa2c650842933f27e66b8c1fa32ba1d05ccf460692266eaec79fdd0080b6b412ebfdc56c399badb04cf8a1368ab718706a2fe4a57e931ec524233dee7ebf78fcc6f13e8763cd558dcca1fed1162102a36f765ad6450398e0a243cc0032e96887d15ae8648f53dc4460d5bc795a446763281c175268cbd62eca01e393849822d3e7df3704cdab631fbc5bbf7ae369b4156bd69dfe440c1236f5c556681e42399fb0fa20558ad9bf80d88db6783da89291f04", 0xed}], 0x5, &(0x7f0000000540)="7d2eebb0806f6340583fc65b2f2e873e86ffb81dba569554ca0e7cc6ad47e535ff620bc08f17ddefbdefc97255c9b960c7ec7fef31597f0e8f34e2c0d62c26061dc85d35ff051aba122a12ed1c6d7b", 0x4f, 0x10}, 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001980)=@newtaction={0x48, 0x31, 0x3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x14, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}}, 0x0)

486.250771ms ago: executing program 1 (id=1032):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x9, @local, 0x8}, 0x1c)
listen(r0, 0xfffffffc)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) (async)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x9, @local, 0x8}, 0x1c) (async)
listen(r0, 0xfffffffc) (async)

458.644103ms ago: executing program 0 (id=1033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', <r2=>0x0, 0x7800, 0x7800, 0x1, 0x8, {{0x31, 0x4, 0x3, 0x1, 0xc4, 0x66, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@end, @ssrr={0x89, 0x27, 0xa, [@private=0xa010102, @remote, @multicast2, @empty, @multicast2, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty]}, @timestamp_addr={0x44, 0x1c, 0x46, 0x1, 0x2, [{@multicast2, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0xfffffffb}]}, @timestamp={0x44, 0x1c, 0xee, 0x0, 0x2, [0x5, 0xfffffb85, 0x17, 0x10001, 0x2, 0x2]}, @end, @timestamp_prespec={0x44, 0xc, 0x5b, 0x3, 0xc, [{@local, 0xfffffffc}]}, @timestamp_prespec={0x44, 0x24, 0x40, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@broadcast, 0x6}, {@rand_addr=0x64010101, 0x6}, {@private=0xa010101, 0x40}]}, @cipso={0x86, 0xd, 0x0, [{0x6, 0x7, "3fb0c47f4b"}]}, @timestamp={0x44, 0x10, 0x9f, 0x0, 0x0, [0x1000, 0x3, 0x7]}]}}}}})
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlinkprop={0x24, 0x6c, 0x527, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10404, 0x82e}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x8000002) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlinkprop={0x24, 0x6c, 0x527, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x10404, 0x82e}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x8000002)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000304020000000000000000000400", @ANYRES32=r2, @ANYBLOB="000300000000000028ff018008000100677470001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000400010000000800030009000000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8044)
fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, <r5=>0x0})
fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r5}) (async)
fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x0, r5})

392.612117ms ago: executing program 0 (id=1034):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)
cachestat(r0, &(0x7f0000000040)={0x71a3, 0x1}, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r2 = syz_io_uring_setup(0x5cad, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x0, 0x1, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000100))
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000002060102000000000000000000000006050001000710000005000500050000003400078005001500090000001800018014000240fc0200000000000000000000030000000800124000000001080009400000000d050005000500000005002a7d96a43fdc08291e050005"], 0x68}, 0x1, 0x0, 0x0, 0x20000814}, 0x40)
socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180))
io_uring_enter(r2, 0x6ca3, 0xd171, 0x8, 0x0, 0x0)

391.916177ms ago: executing program 2 (id=1035):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b70000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x33, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value=0x7000000}, 0x94)

292.451013ms ago: executing program 2 (id=1036):
r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = memfd_create(&(0x7f00000000c0)='{&(}]].\x00', 0x6)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r1}, 0x18)
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/23)
syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="cd343d656d473b36787a65a3cb78ed2a2bf3e01accdc2910ccfc72d96f696265b0534ca70a9472542abb78fafd4b58337718a82b50fd47aea93080a37e82322adb55a7f73a1548b938587c8c61c8d2a994e042ad2b4009ab0e3be6ccab0114cb33112241ace717adffa6421540d0dba90145c63efb44d853ba8ecc2ec487623cd89aaec14a6828dae94fde71ae199420921dcd83a02df3f51bbd0eb05e4b47093c69e94b5c8149b8e37aa3640942f04b253a08b67c7ae0aa01b44a22e860c5fa0776c92754f93d8aecfdbee6f13be8"], 0x1, 0x21e, &(0x7f0000000540)="$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")

291.573843ms ago: executing program 2 (id=1037):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r1=>r0, 0x62, 0x10000, 0xc2cb9e9})
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/68)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000001c0)={0x7, 0x0, {0xffffffffffffffff, 0x2, 0x6, 0x0, 0xf8}, 0x5})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000280)={0x9, 0x1, 0x8000, 0x3}, 0x10)
sendmsg$sock(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)="2ea34faa17fc03a7fab5c998e6c80f5e7f2cfb9f361a9d40a604607e7130cd826a4d228218a17fead340c395ddff43e695202abafc05ee07d387b932b81d1d006b12ccc12ab6a205059019b122d299cf60f0fc082549737226e85fc7906b90498729fe0954c15087aeb2a276627e4c2ee7a74cefc9313db19a7c07168c45a37a211c2792af980a0509985c054fd77a59c6b8d095bc70cc16d7598639a4e888bc7adf01af65a421b17a029bc3e22321840bcf768fe553ea1f8c85b1edbea68d2ec55f30d69b91713784c6de2fca25bbbe31bd0eb83de7c2542bdb8bccc05923bf66a3861f8e4acb27c142ca45dc043231f57edf2372b1807c1a6c4b9666878e486de360e6fe7bc31fac754203bd8878374b01eb5f02659ac00012fd0892fa3e58b6feaaad8e56a50c5be16579c39f09b30f4b67bfd07bb00eef719ddbbd7dc2efa42055a36c00f9aa995b527c40625804302500d5b624a27e17fe8e54567cf0ed1acb85de1e0e294442f65678b97ffd629ea76ef694d64f7a278ccdcef7a9fc16ab88cd0c8af10e013944da000aa2ea975d2d40fe95f92d5145e484e3bb62c1e9d3f6ad241a655a7a2bbf5b1565b93c7aaf4477428689aeafb4bfeb49cd25ab032eff2d0137d7f074e15257a68742c15086b91f7452dd594771d835fa0642eb0d7443b517834ab55296bac2791b4a59bf825a3e187029ceb46c3602ba0d7f639d6d35d96b36bfdbaddd5ed5df7dc5c976e102cbe8731c78f19438b863a0def4cc2d9a3acdafdbb1bec06311a50bb87790378079ae5b62da877b0715325d3e63664eba4df51b3ce01e59b7bdc299431c8770a9077a774e50ed23902a01894f4986a87fcf17d1bacc9c34e097751d65da701a166abbf9bb4ed049a375c7a8860167afc129869814c023baeb22abcd3b8f9136d643c91179f8e188f277931d28a356a92aef6bb538ff33e15e95a7b5543221d9d0fed26d8dd780628a86ec80f503c3a4ae4dcc03d7105d6157354dc7195493aa7aeff73374888bf1e968e3ec2bbde36dae4ccf0d5ce262e0cdde85d1809cb2c545d9728850608dac1df36661a406d39e830aa3bc91da48b607fae5de2e036f6de3c5bebf20df68328f4c94850af38ed511d86779e553fdb8726882895c9d26893c5377b57230dc9a4c2fd2fe2f77de34bea007f926899bca464cf236906f58e52dddc0a79cb8fa8aa44e2449288b8a6bd19006f63a6dfd626594e7890186948893ded17c6c7accaf31e82a6f5bbe906fc5c4f8119fc8a9b1af1c3867b13911b31781fa014923af9458c6e028902a34b28c7aafca0a24923cdb6eb7f6752dd37baaffa58f58b6173170b3eb23a6424ded5eae1ce097d21a76b803406b7e57a26b12a5e2a2535138ea2e252df6c32f001c78867ae94176c1d0cbe97386d7c21a10aeace1c93bad284665b099e8926970a87369f3d7e2ca8b4c073259209d1fb51816c6912d6b408f08a250c70b8a32316e9be5fc96b095c1ba8a36d4d7465b7a48f5862a44d32dc5d5ee6d6fc4746911693f54d7c16bc5c6965cc54b1c58eefa3973d61030c7dbf5d2cc015a719a2ddd8dbf99147f824a96595f83cbea139e6c8c36b903226e2c02361ac835c67eceb42ec2618ead2e2b3b30c0d6f3e2e7ecf610e8731f5aeb2644b1c7e17977ca1888cb000c9c36e2677c67521b602345189bddba06f1fe1bf7472367dcf8063ffcd5524ac1d15f5cf4eaf7c9e5d051fd165d63581aa8d82f671cbdec80abc66de5076495993df762770c230cd9f368865566d65f4298f3e223feb4475f079b292d6c4400196219c86e8f86dc0c66ee1ab44340a645d781ae622d16d3f3b34e2461c46466e2ca683dc9a2e63eef17e15f1dddac5e9319711e3b86aa236d22ff9429c82894c4948727360d92b4733ef061262f5642b1dc2721f871e38ac227ef222b8d7e431793a20b0f92fdccb2e08974099bc1527e58355feb7d25a5f409d5dda1747d649d33e8756be4759f9c529164a458f1823a1601dd0ac5885f93d5225ac520b4b0ef6c46e487f08bfeb9180ae622feb5a9c0b339eedcf221b6766488afcf846c6dc0fc2c6c195aacb74f66fa8dd38568311b3e3dda28a41ce0f3542c108e852327512b47a1d919cbd924e85d007f981ee58f9b861b120b65eaed028493ba08f2500f0ca318755fd923fe557cc8fda81644a6a9bad0dfa0ff3ac82f0c3168a2a1efc3266f53c8d9e619135f31a6c6cdd70948851dba75b3d00c6be6db105f395532d87d5be8e00b529497f3f9c1af3a77d5768dcf354f7d73434e5bd159d1cfa2c03689bef2ad457916e3e3c50fd844a444d444ffe29a18344d93bd6abba67737a64f1408cb20a5075b79cb503058e969048fe206153b41d2e20e61c6fb750e974659fb82c7a4a1214daaaf2d1154ff948bc1203321da59bd8c582ab237c4b0bd4fbd403683853552a4816077261b5bbb2671e26b596e4f7475ec15e4c9420248c9c0c96c68165865f2d4d63c18069f6e9746ac176ee58ae0ad539bb376884a992a82c67dee987a5e804a11479c2e98c2f9420d289b5f98c6b61c0594799d4ff2d7150605afbad76ae40b192d228fcbfabc979b55d67086c567c4d9cd17ae2b62704640e895c699bfaaffd46c3077369897cbcc5f7ee69552b29b321d262ef43b913790563ec4d5597fa93c76869d1175e898b7382020c3186dca320727d33caa870f3d81c88481562365741c879852d6cac0c1334351cbc9747e795f79f9807e2d9816093c23cef54621fec2ed2acc504922801d7a39872ce4759ad2599fd242ab1e632b43b3d7266f6ce29fbbd385033ba7f29f2100aadb46ad573e199b99c058595958d63de3ee10c77e7a8921348482e0c2a6772d9eb8f8c8f7310139ba505e048d909e5f708999c65d82d6743ef359debbb559e0b930d4e5d3c016209b0582f66f7941f50c50161c169368fe06810e1652e02e53d6b75e393729bba8b2f24ce7df3c2fef3c60ea5022d94cb0cc10f20bcd5bfaa02c83adac836727386a87a7a46ee4d5ddc0b8510718fb1acf4438e13af26035dec31021afb56ede283f00380f070b01fa06dd2cccfbd9cef4aa46f30d2cf7f77b558dc10a40857cc1ee85ae471ba9144fa4606068773a0fb47056f5ba684c58b9961243a2f25893bccd8d87d2e173cbbfb29e10c73aa9ab9d441717ef1e46c65be825b92cd79d46330a2c5350b0bdc0c708065511fd889603049e4f3a606f931810c6fd728e79ef97b97ade7e62894a184fec62a8f5098500cd46117e37af6bf81cfde1c478954786328db199143f3a8f325eb2355dfadc72dbc1766561c8e89069823d2b01e0d56b47d041d882bbf687b8c98c347550305b164939f8fe4d22bacfe9b3860399629749f792b989bbf375ffadcebef42096bffa64cab5cc0a446da476d5579c91996ac21c4de740a21b0d49a81b3bddd8fdaa23fb98d465de7b87bf6ea2069a1288fa571b8c33f5c2be913b008c957671fdb25985517aa79990a9a256fb93869e6803f0028e8511a6102e1315bb801878f6a532b6253e0a02938fd8206842cf617ce848cc265471e6cb47b20b8a2e495e369909d4ec1483f40f8b907c84ce7177811782313666449d92620d56e7fc347ca4bce8029c5f9bddc3d2453361fd7a4fa95843796475aa7b62421e8c69c3643468cc8a6e35a3393540e56b780c0a7476957632341bd0be3806cc7f7a4abba68a0109f0c9b0037ef9e8953fb19183657789ebab744dc6889dac934369b01109d90ea08aa2d54e6ee29caca6d492a17e0b4031c57d5a392f0dff51beba93ebea05909fecd132a0c86ff5f2c5a7e152649980af9c6fe2771194ceb7e7aabec4e0e6c3540a49265a8ff063ea15e8ad10fd9ea9673a0129bf5f7c775062f45e148fa16ead3bd13c80e54685d43e34c571eef7a135a56bc52d4a0bfc9a6c05ed641c9e55272e3bd9534b686220d47416cbb3c51f241eb71c07be9743b4ecf1e5fc09802cf26d77ec9fb29c57287451f8d955c83972496fd57ed2669d767055fb9ba626eded705a6883bb70d74b67d8b94061aa6873f9ddbee560fafc48ebc08909920a7a9914826f7c3f525016927dedd8349621ba83ce47138dc9123881a259878deb785731bdf38576f396c990242d29a65060402d3c3cea8ea972ce0b5809ef9c5a7d1cf33ce3bc01179e69d3fbe695cbc071d76f2da9b45bbff6aebb51db57a295f497f8d667e1c4334e9ea19b31c25d427d0c4c9d02af1683656297e3a7a130935da4cc04b7f5caa4e91bc7374bfba6280b30c989b97d230154ce7d596fa24aeba1c4303d3f2a0bc693bc080e0b8777a498ad42bb6fce1509f99e21610a8c3cb17879a96f32c3a14e41e60be7856b9b72831cf5fcfcfd46c3ca6a3e2fd211524b6d6b286faee08065f57696d998cafd220e35b997afd96a86b78956f206029f98437148e5f141d970868dc56f8ffa811422fccb4be8b319d1b45e6d797a2254d95209bd202de3f0509c576be29fd4d73644bbd096329d01d936b455fae8925d0f1ceaae62df761fce8edd4617627d6631d0b0510f0da1f508e41ee41db68c1fcdca61a1203128ae4454365f4dd541ce2c809f0b469df07f71c7910751ac3a9b6be208af22ec7192b2300b362a8526ac71c52322273de603caf5a8d65b23350036c8f801fb2a81ec18f319755facd43bcb9b3e3313b450bfd97d7a66c7d3ec6d3af9a3f66815febe78f40f87ce71072ae619b37bd32f923f189ea4da69fb140c091fbfee327ce244cb97099e03a1c009f38013d7ed9cf8eb7c00617b833db46953493c7092eafa42cca78cfd6cbebac8bfbc622964edafd91d24727faa6c987bae079073b8ea9a5070fa28af6653cfea8e4b9c79939f00498ec60dac667e46fac423b5163919ed0dd8249e8d0e3b4a3cc58316c76d4740701c17799ed021f588e0cae532c08b4cf3451e779bd1f6eb2341884e30e933bff2c17cd6d9b8d5622d4684b25dfecb13e4153a57b6357b538afcac1044eb0c7a1a05813b643f1922812a8eb95f05e33ffea133c9a3bdf0eff6720e3725abb08641e3c7af6b51b64f69306294149bf579840d771f159789312eeb464640f9182c8123db8bf22e70a29b888ae5b732c9fa36293466db2565a23c183ae848a7af9fe3999a15630ea6ecacaab8b1511618a7be7f390870870ab45901008cf7df6000043c6bc8ed07f9fa6b413866d25c278ffe1b042f590416070afecbfc8c6fb6305e1bda38588277a51b58fa740b27731f653f045ce645317c6908f9dd4cc5138474c5627b919411dbe28037cbfbb9af21b0f6a9dce92ecba309abdc96301a74a51ea7a48bf016f34bc5754b466e5ecc240f8e18e8b8798cac98720254498f9cccec1bc990529fc7d863a7e65b7224622c49a9e2c752c6bd805352dadfc86ca7d847e2bf17e75a4a0fbcc0d3b05857d35fca951a27fc4093857bead06edab18b74ea4c9f7f71c1d2259d11f3f6692c6babdeb22f11b578541d1360abad0cf418ccc42cd10bc1ff5b66d904103ce472299cb8d7b2107410e2e2b747e8ecc50667d7813cf9a0d0437378ef53a4f7f40dde1f79f84bf2975f0f24e184f4b43902ee67a79dbfde99551823112abdb92e0952fbfcf624793cf94280999c6cd162a71f5f9c65a17fe024fa9acfb245696f37c055501b5160e84f4eda9a9ee3602fe969883fd568288655c64651103b504e1ab5c41618d054f144e5ded91011c4d90d5e16b2d69bc54f37bf8770bc27198e627daaa510b9579f8de9039ee6bdaec8", 0x1000}, {&(0x7f00000012c0)="486023819873bb45601e370ca054b99b1e66595be9de466d51450e04998b16c520476bf3dfd1a3c1cc009d2d6da6c5708925a355b4ec155c21492138e276a786b05fed9350cf9ad547a2190bb2f034166ef7f575c8b1ee51d8e73c36e795f86a7f80861d622b5f4c121adcfd87ba7fece5f95b0f385a74a1633599e5f00d3a604354843e210701aaad6b6aabe603fd2490dc039b04fef7553b4b120661dda93594970b8787e2e6ee2b514dbde87a4fdeded56e1206ead9539ccf3f3d49d037c492bbe33f68e14aba1bd305b6bd577867a443", 0xd2}], 0x2, &(0x7f0000001400)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x400}}], 0x60}, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f00000014c0))
fcntl$getownex(r0, 0x10, &(0x7f0000001500))
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000001540))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r2)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x804)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f00000016c0))
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000001b00)={0x0, 0x1, 0xc, 0x3, 0x138, &(0x7f0000001700)="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"})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x33, 0x33, 0x6, [@ptr={0xe}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @datasec={0x10, 0x1, 0x0, 0xf, 0x3, [{0x5, 0xbfa}], "837fe3"}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e]}}, &(0x7f0000001bc0)=""/27, 0x52, 0x1b, 0x0, 0x80000001, 0x10000, @value=r2}, 0x28)
sendmsg$sock(r1, &(0x7f0000001e40)={&(0x7f0000001c40)=@phonet={0x23, 0x9, 0x3, 0x7}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="8ea9f6bf017d8b07a2456f8555e68a816aa2", 0x12}, {&(0x7f0000001d00)="b694f7991b58fece3702058ff61c12a12e31ff206628587d55c91dfc767ca36eb8740c4b77e5de18e89dd2484b38233444a4e068c90099ca8c3eefea6afd9287a37020faef243162031f786792284315ced2afc6b011", 0x56}, {&(0x7f0000001d80)="d52d1b86aa0ae5b23da2a0173c6543b7f2630cb49b3e4f67d590acc540618d5f149d69bd95f40f", 0x27}], 0x3, &(0x7f0000001e00)=[@timestamping={{0x14, 0x1, 0x25, 0x650}}, @timestamping={{0x14, 0x1, 0x25, 0xffff2374}}], 0x30}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002140)={r1, 0x0, 0x81, 0xe4, &(0x7f0000001e80)="33504c443138e042eefa34e855f3839fe9e141c2791b7b12445fb8bbc6a8c545f3e0926f7319ce81ffe7b2d66203995bbccdb4f3afba68ea9dc37fe1c370089584a86c10415b67c349729ec492d34131107e4de04068bc9f9e463f46f2a74245deee98064e27627b47a966ed8bd486ffb95135f67fb055c466719aaf33d8ea710c", &(0x7f0000001f40)=""/228, 0x4, 0x0, 0xb2, 0xf, &(0x7f0000002040)="beab7e028a84c394fc955e18cc26a9e7d329ae5b3b894ced6f7fc80f7fc9d961ef22f07264b0ac99d07133f8f09619aba4e76cce712229d0064a4bc08a73810d474e2ffadb8656882880e8cfa776f83187d6e82918f890a4f0091fe56bfaec24f0e50699c3d4fa641d87089513a4943439a0f9686aec4d262fc4d3eda96af66e66198cdc1c9c467a88f3ddbe5a11fbfc4e8bb8d1c1ec75a6c7bcbf68717b856646fcabc93dc519344b9e8ad25cdec1707694", &(0x7f0000002100)="8ebbf39f502bc646bb2264708d2618", 0x0, 0x0, 0x5}, 0x50)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000021c0)=0x7ff)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002380)=@bpf_tracing={0x1a, 0x8, &(0x7f0000002200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], &(0x7f0000002240)='GPL\x00', 0x1000, 0x7, &(0x7f0000002280)=""/7, 0x41000, 0x2, '\x00', 0x0, 0x8, r5, 0x8, &(0x7f00000022c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000002300)={0x4, 0x5, 0x3ff, 0x101}, 0x10, 0x10cd1, r1, 0x0, &(0x7f0000002340)=[r1], 0x0, 0x10, 0x5}, 0x94)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002480)=<r7=>0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000024c0)=<r8=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002500)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000002600)=0xe8)
r10 = getegid()
getresgid(&(0x7f0000002640), &(0x7f0000002680)=<r11=>0x0, &(0x7f00000026c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002700)={{0x1, 0x1, 0x18, r3, {0xee00, <r12=>0xee00}}, './file0\x00'})
fsetxattr$system_posix_acl(r6, &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f0000002740)={{}, {0x1, 0x3}, [{0x2, 0x1, r7}, {0x2, 0x2, r8}, {0x2, 0x4, r9}, {0x2, 0x1, 0xee00}], {0x4, 0x1}, [{0x8, 0x5, r10}, {0x8, 0x2, r11}, {0x8, 0x0, r12}], {0x10, 0x2}, {0x20, 0x7}}, 0x5c, 0x1)

291.393913ms ago: executing program 2 (id=1038):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)="370b0df3c5", 0x5}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
epoll_create(0x1f)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]})
close(0x3)

278.571344ms ago: executing program 2 (id=1039):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0xe9}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

197.845809ms ago: executing program 3 (id=1041):
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x140c040, &(0x7f0000000080), 0x3e, 0x514, &(0x7f0000000140)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000e80)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffe}, 0xfffffffffffffdf0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @loopback, 0x5}, 0x1c)

124.504463ms ago: executing program 3 (id=1042):
r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x9, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x20, 0x1})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmmsg$sock(r4, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014)
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r5, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020)
r6 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r6, 0x29, 0x4e, 0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0xfffffff9, 0x10100, 0xfffffffd}, &(0x7f0000000400)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r7, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}})
io_uring_enter(r8, 0x27e2, 0x0, 0x0, 0x0, 0x0)
r11 = dup2(r5, r3)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r11, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
shutdown(r7, 0x1)
write$binfmt_script(r5, 0x0, 0x0)

124.180062ms ago: executing program 1 (id=1043):
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010012f616980000000000ffffffff000000020000000000"], 0x0, 0x1a}, 0x28)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000001280)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xfffffffffffffd58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="5400000096f6d0509b5e23beeee3178f2894a8ec6c3fdb0240185eb55ca0d63c3beec1883b62bb6255c796e19dd8435d1fabba088c9fd35e17dacad349a27ebffeca016f03ca2e867bd657bbb07132d89a2ad96e229e78299acda1bb0af5137557c6a5b66245710b027f0c0ee62caaa03f25e5c36355cdda92cb16276b5f0c7593ec19adccbde1220882009ff4abfe483ef3575deb3da6ddef26b63a257ecd3004d078d4d81a643df8dc9113568edad90d42e82a4ab37f28bfe19a5cdfe75bd5073e63650ff8e406b15dc4ae86fb31be212cd6c7ed8fc908b8aa", @ANYRES16=r6, @ANYBLOB="190e26bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d008e00020000000c008f0001040000000000000c0090003742000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24008010}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x5) (async)
syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94) (rerun: 32)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r9}, 0x4) (async, rerun: 64)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x4f}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea8}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="40d174b28bf781c274386d178550", 0x0, 0x1200801, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}) (rerun: 32)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000100)="810e742710e97e5d5e11038c96ff4377117f49e529b5", &(0x7f0000000580)=@tcp=r12, 0x1}, 0x20) (async)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x1, 0x1, 0x9, 0x4, 0x9})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r11}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)

97.116165ms ago: executing program 3 (id=1044):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cd3e28bd700000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f917412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000006000b002b000000"], 0xf4}}, 0x0)
open(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = socket(0x10, 0x803, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4)
rseq(0x0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x4080)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0xd25f55a255150ea5)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r4 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179, 0x0, r3}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000007c0)=<r6=>0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4048850)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x24000850}, 0x24004840)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2})
io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0)

65.450546ms ago: executing program 3 (id=1045):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0)

16.567369ms ago: executing program 1 (id=1046):
pipe2$9p(0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a2b3978044b864f941e1137ce034002852c9ef5606de83cf95a02ef4bacef1188250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27059feb304bb3e260a2", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f0000002880)="$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") (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x369622, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async)
socket(0x28, 0x5, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) (async)
r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f7}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
timer_create(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) (async)
r4 = fsopen(&(0x7f0000000080)='vfat\x00', 0x0)
pwrite64(r4, &(0x7f0000000140)="d83c525ae1d5891ef994ea45a1a746920aea73a9f281be6815c3657edd905155af7eec484426328ca23bc68ca3e2835c7ff11c8e88ad621bbef88444ba0d7ed12fbe0d7a51d8eea1cfb118f4f6905d691359ee3f6e7199039256deaa5c68e46e46eb26afd17af5ebd34835d5f1889cbb63ccadb9d30afad391cf32e88addf8fe5227fcd2c6d34224d240020c690af8a8f10ef445c1cdeb9c4b1695132f", 0x9d, 0x4)

16.364239ms ago: executing program 0 (id=1047):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b70000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x33, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value=0x10000000}, 0x94)

14.939539ms ago: executing program 3 (id=1048):
r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='uid', &(0x7f00000001c0)='(', 0x1)
r1 = syz_open_pts(0xffffffffffffffff, 0x10200)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000480)=""/4096)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94)

14.452699ms ago: executing program 3 (id=1049):
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=@udp6}, 0x20)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4004, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r2, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)

0s ago: executing program 1 (id=1050):
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000"], 0xffe)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x40095505, &(0x7f0000000000)=0x10)

kernel console output (not intermixed with test programs):

te
[   38.999964][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.010928][ T3907] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   39.182296][ T3491] Bluetooth: hci0: command 0x1003 tx timeout
[   39.183000][ T3638] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   39.291294][ T3927] netlink: 80 bytes leftover after parsing attributes in process `syz.4.149'.
[   39.374666][ T3932] syzkaller0: entered promiscuous mode
[   39.380623][ T3932] syzkaller0: entered allmulticast mode
[   39.413333][ T3938] loop3: detected capacity change from 0 to 512
[   39.574237][ T3945] loop4: detected capacity change from 0 to 1024
[   39.582377][ T3942] loop3: detected capacity change from 0 to 1024
[   39.589423][ T3942] ext4: Unknown parameter 'euid'
[   39.681012][ T3947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.693343][ T3947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.697696][ T3949] loop3: detected capacity change from 0 to 512
[   39.730774][ T3949] loop3: detected capacity change from 0 to 2048
[   39.744744][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.768134][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.787085][ T3954] netlink: 80 bytes leftover after parsing attributes in process `syz.0.160'.
[   39.829376][ T3959] loop0: detected capacity change from 0 to 2048
[   39.883114][ T3959]  loop0: p1 p2 p3 p4
[   39.898138][ T3959] loop0: p2 start 117440512 is beyond EOD, truncated
[   39.925112][ T3959] loop0: p4 size 589824 extends beyond EOD, truncated
[   40.010051][ T3278] udevd[3278]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   40.014007][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   40.025636][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   40.058978][ T3491] Bluetooth: hci0: sending frame failed (-49)
[   40.066451][ T3638] Bluetooth: hci0: Opcode 0x1003 failed: -49
[   40.124968][ T3997] netlink: 'syz.0.170': attribute type 10 has an invalid length.
[   40.144614][ T3997] bridge0: port 3(netdevsim1) entered blocking state
[   40.152091][ T3997] bridge0: port 3(netdevsim1) entered disabled state
[   40.160284][ T3997] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   40.170050][ T3997] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[   40.178666][ T3997] bridge0: port 3(netdevsim1) entered blocking state
[   40.185944][ T3997] bridge0: port 3(netdevsim1) entered forwarding state
[   40.241314][ T3997] loop0: detected capacity change from 0 to 128
[   40.313968][ T4003] EXT4-fs: Ignoring removed bh option
[   40.320244][ T4003] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   40.329706][ T4003] EXT4-fs (loop2): 1 truncate cleaned up
[   40.336484][ T4003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.398041][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.491423][ T4007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.603376][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.835311][ T4039] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.866340][ T4037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   40.876669][ T4037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   40.899183][ T4039] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   40.909943][ T4050] EXT4-fs: Ignoring removed nobh option
[   40.920589][ T4050] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.935556][ T4050] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   40.951048][ T4050] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.192: checksumming directory block 0
[   40.983992][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   41.005976][ T4039] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.027510][ T4055] syzkaller0: entered promiscuous mode
[   41.033528][ T4055] syzkaller0: entered allmulticast mode
[   41.066573][ T4039] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   41.128046][  T847] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.153153][  T847] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.171208][  T847] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.181106][  T847] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.306887][ T4064] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   41.449238][ T4090] syzkaller0: entered promiscuous mode
[   41.455304][ T4090] syzkaller0: entered allmulticast mode
[   41.514399][ T4095] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[   41.580994][ T4101] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   41.703760][ T4111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   41.717826][   T29] kauditd_printk_skb: 59 callbacks suppressed
[   41.717905][   T29] audit: type=1400 audit(1769938286.943:387): avc:  denied  { connect } for  pid=4110 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   41.786699][ T4112] iso9660: Bad value for 'uid'
[   41.791944][ T4112] iso9660: Bad value for 'uid'
[   41.808474][ T4116] bond0: entered promiscuous mode
[   41.813961][ T4116] bond_slave_0: entered promiscuous mode
[   41.820094][ T4116] bond_slave_1: entered promiscuous mode
[   41.827816][ T4116] ipvlan1: entered promiscuous mode
[   41.834227][ T4116] ipvlan1: left promiscuous mode
[   41.839401][ T4116] bond0: left promiscuous mode
[   41.844661][ T4116] bond_slave_0: left promiscuous mode
[   41.850426][ T4116] bond_slave_1: left promiscuous mode
[   41.926600][ T4121] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   41.936388][ T4121] EXT4-fs (loop0): orphan cleanup on readonly fs
[   41.943550][ T4121] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #16: comm syz.0.220: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 32769(4), depth 65535(65535)
[   41.963533][ T4121] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.220: couldn't read orphan inode 16 (err -117)
[   41.977042][ T4121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   42.000786][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.037751][ T4124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.047745][ T4124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.230229][   T29] audit: type=1400 audit(1769938287.453:388): avc:  denied  { create } for  pid=4126 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[   42.254503][ T4127] __nla_validate_parse: 6 callbacks suppressed
[   42.254520][ T4127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'.
[   42.270786][ T4127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.222'.
[   42.363434][   T29] audit: type=1400 audit(1769938287.593:389): avc:  denied  { write } for  pid=4129 comm="syz.3.223" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   42.363683][ T4130] random: crng reseeded on system resumption
[   42.388157][   T29] audit: type=1400 audit(1769938287.593:390): avc:  denied  { open } for  pid=4129 comm="syz.3.223" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   42.426637][   T29] audit: type=1326 audit(1769938287.653:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5941aeb9 code=0x7ffc0000
[   42.452630][   T29] audit: type=1326 audit(1769938287.653:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5941aeb9 code=0x7ffc0000
[   42.478215][   T29] audit: type=1326 audit(1769938287.653:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7faf5941aeb9 code=0x7ffc0000
[   42.502969][   T29] audit: type=1326 audit(1769938287.653:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5941aeb9 code=0x7ffc0000
[   42.528972][   T29] audit: type=1326 audit(1769938287.653:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7faf5941aeb9 code=0x7ffc0000
[   42.553853][   T29] audit: type=1326 audit(1769938287.653:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5941aeb9 code=0x7ffc0000
[   42.641785][ T4140] netlink: 'syz.3.226': attribute type 8 has an invalid length.
[   42.650879][ T4137] set_capacity_and_notify: 8 callbacks suppressed
[   42.650898][ T4137] loop1: detected capacity change from 0 to 8192
[   42.697293][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.229'.
[   42.707466][ T4146] netlink: 'syz.0.229': attribute type 30 has an invalid length.
[   42.709399][ T3302]  loop1: p3 < >
[   42.720786][ T3324] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   42.730777][ T3324] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   42.741032][ T3324] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   42.753399][ T4137]  loop1: p3 < >
[   42.768098][  T847] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   42.782652][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   42.803552][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[   42.873523][ T4155] loop0: detected capacity change from 0 to 512
[   42.880663][ T4155] EXT4-fs: Ignoring removed bh option
[   42.893051][ T4155] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   42.904372][ T4155] EXT4-fs (loop0): 1 truncate cleaned up
[   42.910789][ T4155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   42.925895][ T4155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.233'.
[   42.966357][ T4161] loop1: detected capacity change from 0 to 512
[   42.975864][ T4161] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   42.987538][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.988870][ T4161] EXT4-fs (loop1): 1 orphan inode deleted
[   43.002770][ T4161] EXT4-fs (loop1): 1 truncate cleaned up
[   43.009080][ T4161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.038048][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.061575][ T4166] Driver unsupported XDP return value 0 on prog  (id 42) dev N/A, expect packet loss!
[   43.106619][ T4168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.116023][ T4168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.133250][ T4169] loop0: detected capacity change from 0 to 8192
[   43.141246][ T4169] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   43.175534][ T4171] syzkaller0: entered promiscuous mode
[   43.181438][ T4171] syzkaller0: entered allmulticast mode
[   43.220095][ T4164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'.
[   43.318610][ T4183] loop1: detected capacity change from 0 to 256
[   43.408657][ T4189] loop0: detected capacity change from 0 to 512
[   43.420531][ T4189] EXT4-fs: Ignoring removed bh option
[   43.428305][ T4189] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   43.445001][ T4189] EXT4-fs (loop0): 1 truncate cleaned up
[   43.451942][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.468734][ T4189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.245'.
[   43.503717][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.525361][ T4194] netlink: 80 bytes leftover after parsing attributes in process `syz.0.246'.
[   43.559951][ T4196] geneve2: entered promiscuous mode
[   43.568245][   T31] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   43.587204][   T31] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   43.596920][   T31] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   43.597362][ T4203] netlink: 64 bytes leftover after parsing attributes in process `syz.0.249'.
[   43.607830][   T31] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   43.651674][ T4205] syzkaller0: entered promiscuous mode
[   43.651732][ T4205] syzkaller0: entered allmulticast mode
[   43.718958][ T4211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.253'.
[   43.750724][ T4213] netlink: 'syz.1.255': attribute type 3 has an invalid length.
[   43.758851][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'.
[   43.787252][ T4215] loop2: detected capacity change from 0 to 256
[   44.007417][ T4241] loop2: detected capacity change from 0 to 512
[   44.015168][ T4241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   44.046555][ T4241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.263: bg 0: block 393: padding at end of block bitmap is not set
[   44.063268][ T4241] EXT4-fs (loop2): Remounting filesystem read-only
[   44.063587][ T4248] 
@0Ù: renamed from bond_slave_1 (while UP)
[   44.070225][ T4241] EXT4-fs (loop2): 2 truncates cleaned up
[   44.084185][ T4241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.115665][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.153113][ T4251] syzkaller0: entered promiscuous mode
[   44.159085][ T4251] syzkaller0: entered allmulticast mode
[   44.289446][ T4265] loop1: detected capacity change from 0 to 8192
[   44.302384][ T4265] FAT-fs (loop1): bogus logical sector size 3
[   44.308872][ T4265] FAT-fs (loop1): Can't find a valid FAT filesystem
[   44.328603][ T4265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   44.398448][ T4282] loop2: detected capacity change from 0 to 512
[   44.406092][ T4282] EXT4-fs: Ignoring removed bh option
[   44.415949][ T4282] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   44.434698][ T4282] EXT4-fs (loop2): 1 truncate cleaned up
[   44.438814][ T4289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.442166][ T4282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   44.471614][ T4289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.493711][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.521577][ T4289] 9p: Bad value for 'rfdno'
[   44.532766][ T4294] syzkaller0: entered promiscuous mode
[   44.532798][ T4294] syzkaller0: entered allmulticast mode
[   44.571015][ T4298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.571294][ T4298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.697834][ T4297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   44.703535][ T3638] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   44.707065][ T3491] Bluetooth: hci0: command 0x1003 tx timeout
[   44.741692][ T4297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   44.892085][ T4309] syzkaller0: entered promiscuous mode
[   44.897899][ T4309] syzkaller0: entered allmulticast mode
[   45.154676][ T4315] netlink: 'syz.4.289': attribute type 13 has an invalid length.
[   45.272306][ T4324] xt_TCPMSS: Only works on TCP SYN packets
[   45.285327][ T4326] EXT4-fs: Ignoring removed bh option
[   45.292604][ T4326] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   45.304300][ T4326] EXT4-fs (loop2): 1 truncate cleaned up
[   45.310775][ T4326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.343239][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.520443][ T4347] FAULT_INJECTION: forcing a failure.
[   45.520443][ T4347] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   45.534240][ T4347] CPU: 0 UID: 0 PID: 4347 Comm: syz.0.302 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.534272][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   45.534286][ T4347] Call Trace:
[   45.534374][ T4347]  <TASK>
[   45.534384][ T4347]  __dump_stack+0x1d/0x30
[   45.534414][ T4347]  dump_stack_lvl+0x95/0xd0
[   45.534439][ T4347]  dump_stack+0x15/0x1b
[   45.534517][ T4347]  should_fail_ex+0x263/0x280
[   45.534553][ T4347]  should_fail+0xb/0x20
[   45.534581][ T4347]  should_fail_usercopy+0x1a/0x20
[   45.534656][ T4347]  _copy_from_user+0x1c/0xb0
[   45.534677][ T4347]  ___sys_recvmsg+0xaa/0x3b0
[   45.534705][ T4347]  do_recvmmsg+0x1ef/0x560
[   45.534733][ T4347]  ? fput+0x8f/0xc0
[   45.534822][ T4347]  __x64_sys_recvmmsg+0xe5/0x170
[   45.534846][ T4347]  x64_sys_call+0x2b75/0x3000
[   45.534870][ T4347]  do_syscall_64+0xc0/0x2a0
[   45.534908][ T4347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.535036][ T4347] RIP: 0033:0x7fd48b5baeb9
[   45.535057][ T4347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   45.535077][ T4347] RSP: 002b:00007fd48a017028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   45.535102][ T4347] RAX: ffffffffffffffda RBX: 00007fd48b835fa0 RCX: 00007fd48b5baeb9
[   45.535123][ T4347] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003
[   45.535137][ T4347] RBP: 00007fd48a017090 R08: 0000000000000000 R09: 0000000000000000
[   45.535153][ T4347] R10: 0000000040002020 R11: 0000000000000246 R12: 0000000000000001
[   45.535168][ T4347] R13: 00007fd48b836038 R14: 00007fd48b835fa0 R15: 00007ffffb4d47f8
[   45.535189][ T4347]  </TASK>
[   45.541499][ T4351] 9p: Bad value for 'wfdno'
[   45.573097][ T4353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=4353 comm=syz.4.303
[   45.825558][ T4374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   45.868076][ T4380] xt_hashlimit: size too large, truncated to 1048576
[   45.875994][ T4374] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.002530][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   46.009818][ T4390] netlink: 'syz.4.314': attribute type 11 has an invalid length.
[   46.053814][ T4393] syzkaller0: entered promiscuous mode
[   46.059522][ T4393] syzkaller0: entered allmulticast mode
[   46.094012][ T4390] syzkaller0: entered promiscuous mode
[   46.099748][ T4390] syzkaller0: entered allmulticast mode
[   46.157986][ T4397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.194714][ T4397] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   46.241971][ T4411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002]
[   46.260284][ T4411] System zones: 1-12
[   46.264982][ T4411] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.321: ea_inode file size=0 entry size=6
[   46.268349][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.279106][ T4411] ------------[ cut here ]------------
[   46.293818][ T4411] EA inode 11 i_nlink=2
[   46.293834][ T4411] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.321/4411
[   46.309489][ T4411] Modules linked in:
[   46.314125][ T4411] CPU: 1 UID: 0 PID: 4411 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   46.324564][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   46.335588][ T4411] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[   46.343275][ T4411] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e
[   46.349048][ T4414] mmap: syz.2.323 (4414): VmData 29204480 exceed data ulimit 938. Update limits or use boot option ignore_rlimit_data.
[   46.365125][ T4411] RSP: 0018:ffffc900106c7778 EFLAGS: 00010246
[   46.365157][ T4411] RAX: ffff88811cde5d10 RBX: ffff8881077e0610 RCX: ffffffff81be1958
[   46.365174][ T4411] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10
[   46.404024][ T4411] RBP: 000000000000000b R08: 00018881077e05c3 R09: 0000000000000000
[   46.413034][ T4411] R10: ffffc900106c76a8 R11: 0001c900106c76a8 R12: ffff8881077e05c0
[   46.422236][ T4411] R13: ffffffff86fc3b10 R14: ffff8881077e0578 R15: 0000000000000001
[   46.431225][ T4411] FS:  00007f500fb476c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000
[   46.441012][ T4411] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   46.448109][ T4411] CR2: 00007f919e676ff8 CR3: 000000011f72e000 CR4: 00000000003506f0
[   46.457079][ T4411] Call Trace:
[   46.457333][ T4420] EXT4-fs: Ignoring removed bh option
[   46.461008][ T4411]  <TASK>
[   46.461024][ T4411]  ext4_xattr_inode_dec_ref_all+0x57c/0x880
[   46.469211][ T4420] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   46.470447][ T4411]  ? errseq_check+0x2c/0x50
[   46.483012][ T4420] EXT4-fs (loop0): 1 truncate cleaned up
[   46.486121][ T4411]  ext4_xattr_delete_inode+0x6c1/0x7a0
[   46.491326][ T4420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.497125][ T4411]  ? ext4_truncate+0x92b/0xad0
[   46.521684][ T4411]  ext4_evict_inode+0xa1f/0xd40
[   46.526711][ T4411]  ? __pfx_ext4_evict_inode+0x10/0x10
[   46.532389][ T4411]  evict+0x2af/0x510
[   46.536607][ T4411]  ? __ext4_msg+0x1aa/0x1c0
[   46.541642][ T4411]  iput+0x4b9/0x650
[   46.545980][ T4411]  ext4_process_orphan+0x1a9/0x1c0
[   46.551645][ T4411]  ext4_orphan_cleanup+0x6a8/0xa00
[   46.557084][ T4411]  ext4_fill_super+0x3476/0x3800
[   46.562354][ T4411]  ? set_blocksize+0x1a3/0x310
[   46.567619][ T4411]  ? setup_bdev_super+0x30e/0x370
[   46.573185][ T4411]  ? __pfx_ext4_fill_super+0x10/0x10
[   46.578767][ T4411]  get_tree_bdev_flags+0x291/0x300
[   46.584092][ T4411]  ? __pfx_ext4_fill_super+0x10/0x10
[   46.589439][ T4411]  get_tree_bdev+0x1f/0x30
[   46.594262][ T4411]  ext4_get_tree+0x1c/0x30
[   46.599105][ T4411]  vfs_get_tree+0x57/0x1d0
[   46.603931][ T4411]  do_new_mount+0x288/0x700
[   46.609120][ T4411]  path_mount+0x4d0/0xbc0
[   46.613864][ T4411]  ? user_path_at+0xbf/0x130
[   46.619044][ T4411]  __se_sys_mount+0x28c/0x2e0
[   46.624167][ T4411]  __x64_sys_mount+0x67/0x80
[   46.628879][ T4411]  x64_sys_call+0x2cca/0x3000
[   46.634173][ T4411]  do_syscall_64+0xc0/0x2a0
[   46.639142][ T4411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   46.646762][ T4411] RIP: 0033:0x7f50110ec14a
[   46.652381][ T4411] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   46.674569][ T4411] RSP: 002b:00007f500fb46e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   46.684591][ T4411] RAX: ffffffffffffffda RBX: 00007f500fb46ee0 RCX: 00007f50110ec14a
[   46.693219][ T4411] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f500fb46ea0
[   46.701860][ T4411] RBP: 0000200000000180 R08: 00007f500fb46ee0 R09: 0000000000800700
[   46.710965][ T4411] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[   46.719713][ T4411] R13: 00007f500fb46ea0 R14: 000000000000046c R15: 0000200000000000
[   46.728193][ T4411]  </TASK>
[   46.731634][ T4411] ---[ end trace 0000000000000000 ]---
[   46.737782][ T4411] EXT4-fs (loop1): 1 orphan inode deleted
[   46.762625][ T4411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.776319][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.836262][   T29] kauditd_printk_skb: 46 callbacks suppressed
[   46.836320][   T29] audit: type=1400 audit(1769938292.053:443): avc:  denied  { setattr } for  pid=4410 comm="syz.1.321" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   46.888311][ T4433] syzkaller0: entered promiscuous mode
[   46.894487][ T4433] syzkaller0: entered allmulticast mode
[   46.910990][ T4437] netlink: 'syz.4.333': attribute type 5 has an invalid length.
[   46.930961][ T4437] geneve2: entered promiscuous mode
[   46.936702][ T4437] geneve2: entered allmulticast mode
[   46.938563][ T4439] capability: warning: `syz.0.334' uses 32-bit capabilities (legacy support in use)
[   46.943335][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 65535 - 0
[   46.977636][ T4437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4437 comm=syz.4.333
[   46.991893][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 65535 - 0
[   47.003073][ T4435] syzkaller0: entered promiscuous mode
[   47.008687][ T4435] syzkaller0: entered allmulticast mode
[   47.020965][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 65535 - 0
[   47.040768][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 65535 - 0
[   47.124416][ T4442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.140288][ T4452] EXT4-fs: Ignoring removed bh option
[   47.148164][ T4442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.162260][ T4452] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   47.172928][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.176272][ T4452] EXT4-fs (loop4): 1 truncate cleaned up
[   47.191281][ T4452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.212576][   T29] audit: type=1400 audit(1769938292.443:444): avc:  denied  { mount } for  pid=4454 comm="syz.1.340" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   47.236838][   T29] audit: type=1400 audit(1769938292.453:445): avc:  denied  { read write } for  pid=4454 comm="syz.1.340" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.236893][   T29] audit: type=1400 audit(1769938292.453:446): avc:  denied  { open } for  pid=4454 comm="syz.1.340" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   47.297273][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.308019][   T29] audit: type=1400 audit(1769938292.533:447): avc:  denied  { unmount } for  pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   47.342490][ T4461] __nla_validate_parse: 21 callbacks suppressed
[   47.342509][ T4461] netlink: 64 bytes leftover after parsing attributes in process `syz.4.341'.
[   47.362357][   T29] audit: type=1400 audit(1769938292.593:448): avc:  denied  { connect } for  pid=4462 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   47.383238][ T4461] FAULT_INJECTION: forcing a failure.
[   47.383238][ T4461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   47.397948][ T4461] CPU: 0 UID: 0 PID: 4461 Comm: syz.4.341 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   47.398029][ T4461] Tainted: [W]=WARN
[   47.398036][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   47.398048][ T4461] Call Trace:
[   47.398055][ T4461]  <TASK>
[   47.398065][ T4461]  __dump_stack+0x1d/0x30
[   47.398095][ T4461]  dump_stack_lvl+0x95/0xd0
[   47.398117][ T4461]  dump_stack+0x15/0x1b
[   47.398145][ T4461]  should_fail_ex+0x263/0x280
[   47.398200][ T4461]  should_fail+0xb/0x20
[   47.398233][ T4461]  should_fail_usercopy+0x1a/0x20
[   47.398321][ T4461]  _copy_to_user+0x20/0xa0
[   47.398346][ T4461]  simple_read_from_buffer+0xb5/0x130
[   47.398385][ T4461]  proc_fail_nth_read+0x10e/0x150
[   47.398519][ T4461]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   47.398636][ T4461]  vfs_read+0x1ab/0x7f0
[   47.398655][ T4461]  ? __rcu_read_unlock+0x4e/0x70
[   47.398690][ T4461]  ? __fget_files+0x184/0x1c0
[   47.398712][ T4461]  ? mutex_lock+0x57/0x90
[   47.398764][ T4461]  ksys_read+0xdc/0x1a0
[   47.398828][ T4461]  __x64_sys_read+0x40/0x50
[   47.398847][ T4461]  x64_sys_call+0x2889/0x3000
[   47.398881][ T4461]  do_syscall_64+0xc0/0x2a0
[   47.398915][ T4461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.399016][ T4461] RIP: 0033:0x7fc8ba47b78e
[   47.399034][ T4461] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   47.399052][ T4461] RSP: 002b:00007fc8b8f16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   47.399073][ T4461] RAX: ffffffffffffffda RBX: 00007fc8b8f176c0 RCX: 00007fc8ba47b78e
[   47.399111][ T4461] RDX: 000000000000000f RSI: 00007fc8b8f170a0 RDI: 0000000000000004
[   47.399126][ T4461] RBP: 00007fc8b8f17090 R08: 0000000000000000 R09: 0000000000000000
[   47.399140][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.399154][ T4461] R13: 00007fc8ba736038 R14: 00007fc8ba735fa0 R15: 00007ffc512636d8
[   47.399174][ T4461]  </TASK>
[   47.401840][ T4463] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   47.622962][ T4463] JBD2: no valid journal superblock found
[   47.622972][ T4463] EXT4-fs (loop1): Could not load journal inode
[   47.654389][ T4468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4468 comm=syz.0.344
[   47.673821][ T4468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'.
[   47.688258][   T29] audit: type=1326 audit(1769938292.913:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ba4baeb9 code=0x7ffc0000
[   47.712166][   T29] audit: type=1326 audit(1769938292.913:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ba4baeb9 code=0x7ffc0000
[   47.712541][ T4468] set_capacity_and_notify: 10 callbacks suppressed
[   47.712557][ T4468] loop0: detected capacity change from 0 to 128
[   47.737481][   T29] audit: type=1326 audit(1769938292.913:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8ba4baeb9 code=0x7ffc0000
[   47.748117][ T4470] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   47.749682][   T29] audit: type=1326 audit(1769938292.913:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4469 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fc8ba4baeb9 code=0x7ffc0000
[   47.793465][ T4472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4472 comm=syz.1.346
[   47.863988][ T4470] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   47.908976][ T4479] netlink: 'syz.3.349': attribute type 2 has an invalid length.
[   47.918562][ T4470] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   47.932192][ T4481] loop1: detected capacity change from 0 to 128
[   47.944695][ T4472] syz.1.346: attempt to access beyond end of device
[   47.944695][ T4472] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128
[   47.971884][ T4472] syz.1.346: attempt to access beyond end of device
[   47.971884][ T4472] loop1: rw=2049, sector=146, nr_sectors = 8 limit=128
[   47.993610][ T4472] syz.1.346: attempt to access beyond end of device
[   47.993610][ T4472] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128
[   48.002340][ T4476] batadv_slave_1: entered promiscuous mode
[   48.008763][ T4472] Buffer I/O error on dev loop1, logical block 76, lost async page write
[   48.035821][ T4472] syz.1.346: attempt to access beyond end of device
[   48.035821][ T4472] loop1: rw=8388608, sector=138, nr_sectors = 2 limit=128
[   48.036387][ T4470] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 65535 - 0
[   48.051530][ T4471] syz.1.346: attempt to access beyond end of device
[   48.051530][ T4471] loop1: rw=8388608, sector=138, nr_sectors = 2 limit=128
[   48.077098][ T4471] Buffer I/O error on dev loop1, logical block 69, async page read
[   48.088091][ T4476] batadv_slave_1: left promiscuous mode
[   48.100482][ T4471] syz.1.346: attempt to access beyond end of device
[   48.100482][ T4471] loop1: rw=8388608, sector=140, nr_sectors = 2 limit=128
[   48.114953][ T4471] Buffer I/O error on dev loop1, logical block 70, async page read
[   48.125356][ T4471] syz.1.346: attempt to access beyond end of device
[   48.125356][ T4471] loop1: rw=8388608, sector=142, nr_sectors = 2 limit=128
[   48.140284][ T4471] Buffer I/O error on dev loop1, logical block 71, async page read
[   48.140329][ T4487] loop3: detected capacity change from 0 to 512
[   48.155434][ T4471] syz.1.346: attempt to access beyond end of device
[   48.155434][ T4471] loop1: rw=8388608, sector=144, nr_sectors = 2 limit=128
[   48.170752][ T4471] Buffer I/O error on dev loop1, logical block 72, async page read
[   48.175483][ T4487] EXT4-fs: Ignoring removed bh option
[   48.182761][ T4471] syz.1.346: attempt to access beyond end of device
[   48.182761][ T4471] loop1: rw=8388608, sector=138, nr_sectors = 2 limit=128
[   48.199779][ T4471] Buffer I/O error on dev loop1, logical block 69, async page read
[   48.209725][ T4487] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   48.210482][ T4471] syz.1.346: attempt to access beyond end of device
[   48.210482][ T4471] loop1: rw=8388608, sector=140, nr_sectors = 2 limit=128
[   48.232574][ T4471] Buffer I/O error on dev loop1, logical block 70, async page read
[   48.242345][ T4471] Buffer I/O error on dev loop1, logical block 71, async page read
[   48.243921][ T4487] EXT4-fs (loop3): 1 truncate cleaned up
[   48.251207][ T4471] Buffer I/O error on dev loop1, logical block 72, async page read
[   48.268479][ T4471] Buffer I/O error on dev loop1, logical block 69, async page read
[   48.272989][ T4487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.327517][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.373351][   T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 65535 - 0
[   48.415166][ T4498] loop2: detected capacity change from 0 to 256
[   48.418208][   T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 65535 - 0
[   48.427741][ T4498] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   48.471192][ T4498] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   48.484922][   T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 65535 - 0
[   48.487234][ T4496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.503650][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'.
[   48.515601][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[   48.536394][   T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 65535 - 0
[   48.541031][ T4496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.610241][ T4504] loop4: detected capacity change from 0 to 512
[   48.629949][ T4502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   48.647688][ T4502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   48.661775][ T4504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.780076][ T4509] netlink: 56 bytes leftover after parsing attributes in process `syz.0.360'.
[   48.831982][ T4514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'.
[   48.850070][ T4515] loop0: detected capacity change from 0 to 128
[   48.866843][ T4515] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)!
[   48.878795][ T4515] EXT4-fs (loop0): group descriptors corrupted!
[   48.986476][ T4524] loop0: detected capacity change from 0 to 512
[   48.996180][ T4524] EXT4-fs: Ignoring removed bh option
[   49.008618][ T4524] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   49.023598][ T4524] EXT4-fs (loop0): 1 truncate cleaned up
[   49.030272][ T4524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.062830][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.199295][ T4545] loop0: detected capacity change from 0 to 128
[   49.208545][ T4545] EXT4-fs: Ignoring removed nobh option
[   49.217070][ T4545] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   49.240082][ T4545] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   49.268688][ T4549] loop3: detected capacity change from 0 to 1024
[   49.286238][ T4549] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   49.297674][ T4549] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[   49.311103][ T4545] EXT4-fs (loop0): shut down requested (0)
[   49.317782][ T4553] loop2: detected capacity change from 0 to 256
[   49.317976][ T4549] EXT4-fs (loop3): invalid journal inode
[   49.362445][ T4545] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks
[   49.370090][ T4545] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted
[   49.396635][ T3278]  loop1: p1 p2 p3 p4
[   49.404657][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   49.416702][ T3278] loop1: p3 start 117772289 is beyond EOD, truncated
[   49.423879][ T3278] loop1: p4 size 262144 extends beyond EOD, truncated
[   49.435166][ T4557] EXT4-fs: Ignoring removed bh option
[   49.449610][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.461010][ T4559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.380'.
[   49.470810][ T4557] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   49.482596][ T4551]  loop1: p1 p2 p3 p4
[   49.497599][ T4551] loop1: p3 start 117772289 is beyond EOD, truncated
[   49.505230][ T4551] loop1: p4 size 262144 extends beyond EOD, truncated
[   49.523140][ T4559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4559 comm=syz.0.380
[   49.539598][ T4557] EXT4-fs (loop2): 1 truncate cleaned up
[   49.574135][ T4557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.670850][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.774131][ T4583] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   49.789514][ T4578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   49.799692][ T4583] EXT4-fs (loop4): orphan cleanup on readonly fs
[   49.813978][ T4578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   49.828268][ T4583] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   49.833570][ T4581] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.386: corrupted inode contents
[   49.843679][ T4583] EXT4-fs (loop4): Cannot turn on quotas: error -22
[   49.857139][ T4583] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.387: Freeing blocks not in datazone - block = 0, count = 4096
[   49.857325][ T4583] EXT4-fs (loop4): 1 orphan inode deleted
[   49.857958][ T4583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.902752][ T4581] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.386: mark_inode_dirty error
[   49.916708][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.928399][ T4581] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.386: corrupted inode contents
[   49.942021][ T4581] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.386: mark_inode_dirty error
[   49.954876][ T4581] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.386: Failed to acquire dquot type 0
[   49.986170][ T4581] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.386: corrupted inode contents
[   49.999439][ T4581] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.386: mark_inode_dirty error
[   50.018064][ T4581] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.386: corrupted inode contents
[   50.020221][ T4594] EXT4-fs: Ignoring removed orlov option
[   50.038628][ T4581] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.386: mark_inode_dirty error
[   50.050364][ T4581] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.386: corrupted inode contents
[   50.052898][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.076265][ T4581] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   50.086838][ T4581] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.386: corrupted inode contents
[   50.101724][ T4581] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.386: mark_inode_dirty error
[   50.114960][ T4581] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   50.115436][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.133336][ T4581] EXT4-fs (loop1): 1 truncate cleaned up
[   50.144372][ T4581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   50.176987][ T4581] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.197772][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.391'.
[   50.211002][ T4581] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.386: iget: bad i_size value: 360287970189639690
[   50.211499][ T4602] netlink: 64 bytes leftover after parsing attributes in process `syz.4.392'.
[   50.236289][ T4603] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #12: block 13: comm syz.1.386: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0
[   50.260916][ T4581] syz.1.386 (4581) used greatest stack depth: 9696 bytes left
[   50.283437][ T3302] Alternate GPT is invalid, using primary GPT.
[   50.290388][ T3302]  loop4: p1 p2 p3
[   50.298302][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.316293][ T4607] ªªªªªª: renamed from vlan0 (while UP)
[   50.330477][ T4602] Alternate GPT is invalid, using primary GPT.
[   50.337544][ T4602]  loop4: p1 p2 p3
[   50.394584][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[   50.406711][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   50.423654][ T3278] udevd[3278]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[   50.488431][ T4629] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[   50.498462][ T4629] EXT4-fs (loop3): The Hurd can't support 64-bit file systems
[   50.587573][ T4631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   50.601064][ T4631] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   50.616211][ T4631] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.402: lblock 3 mapped to illegal pblock 3 (length 3)
[   50.631811][ T4631] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   50.646460][ T4631] EXT4-fs (loop2): This should not happen!! Data will be lost
[   50.646460][ T4631] 
[   50.661321][ T4631] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.402: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.711328][ T4634] lo speed is unknown, defaulting to 1000
[   50.717604][ T4634] lo speed is unknown, defaulting to 1000
[   50.724223][ T4634] lo speed is unknown, defaulting to 1000
[   50.730807][ T4634] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   50.738905][ T4634] infiniband syz�: RDMA CMA: cma_listen_on_dev, error -98
[   50.750886][ T4634] lo speed is unknown, defaulting to 1000
[   50.757841][ T4634] lo speed is unknown, defaulting to 1000
[   50.766217][ T4634] lo speed is unknown, defaulting to 1000
[   50.773378][ T4634] lo speed is unknown, defaulting to 1000
[   50.780174][ T4634] lo speed is unknown, defaulting to 1000
[   50.843879][ T4631] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.402: lblock 3 mapped to illegal pblock 3 (length 1)
[   50.870935][ T4639] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   50.921659][ T4639] EXT4-fs error (device loop2) in ext4_setattr:6035: Corrupt filesystem
[   50.948753][ T4631] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.402: bg 0: block 112: padding at end of block bitmap is not set
[   50.986023][ T4642] EXT4-fs: Ignoring removed bh option
[   51.000799][ T4642] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   51.020344][ T4639] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.402: lblock 0 mapped to illegal pblock 0 (length 1)
[   51.036234][ T4642] EXT4-fs (loop0): 1 truncate cleaned up
[   51.043733][ T4642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.057406][ T4639] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   51.071248][ T4639] EXT4-fs (loop2): This should not happen!! Data will be lost
[   51.071248][ T4639] 
[   51.086460][ T4630] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.402: lblock 0 mapped to illegal pblock 0 (length 1)
[   51.110930][ T4630] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.402: lblock 0 mapped to illegal pblock 0 (length 1)
[   51.139187][ T4630] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.402: lblock 0 mapped to illegal pblock 0 (length 1)
[   51.146408][ T4646] syzkaller0: entered promiscuous mode
[   51.155710][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.159839][ T4646] syzkaller0: entered allmulticast mode
[   51.267423][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   51.356989][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.367232][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.420560][ T4662] lo speed is unknown, defaulting to 1000
[   51.462431][ T4676] 9p: Bad value for 'wfdno'
[   51.500678][ T4682] netlink: 256 bytes leftover after parsing attributes in process `syz.4.420'.
[   51.528205][ T4682] EXT4-fs: Ignoring removed bh option
[   51.538249][ T4685] lo speed is unknown, defaulting to 1000
[   51.555101][ T4682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   51.582466][ T4682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.721940][ T4698] EXT4-fs (loop4): orphan cleanup on readonly fs
[   51.729226][ T4698] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.426: ea_inode with extended attributes
[   51.743517][ T4698] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.426: error while reading EA inode 11 err=-117
[   51.757033][ T4698] EXT4-fs (loop4): 1 orphan inode deleted
[   51.760779][ T4701] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.764145][ T4698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   51.778706][ T4701] bond1: (slave dummy0): Enslaving as an active interface with an up link
[   51.802283][ T4701] bond1: entered allmulticast mode
[   51.807950][ T4701] dummy0: entered allmulticast mode
[   51.839222][ T4705] EXT4-fs: Ignoring removed orlov option
[   51.848310][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.860551][ T4705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.889607][   T29] kauditd_printk_skb: 222 callbacks suppressed
[   51.889626][   T29] audit: type=1400 audit(1769938297.113:673): avc:  denied  { kexec_image_load } for  pid=4708 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   51.919437][   T29] audit: type=1400 audit(1769938297.143:674): avc:  denied  { setattr } for  pid=4704 comm="syz.2.427" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.002733][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.013359][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.082173][   T29] audit: type=1400 audit(1769938297.303:675): avc:  denied  { rename } for  pid=4704 comm="syz.2.427" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.106247][   T29] audit: type=1400 audit(1769938297.303:676): avc:  denied  { unlink } for  pid=4704 comm="syz.2.427" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   52.146538][   T29] audit: type=1400 audit(1769938297.373:677): avc:  denied  { block_suspend } for  pid=4716 comm="syz.4.431" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   52.184656][ T4722] syzkaller0: entered promiscuous mode
[   52.190518][ T4722] syzkaller0: entered allmulticast mode
[   52.240313][ T4717] vfat: Unknown parameter ''
[   52.274388][   T29] audit: type=1400 audit(1769938297.503:678): avc:  denied  { connect } for  pid=4723 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   52.353134][   T29] audit: type=1400 audit(1769938297.523:679): avc:  denied  { write } for  pid=4723 comm="syz.3.433" path="socket:[9465]" dev="sockfs" ino=9465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   52.402466][ T4728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.437893][ T4728] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   52.476939][ T4728] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.435: corrupted xattr block 6: invalid header
[   52.526203][ T4728] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop0 ino=12
[   52.544756][ T4734] __nla_validate_parse: 1 callbacks suppressed
[   52.544778][ T4734] netlink: 64 bytes leftover after parsing attributes in process `syz.4.437'.
[   52.568140][ T4728] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.435: corrupted xattr block 6: invalid header
[   52.598156][   T29] audit: type=1400 audit(1769938297.823:680): avc:  denied  { create } for  pid=4733 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   52.637207][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.652199][   T29] audit: type=1400 audit(1769938297.843:681): avc:  denied  { connect } for  pid=4733 comm="syz.4.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   52.675223][   T29] audit: type=1400 audit(1769938297.843:682): avc:  denied  { write } for  pid=4733 comm="syz.4.437" path="socket:[9488]" dev="sockfs" ino=9488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   52.714334][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.769591][ T4744] set_capacity_and_notify: 15 callbacks suppressed
[   52.769610][ T4744] loop4: detected capacity change from 0 to 512
[   52.801828][ T4743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.816844][ T4744] EXT4-fs: Ignoring removed bh option
[   52.829605][ T4743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.851933][ T4744] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   52.868530][ T4744] EXT4-fs (loop4): 1 truncate cleaned up
[   52.877440][ T4744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.902695][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.974590][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   52.994865][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.005041][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.015142][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.025746][ T4761] syzkaller0: entered promiscuous mode
[   53.031745][ T4761] syzkaller0: entered allmulticast mode
[   53.033764][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.048272][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.060750][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.070594][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.085044][ T4751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'.
[   53.200322][ T4770] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   53.231394][ T4777] loop1: detected capacity change from 0 to 512
[   53.242423][ T4777] EXT4-fs: Ignoring removed bh option
[   53.257925][ T4777] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   53.278166][ T4777] EXT4-fs (loop1): 1 truncate cleaned up
[   53.300510][ T4777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.328650][ T4782] loop3: detected capacity change from 0 to 4096
[   53.636314][ T4817] syzkaller0: entered promiscuous mode
[   53.642133][ T4817] syzkaller0: entered allmulticast mode
[   53.724150][ T4838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.743150][ T3324] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   53.756489][ T4838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.778875][ T3324] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   53.788074][ T4849] loop2: detected capacity change from 0 to 512
[   53.812816][ T3324] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   53.817968][ T4849] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   53.831505][ T4849] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[   53.834298][ T3485] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   54.706967][ T4887] loop1: detected capacity change from 0 to 512
[   54.716683][ T4887] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.727399][ T4887] EXT4-fs (loop1): The Hurd can't support 64-bit file systems
[   54.758316][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.798161][ T4895] loop0: detected capacity change from 0 to 512
[   54.810963][ T4895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[   54.820873][ T4895] System zones: 1-12
[   54.828959][ T4895] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.489: invalid indirect mapped block 1819239214 (level 1)
[   54.844837][ T4895] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.489: bg 0: block 361: padding at end of block bitmap is not set
[   54.860783][ T4895] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem
[   54.870804][ T4895] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.489: attempt to clear invalid blocks 33619980 len 1
[   54.887810][ T4895] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.489: invalid indirect mapped block 1819239214 (level 0)
[   54.942557][ T4895] EXT4-fs (loop0): 1 truncate cleaned up
[   55.051305][ T4910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   55.062299][ T4910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.139759][ T4910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   55.151286][ T4910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.205918][ T4910] bridge0: port 3(netdevsim1) entered disabled state
[   55.216417][ T4910] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode
[   55.226286][ T4910] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode
[   55.236411][ T4910] bridge0: port 3(netdevsim1) entered disabled state
[   55.245078][ T4910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   55.256518][ T4910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.298125][ T4910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   55.309341][ T4910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.369630][ T2262] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.379218][ T2262] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.391606][ T2262] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.400590][ T2262] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.413174][ T2262] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.421849][ T2262] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.434383][ T2262] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.443295][ T2262] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.486385][ T4918] loop2: detected capacity change from 0 to 512
[   55.494661][ T4918] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   55.504525][ T4918] EXT4-fs (loop2): The Hurd can't support 64-bit file systems
[   55.567595][ T4924] syzkaller0: entered promiscuous mode
[   55.573569][ T4924] syzkaller0: entered allmulticast mode
[   55.714333][ T4929] FAULT_INJECTION: forcing a failure.
[   55.714333][ T4929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   55.728208][ T4929] CPU: 1 UID: 0 PID: 4929 Comm: syz.4.503 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   55.728242][ T4929] Tainted: [W]=WARN
[   55.728248][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.728300][ T4929] Call Trace:
[   55.728309][ T4929]  <TASK>
[   55.728318][ T4929]  __dump_stack+0x1d/0x30
[   55.728347][ T4929]  dump_stack_lvl+0x95/0xd0
[   55.728369][ T4929]  dump_stack+0x15/0x1b
[   55.728427][ T4929]  should_fail_ex+0x263/0x280
[   55.728461][ T4929]  should_fail+0xb/0x20
[   55.728489][ T4929]  should_fail_usercopy+0x1a/0x20
[   55.728609][ T4929]  _copy_from_user+0x1c/0xb0
[   55.728634][ T4929]  ___sys_recvmsg+0xaa/0x3b0
[   55.728667][ T4929]  do_recvmmsg+0x1ef/0x560
[   55.728696][ T4929]  ? fput+0x8f/0xc0
[   55.728754][ T4929]  __x64_sys_recvmmsg+0xe5/0x170
[   55.728777][ T4929]  x64_sys_call+0x2b75/0x3000
[   55.728842][ T4929]  do_syscall_64+0xc0/0x2a0
[   55.728878][ T4929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.728902][ T4929] RIP: 0033:0x7fc8ba4baeb9
[   55.728919][ T4929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   55.728937][ T4929] RSP: 002b:00007fc8b8f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[   55.728989][ T4929] RAX: ffffffffffffffda RBX: 00007fc8ba735fa0 RCX: 00007fc8ba4baeb9
[   55.729004][ T4929] RDX: 0000000000000001 RSI: 0000200000000740 RDI: 0000000000000003
[   55.729017][ T4929] RBP: 00007fc8b8f17090 R08: 0000000000000000 R09: 0000000000000000
[   55.729090][ T4929] R10: 0000000040002020 R11: 0000000000000246 R12: 0000000000000001
[   55.729128][ T4929] R13: 00007fc8ba736038 R14: 00007fc8ba735fa0 R15: 00007ffc512636d8
[   55.729148][ T4929]  </TASK>
[   55.957461][ T4932] netlink: 'syz.1.504': attribute type 3 has an invalid length.
[   56.002527][ T4938] netlink: 'syz.2.508': attribute type 3 has an invalid length.
[   56.013877][ T4938] netlink: 'syz.2.508': attribute type 4 has an invalid length.
[   56.083854][ T4945] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   56.910450][   T29] kauditd_printk_skb: 161 callbacks suppressed
[   56.910471][   T29] audit: type=1400 audit(1769938558.129:844): avc:  denied  { bpf } for  pid=4991 comm="syz.4.529" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0
[   56.939693][   T29] audit: type=1400 audit(1769938558.129:845): avc:  denied  { mounton } for  pid=4991 comm="syz.4.529" path="/103/file0" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0
[   56.963511][   T29] audit: type=1400 audit(1769938558.129:846): avc:  denied  { map_create } for  pid=4991 comm="syz.4.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   57.025564][   T29] audit: type=1400 audit(1769938558.249:847): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   57.054888][   T29] audit: type=1400 audit(1769938558.279:848): avc:  denied  { read write } for  pid=4995 comm="syz.1.530" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   57.079402][   T29] audit: type=1400 audit(1769938558.279:849): avc:  denied  { remount } for  pid=4995 comm="syz.1.530" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=0
[   57.101143][   T29] audit: type=1400 audit(1769938558.289:850): avc:  denied  { read write } for  pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   57.114760][ T5002] FAULT_INJECTION: forcing a failure.
[   57.114760][ T5002] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   57.128772][   T29] audit: type=1400 audit(1769938558.299:851): avc:  denied  { allowed } for  pid=4997 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[   57.143425][ T5002] CPU: 1 UID: 0 PID: 5002 Comm: syz.1.533 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   57.143464][ T5002] Tainted: [W]=WARN
[   57.143539][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.143552][ T5002] Call Trace:
[   57.143560][ T5002]  <TASK>
[   57.143569][ T5002]  __dump_stack+0x1d/0x30
[   57.143595][ T5002]  dump_stack_lvl+0x95/0xd0
[   57.143619][ T5002]  dump_stack+0x15/0x1b
[   57.143698][ T5002]  should_fail_ex+0x263/0x280
[   57.143745][ T5002]  should_fail+0xb/0x20
[   57.143827][ T5002]  should_fail_usercopy+0x1a/0x20
[   57.143861][ T5002]  strncpy_from_user+0x27/0x250
[   57.143888][ T5002]  getname_flags+0xad/0x3b0
[   57.143976][ T5002]  __x64_sys_execve+0x42/0x70
[   57.144049][ T5002]  x64_sys_call+0x271d/0x3000
[   57.144076][ T5002]  do_syscall_64+0xc0/0x2a0
[   57.144169][ T5002]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.144212][ T5002] RIP: 0033:0x7f50110eaeb9
[   57.144230][ T5002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.144249][ T5002] RSP: 002b:00007f500fb47028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[   57.144298][ T5002] RAX: ffffffffffffffda RBX: 00007f5011365fa0 RCX: 00007f50110eaeb9
[   57.144313][ T5002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[   57.144327][ T5002] RBP: 00007f500fb47090 R08: 0000000000000000 R09: 0000000000000000
[   57.144405][ T5002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.144423][ T5002] R13: 00007f5011366038 R14: 00007f5011365fa0 R15: 00007ffc10573c98
[   57.144443][ T5002]  </TASK>
[   57.338500][   T29] audit: type=1400 audit(1769938558.299:852): avc:  denied  { open } for  pid=4997 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[   57.358844][   T29] audit: type=1400 audit(1769938558.299:853): avc:  denied  { prog_load } for  pid=4997 comm="syz.1.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   57.474947][ T5034] bond1: entered promiscuous mode
[   57.480497][ T5034] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.504843][ T5038] FAULT_INJECTION: forcing a failure.
[   57.504843][ T5038] name failslab, interval 1, probability 0, space 0, times 0
[   57.518833][ T5038] CPU: 1 UID: 0 PID: 5038 Comm: syz.1.547 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   57.518869][ T5038] Tainted: [W]=WARN
[   57.518876][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.518887][ T5038] Call Trace:
[   57.518908][ T5038]  <TASK>
[   57.518956][ T5038]  __dump_stack+0x1d/0x30
[   57.518975][ T5038]  dump_stack_lvl+0x95/0xd0
[   57.519020][ T5038]  dump_stack+0x15/0x1b
[   57.519037][ T5038]  should_fail_ex+0x263/0x280
[   57.519058][ T5038]  should_failslab+0x8c/0xb0
[   57.519074][ T5038]  kmem_cache_alloc_noprof+0x68/0x490
[   57.519091][ T5038]  ? alloc_empty_file+0x76/0x200
[   57.519214][ T5038]  alloc_empty_file+0x76/0x200
[   57.519232][ T5038]  path_openat+0x62/0x23c0
[   57.519253][ T5038]  ? __rcu_read_unlock+0x4e/0x70
[   57.519279][ T5038]  ? terminate_walk+0x1e6/0x210
[   57.519323][ T5038]  ? path_openat+0x1d94/0x23c0
[   57.519345][ T5038]  ? path_openat+0x1e8e/0x23c0
[   57.519454][ T5038]  ? _parse_integer_limit+0x170/0x190
[   57.519474][ T5038]  do_filp_open+0x15d/0x280
[   57.519500][ T5038]  do_open_execat+0xec/0x280
[   57.519598][ T5038]  alloc_bprm+0x25/0x350
[   57.519619][ T5038]  do_execveat_common+0x120/0x740
[   57.519676][ T5038]  __x64_sys_execve+0x5c/0x70
[   57.519698][ T5038]  x64_sys_call+0x271d/0x3000
[   57.519715][ T5038]  do_syscall_64+0xc0/0x2a0
[   57.519745][ T5038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.519790][ T5038] RIP: 0033:0x7f50110eaeb9
[   57.519810][ T5038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.519867][ T5038] RSP: 002b:00007f500fb47028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[   57.519902][ T5038] RAX: ffffffffffffffda RBX: 00007f5011365fa0 RCX: 00007f50110eaeb9
[   57.519918][ T5038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[   57.519944][ T5038] RBP: 00007f500fb47090 R08: 0000000000000000 R09: 0000000000000000
[   57.519998][ T5038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.520013][ T5038] R13: 00007f5011366038 R14: 00007f5011365fa0 R15: 00007ffc10573c98
[   57.520033][ T5038]  </TASK>
[   57.784078][ T5043] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[   57.795579][ T5043] ip6erspan0: entered promiscuous mode
[   57.796672][ T5046] __nla_validate_parse: 36 callbacks suppressed
[   57.796687][ T5046] netlink: 64 bytes leftover after parsing attributes in process `syz.4.551'.
[   57.855535][ T5052] netlink: 'syz.4.553': attribute type 39 has an invalid length.
[   57.864924][ T5052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.553'.
[   57.869537][ T5053] netlink: 36 bytes leftover after parsing attributes in process `syz.4.553'.
[   57.887510][ T5052] geneve2: left promiscuous mode
[   57.965030][ T5073] FAULT_INJECTION: forcing a failure.
[   57.965030][ T5073] name failslab, interval 1, probability 0, space 0, times 0
[   57.977976][ T5073] CPU: 0 UID: 0 PID: 5073 Comm: syz.3.559 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   57.978017][ T5073] Tainted: [W]=WARN
[   57.978026][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   57.978040][ T5073] Call Trace:
[   57.978048][ T5073]  <TASK>
[   57.978059][ T5073]  __dump_stack+0x1d/0x30
[   57.978089][ T5073]  dump_stack_lvl+0x95/0xd0
[   57.978134][ T5073]  dump_stack+0x15/0x1b
[   57.978155][ T5073]  should_fail_ex+0x263/0x280
[   57.978192][ T5073]  should_failslab+0x8c/0xb0
[   57.978218][ T5073]  kmem_cache_alloc_noprof+0x68/0x490
[   57.978246][ T5073]  ? security_file_alloc+0x32/0xf0
[   57.978274][ T5073]  security_file_alloc+0x32/0xf0
[   57.978300][ T5073]  init_file+0x5c/0x1c0
[   57.978333][ T5073]  alloc_empty_file+0x8b/0x200
[   57.978413][ T5073]  path_openat+0x62/0x23c0
[   57.978445][ T5073]  ? __rcu_read_unlock+0x4e/0x70
[   57.978491][ T5073]  ? terminate_walk+0x1e6/0x210
[   57.978520][ T5073]  ? path_openat+0x1d94/0x23c0
[   57.978552][ T5073]  ? path_openat+0x1e8e/0x23c0
[   57.978582][ T5073]  ? _parse_integer_limit+0x170/0x190
[   57.978631][ T5073]  do_filp_open+0x15d/0x280
[   57.978674][ T5073]  do_open_execat+0xec/0x280
[   57.978711][ T5073]  alloc_bprm+0x25/0x350
[   57.978795][ T5073]  do_execveat_common+0x120/0x740
[   57.978822][ T5073]  __x64_sys_execve+0x5c/0x70
[   57.978870][ T5073]  x64_sys_call+0x271d/0x3000
[   57.978909][ T5073]  do_syscall_64+0xc0/0x2a0
[   57.978945][ T5073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.978968][ T5073] RIP: 0033:0x7faf5941aeb9
[   57.978984][ T5073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   57.979026][ T5073] RSP: 002b:00007faf57e77028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[   57.979051][ T5073] RAX: ffffffffffffffda RBX: 00007faf59695fa0 RCX: 00007faf5941aeb9
[   57.979069][ T5073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[   57.979085][ T5073] RBP: 00007faf57e77090 R08: 0000000000000000 R09: 0000000000000000
[   57.979103][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   57.979115][ T5073] R13: 00007faf59696038 R14: 00007faf59695fa0 R15: 00007fff7f906e88
[   57.979171][ T5073]  </TASK>
[   58.294027][ T5085] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[   58.305266][ T5085] ip6erspan0: entered promiscuous mode
[   58.711424][ T5105] netlink: 64 bytes leftover after parsing attributes in process `syz.1.572'.
[   58.775117][ T5115] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[   58.785977][ T5115] ip6erspan0: entered promiscuous mode
[   58.900599][ T5121] FAULT_INJECTION: forcing a failure.
[   58.900599][ T5121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   58.915145][ T5121] CPU: 0 UID: 0 PID: 5121 Comm: syz.3.579 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   58.915171][ T5121] Tainted: [W]=WARN
[   58.915176][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.915184][ T5121] Call Trace:
[   58.915189][ T5121]  <TASK>
[   58.915195][ T5121]  __dump_stack+0x1d/0x30
[   58.915259][ T5121]  dump_stack_lvl+0x95/0xd0
[   58.915274][ T5121]  dump_stack+0x15/0x1b
[   58.915287][ T5121]  should_fail_ex+0x263/0x280
[   58.915311][ T5121]  should_fail+0xb/0x20
[   58.915337][ T5121]  should_fail_usercopy+0x1a/0x20
[   58.915361][ T5121]  _copy_from_user+0x1c/0xb0
[   58.915376][ T5121]  __sys_bpf+0x183/0x7b0
[   58.915408][ T5121]  __x64_sys_bpf+0x41/0x50
[   58.915541][ T5121]  x64_sys_call+0x28e1/0x3000
[   58.915569][ T5121]  do_syscall_64+0xc0/0x2a0
[   58.915590][ T5121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.915605][ T5121] RIP: 0033:0x7faf5941aeb9
[   58.915618][ T5121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.915631][ T5121] RSP: 002b:00007faf57e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   58.915647][ T5121] RAX: ffffffffffffffda RBX: 00007faf59695fa0 RCX: 00007faf5941aeb9
[   58.915690][ T5121] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005
[   58.915700][ T5121] RBP: 00007faf57e77090 R08: 0000000000000000 R09: 0000000000000000
[   58.915709][ T5121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   58.915717][ T5121] R13: 00007faf59696038 R14: 00007faf59695fa0 R15: 00007fff7f906e88
[   58.915730][ T5121]  </TASK>
[   59.115468][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'.
[   59.126287][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'.
[   59.137159][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'.
[   59.148001][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'.
[   59.180764][ T5137] FAULT_INJECTION: forcing a failure.
[   59.180764][ T5137] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.195053][ T5137] CPU: 1 UID: 0 PID: 5137 Comm: syz.2.586 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   59.195133][ T5137] Tainted: [W]=WARN
[   59.195141][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   59.195156][ T5137] Call Trace:
[   59.195164][ T5137]  <TASK>
[   59.195173][ T5137]  __dump_stack+0x1d/0x30
[   59.195198][ T5137]  dump_stack_lvl+0x95/0xd0
[   59.195280][ T5137]  dump_stack+0x15/0x1b
[   59.195304][ T5137]  should_fail_ex+0x263/0x280
[   59.195370][ T5137]  should_fail+0xb/0x20
[   59.195411][ T5137]  should_fail_usercopy+0x1a/0x20
[   59.195482][ T5137]  _copy_from_user+0x1c/0xb0
[   59.195505][ T5137]  ___sys_sendmsg+0xc1/0x1e0
[   59.195535][ T5137]  __x64_sys_sendmsg+0xd4/0x160
[   59.195559][ T5137]  x64_sys_call+0x17ba/0x3000
[   59.195589][ T5137]  do_syscall_64+0xc0/0x2a0
[   59.195700][ T5137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.195725][ T5137] RIP: 0033:0x7f919fc1aeb9
[   59.195744][ T5137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.195796][ T5137] RSP: 002b:00007f919e677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.195817][ T5137] RAX: ffffffffffffffda RBX: 00007f919fe95fa0 RCX: 00007f919fc1aeb9
[   59.195832][ T5137] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   59.195845][ T5137] RBP: 00007f919e677090 R08: 0000000000000000 R09: 0000000000000000
[   59.195858][ T5137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.195874][ T5137] R13: 00007f919fe96038 R14: 00007f919fe95fa0 R15: 00007ffd6de31c88
[   59.195955][ T5137]  </TASK>
[   59.407288][ T5145] netlink: 64 bytes leftover after parsing attributes in process `syz.1.590'.
[   59.408346][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'.
[   59.525278][ T5169] FAULT_INJECTION: forcing a failure.
[   59.525278][ T5169] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   59.525316][ T5169] CPU: 0 UID: 0 PID: 5169 Comm: syz.1.599 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   59.525357][ T5169] Tainted: [W]=WARN
[   59.525364][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   59.525378][ T5169] Call Trace:
[   59.525385][ T5169]  <TASK>
[   59.525393][ T5169]  __dump_stack+0x1d/0x30
[   59.525420][ T5169]  dump_stack_lvl+0x95/0xd0
[   59.525481][ T5169]  dump_stack+0x15/0x1b
[   59.525503][ T5169]  should_fail_ex+0x263/0x280
[   59.525603][ T5169]  should_fail+0xb/0x20
[   59.525631][ T5169]  should_fail_usercopy+0x1a/0x20
[   59.525664][ T5169]  _copy_from_user+0x1c/0xb0
[   59.525769][ T5169]  __copy_msghdr+0x244/0x300
[   59.525790][ T5169]  ___sys_sendmsg+0x10c/0x1e0
[   59.525842][ T5169]  __x64_sys_sendmsg+0xd4/0x160
[   59.525865][ T5169]  x64_sys_call+0x17ba/0x3000
[   59.526042][ T5169]  do_syscall_64+0xc0/0x2a0
[   59.526074][ T5169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.526097][ T5169] RIP: 0033:0x7f50110eaeb9
[   59.526171][ T5169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.526191][ T5169] RSP: 002b:00007f500fb47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.526214][ T5169] RAX: ffffffffffffffda RBX: 00007f5011365fa0 RCX: 00007f50110eaeb9
[   59.526229][ T5169] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   59.526243][ T5169] RBP: 00007f500fb47090 R08: 0000000000000000 R09: 0000000000000000
[   59.526257][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   59.526325][ T5169] R13: 00007f5011366038 R14: 00007f5011365fa0 R15: 00007ffc10573c98
[   59.526345][ T5169]  </TASK>
[   60.107563][ T5194] netlink: 'syz.4.606': attribute type 1 has an invalid length.
[   60.454198][ T5233] netlink: 'syz.0.623': attribute type 9 has an invalid length.
[   60.492695][ T5242] FAULT_INJECTION: forcing a failure.
[   60.492695][ T5242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.507322][ T5242] CPU: 1 UID: 0 PID: 5242 Comm: syz.0.627 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   60.507356][ T5242] Tainted: [W]=WARN
[   60.507439][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.507453][ T5242] Call Trace:
[   60.507460][ T5242]  <TASK>
[   60.507483][ T5242]  __dump_stack+0x1d/0x30
[   60.507509][ T5242]  dump_stack_lvl+0x95/0xd0
[   60.507532][ T5242]  dump_stack+0x15/0x1b
[   60.507558][ T5242]  should_fail_ex+0x263/0x280
[   60.507604][ T5242]  should_fail+0xb/0x20
[   60.507673][ T5242]  should_fail_usercopy+0x1a/0x20
[   60.507771][ T5242]  _copy_from_user+0x1c/0xb0
[   60.507792][ T5242]  kstrtouint_from_user+0x69/0xf0
[   60.507838][ T5242]  proc_fail_nth_write+0x50/0x160
[   60.507870][ T5242]  ? __pfx_proc_fail_nth_write+0x10/0x10
[   60.508036][ T5242]  vfs_write+0x269/0x9f0
[   60.508167][ T5242]  ? __rcu_read_unlock+0x4e/0x70
[   60.508276][ T5242]  ? __fget_files+0x184/0x1c0
[   60.508298][ T5242]  ? mutex_lock+0x57/0x90
[   60.508366][ T5242]  ksys_write+0xdc/0x1a0
[   60.508391][ T5242]  __x64_sys_write+0x40/0x50
[   60.508416][ T5242]  x64_sys_call+0x2847/0x3000
[   60.508442][ T5242]  do_syscall_64+0xc0/0x2a0
[   60.508536][ T5242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.508562][ T5242] RIP: 0033:0x7fd48b57b78e
[   60.508578][ T5242] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   60.508650][ T5242] RSP: 002b:00007fd48a016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   60.508675][ T5242] RAX: ffffffffffffffda RBX: 00007fd48a0176c0 RCX: 00007fd48b57b78e
[   60.508689][ T5242] RDX: 0000000000000001 RSI: 00007fd48a0170a0 RDI: 0000000000000004
[   60.508729][ T5242] RBP: 00007fd48a017090 R08: 0000000000000000 R09: 0000000000000000
[   60.508746][ T5242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.508762][ T5242] R13: 00007fd48b836038 R14: 00007fd48b835fa0 R15: 00007ffffb4d47f8
[   60.508781][ T5242]  </TASK>
[   60.764969][ T5248] FAULT_INJECTION: forcing a failure.
[   60.764969][ T5248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.779373][ T5248] CPU: 0 UID: 0 PID: 5248 Comm: syz.0.629 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   60.779412][ T5248] Tainted: [W]=WARN
[   60.779425][ T5248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.779439][ T5248] Call Trace:
[   60.779447][ T5248]  <TASK>
[   60.779457][ T5248]  __dump_stack+0x1d/0x30
[   60.779487][ T5248]  dump_stack_lvl+0x95/0xd0
[   60.779510][ T5248]  dump_stack+0x15/0x1b
[   60.779530][ T5248]  should_fail_ex+0x263/0x280
[   60.779659][ T5248]  should_fail+0xb/0x20
[   60.779686][ T5248]  should_fail_usercopy+0x1a/0x20
[   60.779734][ T5248]  _copy_from_iter+0xcf/0xea0
[   60.779755][ T5248]  ? __alloc_skb+0x397/0x4b0
[   60.779786][ T5248]  ? __alloc_skb+0x219/0x4b0
[   60.779863][ T5248]  netlink_sendmsg+0x4ae/0x6f0
[   60.779899][ T5248]  ? __pfx_netlink_sendmsg+0x10/0x10
[   60.779977][ T5248]  ____sys_sendmsg+0x5af/0x600
[   60.779998][ T5248]  ___sys_sendmsg+0x195/0x1e0
[   60.780039][ T5248]  __x64_sys_sendmsg+0xd4/0x160
[   60.780065][ T5248]  x64_sys_call+0x17ba/0x3000
[   60.780094][ T5248]  do_syscall_64+0xc0/0x2a0
[   60.780136][ T5248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.780217][ T5248] RIP: 0033:0x7fd48b5baeb9
[   60.780237][ T5248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   60.780258][ T5248] RSP: 002b:00007fd48a017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   60.780351][ T5248] RAX: ffffffffffffffda RBX: 00007fd48b835fa0 RCX: 00007fd48b5baeb9
[   60.780368][ T5248] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   60.780399][ T5248] RBP: 00007fd48a017090 R08: 0000000000000000 R09: 0000000000000000
[   60.780493][ T5248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   60.780508][ T5248] R13: 00007fd48b836038 R14: 00007fd48b835fa0 R15: 00007ffffb4d47f8
[   60.780528][ T5248]  </TASK>
[   61.050174][ T5265] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[   61.063539][ T5265] ip6erspan0: entered promiscuous mode
[   61.106196][ T5272] syzkaller0: entered promiscuous mode
[   61.112313][ T5272] syzkaller0: entered allmulticast mode
[   61.298139][ T5292] FAULT_INJECTION: forcing a failure.
[   61.298139][ T5292] name failslab, interval 1, probability 0, space 0, times 0
[   61.311553][ T5292] CPU: 1 UID: 0 PID: 5292 Comm: syz.2.650 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   61.311592][ T5292] Tainted: [W]=WARN
[   61.311599][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   61.311669][ T5292] Call Trace:
[   61.311678][ T5292]  <TASK>
[   61.311687][ T5292]  __dump_stack+0x1d/0x30
[   61.311717][ T5292]  dump_stack_lvl+0x95/0xd0
[   61.311820][ T5292]  dump_stack+0x15/0x1b
[   61.311840][ T5292]  should_fail_ex+0x263/0x280
[   61.311871][ T5292]  should_failslab+0x8c/0xb0
[   61.311897][ T5292]  kmem_cache_alloc_noprof+0x68/0x490
[   61.311959][ T5292]  ? skb_clone+0x151/0x1f0
[   61.311979][ T5292]  skb_clone+0x151/0x1f0
[   61.312004][ T5292]  netlink_broadcast_filtered+0x561/0xd10
[   61.312042][ T5292]  netlink_sendmsg+0x589/0x6f0
[   61.312141][ T5292]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.312165][ T5292]  ____sys_sendmsg+0x5af/0x600
[   61.312190][ T5292]  ___sys_sendmsg+0x195/0x1e0
[   61.312219][ T5292]  __x64_sys_sendmsg+0xd4/0x160
[   61.312241][ T5292]  x64_sys_call+0x17ba/0x3000
[   61.312445][ T5292]  do_syscall_64+0xc0/0x2a0
[   61.312479][ T5292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.312501][ T5292] RIP: 0033:0x7f919fc1aeb9
[   61.312517][ T5292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.312601][ T5292] RSP: 002b:00007f919e677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.312621][ T5292] RAX: ffffffffffffffda RBX: 00007f919fe95fa0 RCX: 00007f919fc1aeb9
[   61.312635][ T5292] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   61.312648][ T5292] RBP: 00007f919e677090 R08: 0000000000000000 R09: 0000000000000000
[   61.312661][ T5292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.312674][ T5292] R13: 00007f919fe96038 R14: 00007f919fe95fa0 R15: 00007ffd6de31c88
[   61.312696][ T5292]  </TASK>
[   61.524928][ T5300] ip6gre1: entered promiscuous mode
[   61.530434][ T5300] ip6gre1: entered allmulticast mode
[   61.554283][   T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   61.562520][   T31] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   61.582179][ T1034] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   61.612976][ T5313] Cannot find del_set index 0 as target
[   61.766869][ T5342] FAULT_INJECTION: forcing a failure.
[   61.766869][ T5342] name failslab, interval 1, probability 0, space 0, times 0
[   61.769935][ T5338] netlink: 'syz.4.667': attribute type 13 has an invalid length.
[   61.780355][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: syz.2.669 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   61.780480][ T5342] Tainted: [W]=WARN
[   61.780487][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   61.780500][ T5342] Call Trace:
[   61.780508][ T5342]  <TASK>
[   61.780516][ T5342]  __dump_stack+0x1d/0x30
[   61.780544][ T5342]  dump_stack_lvl+0x95/0xd0
[   61.780591][ T5342]  dump_stack+0x15/0x1b
[   61.780651][ T5342]  should_fail_ex+0x263/0x280
[   61.780696][ T5342]  should_failslab+0x8c/0xb0
[   61.780720][ T5342]  kmem_cache_alloc_noprof+0x68/0x490
[   61.780750][ T5342]  ? skb_clone+0x151/0x1f0
[   61.780772][ T5342]  skb_clone+0x151/0x1f0
[   61.780792][ T5342]  __netlink_deliver_tap+0x2c9/0x500
[   61.780864][ T5342]  netlink_unicast+0x66b/0x690
[   61.781055][ T5342]  netlink_sendmsg+0x5c8/0x6f0
[   61.781078][ T5342]  ? __pfx_netlink_sendmsg+0x10/0x10
[   61.781158][ T5342]  ____sys_sendmsg+0x5af/0x600
[   61.781182][ T5342]  ___sys_sendmsg+0x195/0x1e0
[   61.781285][ T5342]  __x64_sys_sendmsg+0xd4/0x160
[   61.781308][ T5342]  x64_sys_call+0x17ba/0x3000
[   61.781334][ T5342]  do_syscall_64+0xc0/0x2a0
[   61.781366][ T5342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.781398][ T5342] RIP: 0033:0x7f919fc1aeb9
[   61.781416][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   61.781435][ T5342] RSP: 002b:00007f919e677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   61.781458][ T5342] RAX: ffffffffffffffda RBX: 00007f919fe95fa0 RCX: 00007f919fc1aeb9
[   61.781474][ T5342] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   61.781542][ T5342] RBP: 00007f919e677090 R08: 0000000000000000 R09: 0000000000000000
[   61.781555][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   61.781567][ T5342] R13: 00007f919fe96038 R14: 00007f919fe95fa0 R15: 00007ffd6de31c88
[   61.781586][ T5342]  </TASK>
[   61.982282][   T29] kauditd_printk_skb: 573 callbacks suppressed
[   61.982299][   T29] audit: type=1400 audit(1769938563.209:1421): avc:  denied  { module_request } for  pid=5344 comm="syz.1.670" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0
[   62.020767][   T29] audit: type=1400 audit(1769938563.209:1422): avc:  denied  { sys_module } for  pid=5344 comm="syz.1.670" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0
[   62.043380][   T29] audit: type=1400 audit(1769938563.249:1423): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   62.070823][   T29] audit: type=1400 audit(1769938563.269:1424): avc:  denied  { create } for  pid=5344 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   62.092410][   T29] audit: type=1400 audit(1769938563.319:1425): avc:  denied  { read write } for  pid=5344 comm="syz.1.670" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   62.130965][   T29] audit: type=1400 audit(1769938563.319:1426): avc:  denied  { execmem } for  pid=5344 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   62.151720][   T29] audit: type=1400 audit(1769938563.349:1427): avc:  denied  { create } for  pid=5351 comm="syz.4.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0
[   62.172594][   T29] audit: type=1400 audit(1769938563.349:1428): avc:  denied  { execmem } for  pid=5344 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0
[   62.173689][ T5349] syzkaller0: entered promiscuous mode
[   62.192959][   T29] audit: type=1400 audit(1769938563.349:1429): avc:  denied  { create } for  pid=5344 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0
[   62.198684][ T5349] syzkaller0: entered allmulticast mode
[   62.219148][   T29] audit: type=1400 audit(1769938563.349:1430): avc:  denied  { create } for  pid=5344 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[   62.225592][ T3386] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   62.340588][ T5369] lo speed is unknown, defaulting to 1000
[   62.382196][ T3386] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   62.445725][ T5385] FAULT_INJECTION: forcing a failure.
[   62.445725][ T5385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.460340][ T5385] CPU: 0 UID: 0 PID: 5385 Comm: syz.0.682 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   62.460381][ T5385] Tainted: [W]=WARN
[   62.460390][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   62.460410][ T5385] Call Trace:
[   62.460417][ T5385]  <TASK>
[   62.460426][ T5385]  __dump_stack+0x1d/0x30
[   62.460518][ T5385]  dump_stack_lvl+0x95/0xd0
[   62.460540][ T5385]  dump_stack+0x15/0x1b
[   62.460561][ T5385]  should_fail_ex+0x263/0x280
[   62.460598][ T5385]  should_fail+0xb/0x20
[   62.460644][ T5385]  should_fail_usercopy+0x1a/0x20
[   62.460677][ T5385]  _copy_to_user+0x20/0xa0
[   62.460747][ T5385]  simple_read_from_buffer+0xb5/0x130
[   62.460782][ T5385]  proc_fail_nth_read+0x10e/0x150
[   62.460861][ T5385]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   62.460961][ T5385]  vfs_read+0x1ab/0x7f0
[   62.460984][ T5385]  ? __rcu_read_unlock+0x4e/0x70
[   62.461019][ T5385]  ? __fget_files+0x184/0x1c0
[   62.461072][ T5385]  ? mutex_lock+0x57/0x90
[   62.461095][ T5385]  ksys_read+0xdc/0x1a0
[   62.461166][ T5385]  __x64_sys_read+0x40/0x50
[   62.461189][ T5385]  x64_sys_call+0x2889/0x3000
[   62.461219][ T5385]  do_syscall_64+0xc0/0x2a0
[   62.461261][ T5385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.461286][ T5385] RIP: 0033:0x7fd48b57b78e
[   62.461305][ T5385] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   62.461323][ T5385] RSP: 002b:00007fd48a016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   62.461390][ T5385] RAX: ffffffffffffffda RBX: 00007fd48a0176c0 RCX: 00007fd48b57b78e
[   62.461408][ T5385] RDX: 000000000000000f RSI: 00007fd48a0170a0 RDI: 0000000000000004
[   62.461424][ T5385] RBP: 00007fd48a017090 R08: 0000000000000000 R09: 0000000000000000
[   62.461438][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   62.461450][ T5385] R13: 00007fd48b836038 R14: 00007fd48b835fa0 R15: 00007ffffb4d47f8
[   62.461518][ T5385]  </TASK>
[   62.782808][ T5400] netlink: 'syz.3.689': attribute type 3 has an invalid length.
[   62.959456][ T5413] __nla_validate_parse: 16 callbacks suppressed
[   62.959474][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'.
[   62.975979][ T5413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.987930][ T5413] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.003317][ T5415] bond1: option min_links: invalid value (18446744073709551601)
[   63.011517][ T5415] bond1: option min_links: allowed values 0 - 2147483647
[   63.020609][ T5415] bond1 (unregistering): Released all slaves
[   63.497359][ T5436] netlink: 64 bytes leftover after parsing attributes in process `syz.1.702'.
[   63.630807][ T5441] netlink: 'syz.3.704': attribute type 4 has an invalid length.
[   63.900402][ T5467] xt_TCPMSS: Only works on TCP SYN packets
[   64.073865][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'.
[   64.083198][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'.
[   64.164429][ T5488] netlink: 64 bytes leftover after parsing attributes in process `syz.4.724'.
[   64.178376][ T5488] netlink: 14334 bytes leftover after parsing attributes in process `syz.4.724'.
[   64.253660][ T5494] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[   64.264672][ T5494] ip6erspan0: entered promiscuous mode
[   64.452211][ T5503] netlink: 'syz.0.730': attribute type 10 has an invalid length.
[   64.477138][ T5503] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.489618][ T5503] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   64.577824][ T5527] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[   64.588744][ T5527] ip6erspan0: entered promiscuous mode
[   64.598693][ T5529] bond0: option all_slaves_active: invalid value (129)
[   64.606158][ T5529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.741'.
[   64.646868][ T5534] FAULT_INJECTION: forcing a failure.
[   64.646868][ T5534] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.660622][ T5534] CPU: 1 UID: 0 PID: 5534 Comm: syz.3.743 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   64.660695][ T5534] Tainted: [W]=WARN
[   64.660700][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   64.660709][ T5534] Call Trace:
[   64.660714][ T5534]  <TASK>
[   64.660719][ T5534]  __dump_stack+0x1d/0x30
[   64.660779][ T5534]  dump_stack_lvl+0x95/0xd0
[   64.660795][ T5534]  dump_stack+0x15/0x1b
[   64.660810][ T5534]  should_fail_ex+0x263/0x280
[   64.660900][ T5534]  should_fail+0xb/0x20
[   64.660918][ T5534]  should_fail_usercopy+0x1a/0x20
[   64.660940][ T5534]  _copy_from_user+0x1c/0xb0
[   64.661060][ T5534]  __sys_connect+0xd0/0x2a0
[   64.661083][ T5534]  __x64_sys_connect+0x3f/0x50
[   64.661102][ T5534]  x64_sys_call+0x2e09/0x3000
[   64.661119][ T5534]  do_syscall_64+0xc0/0x2a0
[   64.661147][ T5534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.661240][ T5534] RIP: 0033:0x7faf5941aeb9
[   64.661252][ T5534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   64.661265][ T5534] RSP: 002b:00007faf57e77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   64.661280][ T5534] RAX: ffffffffffffffda RBX: 00007faf59695fa0 RCX: 00007faf5941aeb9
[   64.661290][ T5534] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003
[   64.661299][ T5534] RBP: 00007faf57e77090 R08: 0000000000000000 R09: 0000000000000000
[   64.661309][ T5534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.661353][ T5534] R13: 00007faf59696038 R14: 00007faf59695fa0 R15: 00007fff7f906e88
[   64.661365][ T5534]  </TASK>
[   64.892722][ T5543] FAULT_INJECTION: forcing a failure.
[   64.892722][ T5543] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   64.906803][ T5543] CPU: 0 UID: 0 PID: 5543 Comm: syz.0.747 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   64.906887][ T5543] Tainted: [W]=WARN
[   64.906893][ T5543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   64.906940][ T5543] Call Trace:
[   64.906946][ T5543]  <TASK>
[   64.906952][ T5543]  __dump_stack+0x1d/0x30
[   64.906971][ T5543]  dump_stack_lvl+0x95/0xd0
[   64.906986][ T5543]  dump_stack+0x15/0x1b
[   64.907028][ T5543]  should_fail_ex+0x263/0x280
[   64.907049][ T5543]  should_fail+0xb/0x20
[   64.907101][ T5543]  should_fail_usercopy+0x1a/0x20
[   64.907152][ T5543]  _copy_to_user+0x20/0xa0
[   64.907232][ T5543]  simple_read_from_buffer+0xb5/0x130
[   64.907257][ T5543]  proc_fail_nth_read+0x10e/0x150
[   64.907276][ T5543]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   64.907372][ T5543]  vfs_read+0x1ab/0x7f0
[   64.907386][ T5543]  ? __rcu_read_unlock+0x4e/0x70
[   64.907422][ T5543]  ? __fget_files+0x184/0x1c0
[   64.907438][ T5543]  ? mutex_lock+0x57/0x90
[   64.907453][ T5543]  ksys_read+0xdc/0x1a0
[   64.907467][ T5543]  __x64_sys_read+0x40/0x50
[   64.907553][ T5543]  x64_sys_call+0x2889/0x3000
[   64.907570][ T5543]  do_syscall_64+0xc0/0x2a0
[   64.907602][ T5543]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.907689][ T5543] RIP: 0033:0x7fd48b57b78e
[   64.907701][ T5543] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   64.907714][ T5543] RSP: 002b:00007fd48a016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   64.907799][ T5543] RAX: ffffffffffffffda RBX: 00007fd48a0176c0 RCX: 00007fd48b57b78e
[   64.907809][ T5543] RDX: 000000000000000f RSI: 00007fd48a0170a0 RDI: 0000000000000004
[   64.907818][ T5543] RBP: 00007fd48a017090 R08: 0000000000000000 R09: 0000000000000000
[   64.907830][ T5543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.907846][ T5543] R13: 00007fd48b836038 R14: 00007fd48b835fa0 R15: 00007ffffb4d47f8
[   64.907924][ T5543]  </TASK>
[   65.192108][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   65.220297][ T5559] FAULT_INJECTION: forcing a failure.
[   65.220297][ T5559] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   65.235218][ T5559] CPU: 1 UID: 0 PID: 5559 Comm: syz.1.754 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   65.235259][ T5559] Tainted: [W]=WARN
[   65.235268][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   65.235286][ T5559] Call Trace:
[   65.235294][ T5559]  <TASK>
[   65.235303][ T5559]  __dump_stack+0x1d/0x30
[   65.235427][ T5559]  dump_stack_lvl+0x95/0xd0
[   65.235526][ T5559]  dump_stack+0x15/0x1b
[   65.235546][ T5559]  should_fail_ex+0x263/0x280
[   65.235614][ T5559]  should_fail+0xb/0x20
[   65.235640][ T5559]  should_fail_usercopy+0x1a/0x20
[   65.235743][ T5559]  _copy_to_user+0x20/0xa0
[   65.235773][ T5559]  simple_read_from_buffer+0xb5/0x130
[   65.235808][ T5559]  proc_fail_nth_read+0x10e/0x150
[   65.235835][ T5559]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   65.235915][ T5559]  vfs_read+0x1ab/0x7f0
[   65.235932][ T5559]  ? inet_dgram_connect+0x125/0x1c0
[   65.236000][ T5559]  ? __rcu_read_unlock+0x4e/0x70
[   65.236031][ T5559]  ? __fget_files+0x184/0x1c0
[   65.236053][ T5559]  ? mutex_lock+0x57/0x90
[   65.236139][ T5559]  ksys_read+0xdc/0x1a0
[   65.236158][ T5559]  __x64_sys_read+0x40/0x50
[   65.236175][ T5559]  x64_sys_call+0x2889/0x3000
[   65.236200][ T5559]  do_syscall_64+0xc0/0x2a0
[   65.236290][ T5559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   65.236372][ T5559] RIP: 0033:0x7f50110ab78e
[   65.236388][ T5559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[   65.236457][ T5559] RSP: 002b:00007f500fb46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   65.236478][ T5559] RAX: ffffffffffffffda RBX: 00007f500fb476c0 RCX: 00007f50110ab78e
[   65.236491][ T5559] RDX: 000000000000000f RSI: 00007f500fb470a0 RDI: 0000000000000004
[   65.236504][ T5559] RBP: 00007f500fb47090 R08: 0000000000000000 R09: 0000000000000000
[   65.236516][ T5559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   65.236582][ T5559] R13: 00007f5011366038 R14: 00007f5011365fa0 R15: 00007ffc10573c98
[   65.236637][ T5559]  </TASK>
[   66.023676][ T5574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'.
[   66.090211][ T5577] lo speed is unknown, defaulting to 1000
[   66.094876][ T5583] IPVS: lblc: FWM 3 0x00000003 - no destination available
[   66.104048][    C0] IPVS: lblc: FWM 3 0x00000003 - no destination available
[   66.917197][ T5630] lo speed is unknown, defaulting to 1000
[   66.995415][   T29] kauditd_printk_skb: 602 callbacks suppressed
[   66.995511][   T29] audit: type=1400 audit(1769938824.219:2033): avc:  denied  { read write } for  pid=5635 comm="syz.4.781" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   67.029770][ T5637] FAULT_INJECTION: forcing a failure.
[   67.029770][ T5637] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   67.034900][   T29] audit: type=1400 audit(1769938824.229:2034): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   67.043815][ T5637] CPU: 1 UID: 0 PID: 5637 Comm: syz.1.779 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   67.043851][ T5637] Tainted: [W]=WARN
[   67.043858][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   67.043872][ T5637] Call Trace:
[   67.043879][ T5637]  <TASK>
[   67.043886][ T5637]  __dump_stack+0x1d/0x30
[   67.043986][ T5637]  dump_stack_lvl+0x95/0xd0
[   67.044009][ T5637]  dump_stack+0x15/0x1b
[   67.044030][ T5637]  should_fail_ex+0x263/0x280
[   67.044062][ T5637]  should_fail+0xb/0x20
[   67.044112][ T5637]  should_fail_usercopy+0x1a/0x20
[   67.044150][ T5637]  _copy_from_user+0x1c/0xb0
[   67.044222][ T5637]  user_termio_to_kernel_termios+0x4e/0x180
[   67.044250][ T5637]  set_termios+0x101/0x4f0
[   67.044309][ T5637]  tty_mode_ioctl+0x37f/0x5b0
[   67.044365][ T5637]  n_tty_ioctl_helper+0x87/0x370
[   67.044390][ T5637]  n_tty_ioctl+0x101/0x230
[   67.044494][ T5637]  ? __pfx_n_tty_ioctl+0x10/0x10
[   67.044600][ T5637]  tty_ioctl+0x83e/0xb80
[   67.044681][ T5637]  ? __pfx_tty_ioctl+0x10/0x10
[   67.044867][ T5637]  __se_sys_ioctl+0xce/0x140
[   67.044905][ T5637]  __x64_sys_ioctl+0x43/0x50
[   67.044937][ T5637]  x64_sys_call+0x14b0/0x3000
[   67.044963][ T5637]  do_syscall_64+0xc0/0x2a0
[   67.045078][ T5637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.045163][ T5637] RIP: 0033:0x7f50110eaeb9
[   67.045181][ T5637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.045201][ T5637] RSP: 002b:00007f500fb26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   67.045224][ T5637] RAX: ffffffffffffffda RBX: 00007f5011366090 RCX: 00007f50110eaeb9
[   67.045284][ T5637] RDX: 0000200000000300 RSI: 0000000000005408 RDI: 0000000000000004
[   67.045299][ T5637] RBP: 00007f500fb26090 R08: 0000000000000000 R09: 0000000000000000
[   67.045312][ T5637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   67.045326][ T5637] R13: 00007f5011366128 R14: 00007f5011366090 R15: 00007ffc10573c98
[   67.045346][ T5637]  </TASK>
[   67.126663][ T5639] FAULT_INJECTION: forcing a failure.
[   67.126663][ T5639] name failslab, interval 1, probability 0, space 0, times 0
[   67.131343][   T29] audit: type=1400 audit(1769938824.249:2035): avc:  denied  { allowed } for  pid=5631 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[   67.131374][   T29] audit: type=1400 audit(1769938824.259:2036): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   67.136273][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.4.782 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   67.136334][ T5639] Tainted: [W]=WARN
[   67.136342][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   67.136359][ T5639] Call Trace:
[   67.136367][ T5639]  <TASK>
[   67.136375][ T5639]  __dump_stack+0x1d/0x30
[   67.136481][ T5639]  dump_stack_lvl+0x95/0xd0
[   67.136504][ T5639]  dump_stack+0x15/0x1b
[   67.136541][ T5639]  should_fail_ex+0x263/0x280
[   67.136573][ T5639]  should_failslab+0x8c/0xb0
[   67.136598][ T5639]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[   67.136651][ T5639]  ? __alloc_skb+0x2f0/0x4b0
[   67.136695][ T5639]  __alloc_skb+0x2f0/0x4b0
[   67.136729][ T5639]  ? __alloc_skb+0x219/0x4b0
[   67.136817][ T5639]  netlink_ack+0xfd/0x500
[   67.136866][ T5639]  ? __rcu_read_unlock+0x4e/0x70
[   67.136898][ T5639]  netlink_rcv_skb+0x192/0x220
[   67.136997][ T5639]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   67.137038][ T5639]  rtnetlink_rcv+0x1c/0x30
[   67.137060][ T5639]  netlink_unicast+0x5c0/0x690
[   67.137093][ T5639]  netlink_sendmsg+0x5c8/0x6f0
[   67.137164][ T5639]  ? __pfx_netlink_sendmsg+0x10/0x10
[   67.137184][ T5639]  ____sys_sendmsg+0x5af/0x600
[   67.137215][ T5639]  ___sys_sendmsg+0x195/0x1e0
[   67.137244][ T5639]  __x64_sys_sendmsg+0xd4/0x160
[   67.137298][ T5639]  x64_sys_call+0x17ba/0x3000
[   67.137385][ T5639]  do_syscall_64+0xc0/0x2a0
[   67.137427][ T5639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.137450][ T5639] RIP: 0033:0x7fc8ba4baeb9
[   67.137524][ T5639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.137544][ T5639] RSP: 002b:00007fc8b8f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   67.137566][ T5639] RAX: ffffffffffffffda RBX: 00007fc8ba735fa0 RCX: 00007fc8ba4baeb9
[   67.137588][ T5639] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   67.137603][ T5639] RBP: 00007fc8b8f17090 R08: 0000000000000000 R09: 0000000000000000
[   67.137617][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   67.137631][ T5639] R13: 00007fc8ba736038 R14: 00007fc8ba735fa0 R15: 00007ffc512636d8
[   67.137650][ T5639]  </TASK>
[   67.220732][ T5647] netlink: 64 bytes leftover after parsing attributes in process `syz.3.784'.
[   67.231171][   T29] audit: type=1400 audit(1769938824.369:2037): avc:  denied  { read write } for  pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   67.621007][   T29] audit: type=1400 audit(1769938824.389:2038): avc:  denied  { read write } for  pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   67.646173][   T29] audit: type=1400 audit(1769938824.399:2039): avc:  denied  { read write } for  pid=5643 comm="syz.0.785" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   67.670690][   T29] audit: type=1400 audit(1769938824.399:2040): avc:  denied  { allowed } for  pid=5643 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[   67.691410][   T29] audit: type=1400 audit(1769938824.419:2041): avc:  denied  { read write } for  pid=3313 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   67.717256][   T29] audit: type=1400 audit(1769938824.429:2042): avc:  denied  { read append } for  pid=5645 comm="syz.2.786" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0
[   67.747054][ T5646] macvlan0: entered promiscuous mode
[   67.753829][ T5646] dummy0: entered promiscuous mode
[   67.759241][ T5646] dummy0: left promiscuous mode
[   67.764998][ T5646] macvlan0: left promiscuous mode
[   67.788913][ T5651] bond1 (unregistering): Released all slaves
[   67.811373][ T5661] lo speed is unknown, defaulting to 1000
[   67.921527][ T5671] lo speed is unknown, defaulting to 1000
[   68.037124][ T5690] lo speed is unknown, defaulting to 1000
[   68.086259][ T5693] lo speed is unknown, defaulting to 1000
[   68.141761][ T5695] FAULT_INJECTION: forcing a failure.
[   68.141761][ T5695] name failslab, interval 1, probability 0, space 0, times 0
[   68.155178][ T5695] CPU: 1 UID: 0 PID: 5695 Comm: syz.2.804 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   68.155236][ T5695] Tainted: [W]=WARN
[   68.155240][ T5695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   68.155249][ T5695] Call Trace:
[   68.155253][ T5695]  <TASK>
[   68.155259][ T5695]  __dump_stack+0x1d/0x30
[   68.155277][ T5695]  dump_stack_lvl+0x95/0xd0
[   68.155292][ T5695]  dump_stack+0x15/0x1b
[   68.155338][ T5695]  should_fail_ex+0x263/0x280
[   68.155359][ T5695]  should_failslab+0x8c/0xb0
[   68.155414][ T5695]  kmem_cache_alloc_noprof+0x68/0x490
[   68.155507][ T5695]  ? skb_clone+0x151/0x1f0
[   68.155551][ T5695]  skb_clone+0x151/0x1f0
[   68.155563][ T5695]  __netlink_deliver_tap+0x2c9/0x500
[   68.155587][ T5695]  ? netlink_attachskb+0x2e2/0x660
[   68.155607][ T5695]  netlink_sendskb+0x126/0x150
[   68.155781][ T5695]  netlink_unicast+0x2a2/0x690
[   68.155801][ T5695]  nlmsg_notify+0x112/0x170
[   68.155888][ T5695]  rtnetlink_send+0x48/0x60
[   68.155979][ T5695]  tca_action_gd+0xc42/0x12d0
[   68.156007][ T5695]  ? __nla_validate_parse+0x1650/0x1cf0
[   68.156091][ T5695]  ? __nla_parse+0x40/0x60
[   68.156104][ T5695]  tc_ctl_action+0x212/0x830
[   68.156120][ T5695]  ? __rcu_read_unlock+0x4e/0x70
[   68.156141][ T5695]  ? __rcu_read_unlock+0x4e/0x70
[   68.156177][ T5695]  ? avc_has_perm_noaudit+0xab/0x130
[   68.156199][ T5695]  ? cred_has_capability+0x224/0x290
[   68.156241][ T5695]  ? selinux_capable+0x31/0x40
[   68.156315][ T5695]  ? security_capable+0x7b/0x90
[   68.156335][ T5695]  ? ns_capable+0x7c/0xb0
[   68.156420][ T5695]  ? __pfx_tc_ctl_action+0x10/0x10
[   68.156495][ T5695]  rtnetlink_rcv_msg+0x6a7/0x720
[   68.156519][ T5695]  netlink_rcv_skb+0x123/0x220
[   68.156619][ T5695]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   68.156638][ T5695]  rtnetlink_rcv+0x1c/0x30
[   68.156652][ T5695]  netlink_unicast+0x5c0/0x690
[   68.156678][ T5695]  netlink_sendmsg+0x5c8/0x6f0
[   68.156701][ T5695]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.156720][ T5695]  ____sys_sendmsg+0x5af/0x600
[   68.156736][ T5695]  ___sys_sendmsg+0x195/0x1e0
[   68.156767][ T5695]  __x64_sys_sendmsg+0xd4/0x160
[   68.156783][ T5695]  x64_sys_call+0x17ba/0x3000
[   68.156850][ T5695]  do_syscall_64+0xc0/0x2a0
[   68.156946][ T5695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.156971][ T5695] RIP: 0033:0x7f919fc1aeb9
[   68.156987][ T5695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.157000][ T5695] RSP: 002b:00007f919e677028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.157029][ T5695] RAX: ffffffffffffffda RBX: 00007f919fe95fa0 RCX: 00007f919fc1aeb9
[   68.157039][ T5695] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   68.157048][ T5695] RBP: 00007f919e677090 R08: 0000000000000000 R09: 0000000000000000
[   68.157057][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   68.157069][ T5695] R13: 00007f919fe96038 R14: 00007f919fe95fa0 R15: 00007ffd6de31c88
[   68.157081][ T5695]  </TASK>
[   68.608759][ T5714] batman_adv: batadv0: Adding interface: ipvlan2
[   68.615495][ T5714] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.642754][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.654043][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.665121][ T5714] batman_adv: batadv0: Interface activated: ipvlan2
[   68.718680][ T5724] bridge0: port 3(ipvlan3) entered blocking state
[   68.725388][ T5724] bridge0: port 3(ipvlan3) entered disabled state
[   68.732846][ T5724] ipvlan3: entered allmulticast mode
[   68.738397][ T5724] bridge0: entered allmulticast mode
[   68.744768][ T5724] ipvlan3: left allmulticast mode
[   68.750314][ T5724] bridge0: left allmulticast mode
[   68.772787][ T5730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.818'.
[   68.815346][ T5739] FAULT_INJECTION: forcing a failure.
[   68.815346][ T5739] name failslab, interval 1, probability 0, space 0, times 0
[   68.828479][ T5739] CPU: 1 UID: 0 PID: 5739 Comm: syz.1.820 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   68.828542][ T5739] Tainted: [W]=WARN
[   68.828549][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   68.828562][ T5739] Call Trace:
[   68.828570][ T5739]  <TASK>
[   68.828577][ T5739]  __dump_stack+0x1d/0x30
[   68.828606][ T5739]  dump_stack_lvl+0x95/0xd0
[   68.828628][ T5739]  dump_stack+0x15/0x1b
[   68.828674][ T5739]  should_fail_ex+0x263/0x280
[   68.828803][ T5739]  should_failslab+0x8c/0xb0
[   68.828832][ T5739]  kmem_cache_alloc_node_noprof+0x6a/0x4a0
[   68.828938][ T5739]  ? __alloc_skb+0x2f0/0x4b0
[   68.828974][ T5739]  __alloc_skb+0x2f0/0x4b0
[   68.829007][ T5739]  ? __alloc_skb+0x219/0x4b0
[   68.829075][ T5739]  netlink_ack+0xfd/0x500
[   68.829113][ T5739]  netlink_rcv_skb+0x192/0x220
[   68.829222][ T5739]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   68.829255][ T5739]  rtnetlink_rcv+0x1c/0x30
[   68.829359][ T5739]  netlink_unicast+0x5c0/0x690
[   68.829445][ T5739]  netlink_sendmsg+0x5c8/0x6f0
[   68.829471][ T5739]  ? __pfx_netlink_sendmsg+0x10/0x10
[   68.829492][ T5739]  ____sys_sendmsg+0x5af/0x600
[   68.829514][ T5739]  ___sys_sendmsg+0x195/0x1e0
[   68.829605][ T5739]  __x64_sys_sendmsg+0xd4/0x160
[   68.829664][ T5739]  x64_sys_call+0x17ba/0x3000
[   68.829689][ T5739]  do_syscall_64+0xc0/0x2a0
[   68.829719][ T5739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.829764][ T5739] RIP: 0033:0x7f50110eaeb9
[   68.829781][ T5739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.829810][ T5739] RSP: 002b:00007f500fb47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   68.829861][ T5739] RAX: ffffffffffffffda RBX: 00007f5011365fa0 RCX: 00007f50110eaeb9
[   68.829879][ T5739] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005
[   68.829894][ T5739] RBP: 00007f500fb47090 R08: 0000000000000000 R09: 0000000000000000
[   68.829984][ T5739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   68.830061][ T5739] R13: 00007f5011366038 R14: 00007f5011365fa0 R15: 00007ffc10573c98
[   68.830134][ T5739]  </TASK>
[   69.116688][ T5749] geneve5: entered promiscuous mode
[   69.138669][  T847] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 45798 - 0
[   69.161961][  T847] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 45798 - 0
[   69.181603][  T847] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 45798 - 0
[   69.190203][  T847] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 45798 - 0
[   69.245289][ T5770] SET target dimension over the limit!
[   69.253336][ T5772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'.
[   69.307582][ T5780] ALSA: seq fatal error: cannot create timer (-19)
[   69.601083][ T5813] ip6gre2: entered allmulticast mode
[   69.844926][ T5837] lo speed is unknown, defaulting to 1000
[   69.926426][ T5845] macsec1: entered promiscuous mode
[   69.931761][ T5845] ip6gretap0: entered promiscuous mode
[   69.938742][ T5845] ip6gretap0: left promiscuous mode
[   70.186151][ T5865] ip6erspan0: entered promiscuous mode
[   70.215398][ T5869] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   70.561846][ T5898] netlink: 64 bytes leftover after parsing attributes in process `syz.3.884'.
[   70.623591][ T5913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=5913 comm=syz.2.890
[   70.674546][ T5919] netlink: 'syz.3.893': attribute type 1 has an invalid length.
[   70.688369][ T5919] bond1: entered promiscuous mode
[   70.693766][ T5919] bond1: entered allmulticast mode
[   70.700098][ T5919] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.746045][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.895'.
[   70.812855][ T5942] netlink: 64 bytes leftover after parsing attributes in process `syz.4.900'.
[   70.848377][ T5944] nr0: tun_chr_ioctl cmd 1074025677
[   70.854138][ T5944] nr0: linktype set to 1
[   70.860695][ T5944] nr0: tun_chr_ioctl cmd 1074025677
[   70.866530][ T5944] nr0: linktype set to 6
[   70.976472][ T5961] ip6erspan0: entered promiscuous mode
[   70.999389][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'.
[   71.199580][ T5987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5987 comm=syz.4.916
[   71.302367][ T6003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6003 comm=syz.1.919
[   71.341601][ T6006] batman_adv: batadv0: Adding interface: ipvlan2
[   71.348260][ T6006] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   71.374347][ T6006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.384999][ T6006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.385016][ T6006] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[   71.425922][ T6013] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check.
[   71.520775][ T2262] Bluetooth: hci0: Frame reassembly failed (-84)
[   72.003368][   T29] kauditd_printk_skb: 1157 callbacks suppressed
[   72.003384][   T29] audit: type=1400 audit(1769938829.229:3200): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   72.024362][ T6075] netlink: 64 bytes leftover after parsing attributes in process `syz.4.953'.
[   72.116025][ T6080] lo speed is unknown, defaulting to 1000
[   72.254760][ T6089] netlink: 'syz.0.959': attribute type 10 has an invalid length.
[   72.335252][   T29] audit: type=1400 audit(1769938829.229:3201): avc:  denied  { allowed } for  pid=6072 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0
[   72.355133][   T29] audit: type=1400 audit(1769938829.229:3202): avc:  denied  { open } for  pid=6072 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[   72.374837][   T29] audit: type=1400 audit(1769938829.229:3203): avc:  denied  { prog_load } for  pid=6072 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[   72.395059][   T29] audit: type=1400 audit(1769938829.239:3204): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   72.420359][   T29] audit: type=1400 audit(1769938829.289:3205): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   72.445808][   T29] audit: type=1400 audit(1769938829.299:3206): avc:  denied  { read write } for  pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[   72.472821][   T29] audit: type=1400 audit(1769938829.309:3207): avc:  denied  { create } for  pid=6079 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0
[   72.492682][   T29] audit: type=1400 audit(1769938829.309:3208): avc:  denied  { create } for  pid=6079 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   72.513596][   T29] audit: type=1400 audit(1769938829.309:3209): avc:  denied  { create } for  pid=6079 comm="syz.4.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[   72.618199][ T6102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.965'.
[   72.782062][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   72.914346][ T6139] netlink: 64 bytes leftover after parsing attributes in process `syz.3.979'.
[   72.960540][ T6144] lo speed is unknown, defaulting to 1000
[   72.972390][ T6148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   73.004792][ T6148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6148 comm=syz.0.983
[   73.013007][ T6149] IPVS: lblc: FWM 3 0x00000003 - no destination available
[   73.025424][    C0] IPVS: lblc: FWM 3 0x00000003 - no destination available
[   73.080849][ T6155] lo speed is unknown, defaulting to 1000
[   73.150043][ T6167] netlink: 64 bytes leftover after parsing attributes in process `syz.3.991'.
[   73.329196][ T6186] lo speed is unknown, defaulting to 1000
[   73.444700][ T6194] lo speed is unknown, defaulting to 1000
[   73.505818][ T6202] lo speed is unknown, defaulting to 1000
[   73.525646][ T6207] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.533986][ T6214] netlink: 'syz.0.1008': attribute type 21 has an invalid length.
[   73.592188][ T3491] Bluetooth: hci0: command 0x1003 tx timeout
[   73.598748][ T3638] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   73.623031][ T6223] bond2: Removing last arp target with arp_interval on
[   73.632487][ T6223] bond2: entered promiscuous mode
[   73.637815][ T6223] bond2: entered allmulticast mode
[   73.643328][ T6223] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.822586][ T6248] bond1: Removing last ns target with arp_interval on
[   73.830196][ T6247] lo speed is unknown, defaulting to 1000
[   73.975932][ T6272] __nla_validate_parse: 2 callbacks suppressed
[   73.975950][ T6272] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1028'.
[   74.100678][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1033'.
[   74.464360][ T6313] sock: sock_timestamping_bind_phc: sock not bind to device
[   74.577217][ T6277] ==================================================================
[   74.585721][ T6277] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read
[   74.594715][ T6277] 
[   74.597044][ T6277] write to 0xffff888104556b28 of 8 bytes by task 6278 on cpu 1:
[   74.604694][ T6277]  shmem_file_splice_read+0x470/0x600
[   74.610368][ T6277]  splice_direct_to_actor+0x26e/0x670
[   74.616286][ T6277]  do_splice_direct+0x119/0x1a0
[   74.621377][ T6277]  do_sendfile+0x382/0x650
[   74.626345][ T6277]  __x64_sys_sendfile64+0x105/0x150
[   74.631740][ T6277]  x64_sys_call+0x2db1/0x3000
[   74.636437][ T6277]  do_syscall_64+0xc0/0x2a0
[   74.641224][ T6277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.647405][ T6277] 
[   74.649836][ T6277] write to 0xffff888104556b28 of 8 bytes by task 6277 on cpu 0:
[   74.657662][ T6277]  shmem_file_splice_read+0x470/0x600
[   74.663618][ T6277]  splice_direct_to_actor+0x26e/0x670
[   74.669183][ T6277]  do_splice_direct+0x119/0x1a0
[   74.674505][ T6277]  do_sendfile+0x382/0x650
[   74.678948][ T6277]  __x64_sys_sendfile64+0x105/0x150
[   74.684177][ T6277]  x64_sys_call+0x2db1/0x3000
[   74.688974][ T6277]  do_syscall_64+0xc0/0x2a0
[   74.693680][ T6277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.699692][ T6277] 
[   74.702031][ T6277] value changed: 0x00000000000057c1 -> 0x00000000000057c2
[   74.709501][ T6277] 
[   74.711925][ T6277] Reported by Kernel Concurrency Sanitizer on:
[   74.718187][ T6277] CPU: 0 UID: 0 PID: 6277 Comm: syz.4.1031 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   74.729865][ T6277] Tainted: [W]=WARN
[   74.734916][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   74.745298][ T6277] ==================================================================