last executing test programs: 2m32.509839583s ago: executing program 32 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m30.107233552s ago: executing program 2 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 2m30.043688846s ago: executing program 2 (id=82): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 2m29.200593694s ago: executing program 2 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) 2m27.075278868s ago: executing program 2 (id=95): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0), 0x3, 0x515, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file7\x00'}) close(r1) socket$inet_udp(0x2, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2300, 0xde) write$P9_RAUTH(r2, &(0x7f00000004c0)={0x14, 0x67, 0x2, {0x1, 0x2, 0x3}}, 0x14) statx(r1, &(0x7f0000000240)='\x00', 0x0, 0x200, &(0x7f0000000280)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 2m26.810293203s ago: executing program 2 (id=101): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x8, &(0x7f0000000180)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m26.34060449s ago: executing program 3 (id=104): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 2m26.239332446s ago: executing program 3 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 2m25.31644362s ago: executing program 3 (id=110): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m25.277530772s ago: executing program 3 (id=111): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0), 0x3, 0x515, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x4}}, './file7\x00'}) close(r1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x5, 0x12e, [0x0, 0x2000000004c0, 0x20000000071c, 0x200000000b00], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x68, 0xa00, 'bond_slave_1\x00', 'macvlan1\x00', 'veth0_to_hsr\x00', 'veth1_to_batadv\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0x0, 0x0, 0xff, 0x0, 0xff, 0x46cf19fbaebf177d], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x4, 0x3}]}, 0x1a6) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2300, 0xde) write$P9_RAUTH(r2, &(0x7f00000004c0)={0x14, 0x67, 0x2, {0x1, 0x2, 0x3}}, 0x14) statx(r1, &(0x7f0000000240)='\x00', 0x0, 0x200, &(0x7f0000000280)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 2m24.820897569s ago: executing program 3 (id=114): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 2m23.132255606s ago: executing program 2 (id=121): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x40810, 0x403}, [@IFLA_CARRIER={0x5, 0x21, 0xca}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) 2m23.131909046s ago: executing program 33 (id=121): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x40810, 0x403}, [@IFLA_CARRIER={0x5, 0x21, 0xca}, @IFLA_TXQLEN={0x8, 0xd, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) 2m22.444310056s ago: executing program 3 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x48}}, 0x0) 2m22.424234197s ago: executing program 34 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x48}}, 0x0) 2m6.502279329s ago: executing program 4 (id=227): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket(0x2, 0x80805, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r4, 0x29, 0x3, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 2m6.428194244s ago: executing program 4 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) 2m6.351510678s ago: executing program 4 (id=232): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 2m5.554764745s ago: executing program 4 (id=241): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0), 0x3, 0x515, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x5, 0x12e, [0x0, 0x2000000004c0, 0x20000000071c, 0x200000000b00], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x68, 0xa00, 'bond_slave_1\x00', 'macvlan1\x00', 'veth0_to_hsr\x00', 'veth1_to_batadv\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0x0, 0x0, 0xff, 0x0, 0xff, 0x46cf19fbaebf177d], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x4, 0x3}]}, 0x1a6) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2300, 0xde) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x67, 0x2, {0x1, 0x2, 0x3}}, 0x14) statx(0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x0, 0x200, &(0x7f0000000280)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 2m5.45958211s ago: executing program 4 (id=243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) 2m5.313914139s ago: executing program 7 (id=244): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b823, 0x7fffe, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x4, 0x401, 0xb, 0x2}, {0x3, 0x0, 0x2000, 0x1000, 0x842, 0x9}, 0xb, 0x8, 0x1a46}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x99300bd66d509cf0}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 2m5.175812987s ago: executing program 7 (id=245): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) exit(0xfe) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48c0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x9d3d, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r1, 0x0, 0x0) 2m4.25644794s ago: executing program 7 (id=252): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) 2m4.213123362s ago: executing program 7 (id=253): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0), 0x3, 0x515, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x5, 0x12e, [0x0, 0x2000000004c0, 0x20000000071c, 0x200000000b00], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x68, 0xa00, 'bond_slave_1\x00', 'macvlan1\x00', 'veth0_to_hsr\x00', 'veth1_to_batadv\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0x0, 0x0, 0xff, 0x0, 0xff, 0x46cf19fbaebf177d], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x4, 0x3}]}, 0x1a6) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2300, 0xde) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x67, 0x2, {0x1, 0x2, 0x3}}, 0x14) statx(0xffffffffffffffff, &(0x7f0000000240)='\x00', 0x0, 0x200, &(0x7f0000000280)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 2m3.705246521s ago: executing program 7 (id=255): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 2m3.352467052s ago: executing program 7 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 2m3.336702643s ago: executing program 35 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) 2m3.20844435s ago: executing program 4 (id=267): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 2m3.158721903s ago: executing program 36 (id=267): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 1m43.406023728s ago: executing program 0 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) 1m43.361279331s ago: executing program 0 (id=406): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.332243442s ago: executing program 0 (id=407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1m43.260505557s ago: executing program 0 (id=409): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0), 0x3, 0x515, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x5, 0x12e, [0x0, 0x2000000004c0, 0x20000000071c, 0x200000000b00], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x68, 0xa00, 'bond_slave_1\x00', 'macvlan1\x00', 'veth0_to_hsr\x00', 'veth1_to_batadv\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, [0x0, 0x0, 0xff, 0x0, 0xff, 0x46cf19fbaebf177d], 0x6e, 0x6e, 0x9e, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x4, 0x3}]}, 0x1a6) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)={0x454a83, 0x120, 0x9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2300, 0xde) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x67, 0x2, {0x1, 0x2, 0x3}}, 0x14) statx(r0, &(0x7f0000000240)='\x00', 0x0, 0x200, &(0x7f0000000280)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) 1m41.531733066s ago: executing program 0 (id=416): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 1m40.880186124s ago: executing program 0 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x240080c0) unshare(0x62040200) 1m40.740226242s ago: executing program 37 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000100)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x240080c0) unshare(0x62040200) 6.270192586s ago: executing program 8 (id=1284): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x2, 0x9c71, 0x4, 0x80e, 0xc99e, 0xffffffffffffffff}) r1 = getpgid(r0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/219, 0x1b, 0xdb, 0x2}, 0x28) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x5}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x7, 0xe, 0x90}) syz_pidfd_open(r1, 0x0) 5.389136457s ago: executing program 8 (id=1296): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffde, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00230002bfa642975528392d57a22061464da800000008104594001c00640017fc02907800000004e00000011200907800000400"], 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) fdatasync(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddrlabel={0x30, 0x48, 0x100, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, r7, 0x80000000}, [@IFAL_ADDRESS={0x14, 0x1, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24040803) connect$phonet_pipe(r5, &(0x7f0000000240)={0x23, 0x1, 0x2, 0x4}, 0x10) 5.269950974s ago: executing program 6 (id=1300): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000104050000000000000000000a000000050001"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000e4425d9ed1581b1fcb21edeedc2ef41675b6f5d432855854b20b227dede67e9c1dd4b2773e0fd058c75ee57b849d36a7f2912f29dba4340ba3bf71c56ac81f7ff9e26ec905aeacfce015", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0xa00, 0x0, 0x10}, 0x1c) r9 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x104, &(0x7f0000000080)=0x6, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x9, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x1}) io_uring_enter(r9, 0x47fa, 0xcfd9, 0x4, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r9, 0x17, &(0x7f0000000000)={0x0}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000140), &(0x7f00000000c0)}, 0x20) 4.568179735s ago: executing program 6 (id=1306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0x5, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xd, &(0x7f0000000100)=0x5, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 4.500554828s ago: executing program 1 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x0, 0x16, 0xa, 0x202, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'hsr0\x00'}, {0x0, 0x1, 'veth1_macvtap\x00'}, {0x0, 0x1, 'sit0\x00'}, {0x0, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_PRIORITY, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 'xfrm0\x00'}, {0x0, 0x1, 'team_slave_0\x00'}, {0x0, 0x1, 'veth0_to_bridge\x00'}, {0x0, 0x1, 'veth1_to_batadv\x00'}, {0x0, 0x1, 'veth0\x00'}, {0x0, 0x1, 'geneve0\x00'}, {0x0, 0x1, 'batadv0\x00'}, {0x0, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM]}, @NFTA_FLOWTABLE_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_PRIORITY, @NFTA_FLOWTABLE_HOOK_NUM]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000140009052dbd7000fddbdf2502202dcb", @ANYRES32=0x0, @ANYBLOB="08000200ac14141a1400060005000000000000000000000008000000468d3fa1ca4f9ac4523a647bdf80a4b30c5f28156a6e5162dd0bd13b04c65e6e33cc7e08f9814bb3e8496683"], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x80d0) r2 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000003000003"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r7, 0x0}]) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) r9 = msgget$private(0x0, 0x306) msgsnd(r9, &(0x7f0000000200)={0x1, "957a35bd677b089bd96565ecdbce5e06b4c6a9d152e89216d4c209795f3872c123dd9c5bdd73e4fe0de6a3efc0e3e485a82fc4afe188ffc1caeb6a80634b51a94988692fc8d221bf6b0af77111ff47638bd698c17d27e39d88e210d71f1a9112fdf8b9a8f01067d82df5522952f3beb9c7b69a59d4c5e231693736cb7a10427030b76b8d0daebf1987830639d6d60fede26c3ae02813521db8c2f71b3468311d32914383c23a754516cbe4858d47669f0dbe65fc37f428df"}, 0xc0, 0x800) msgrcv(r8, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$MSG_INFO(r8, 0xc, &(0x7f0000000000)=""/223) 4.493352489s ago: executing program 6 (id=1308): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x484}, 0x2004008d) r0 = open(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x80242, 0x0) sendfile(r0, r0, 0x0, 0x800000009) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x4, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.632960479s ago: executing program 1 (id=1313): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x220, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2bc, &(0x7f0000000580)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)="d140ca", 0x84, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000040)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r0}, 0x38) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 3.512015896s ago: executing program 1 (id=1316): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000180)=0x3, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'batadv0\x00', &(0x7f00000002c0)=@ethtool_sset_info={0x1f, 0xe701, 0xda}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000b40), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xb, "3550a9b7b14d8d29fa9bec"}, &(0x7f0000000040)=0x13) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x82d}, &(0x7f00000000c0)=0x8) pivot_root(0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x1c0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [0x0, 0x0, 0xff], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x2, 0x9, 0x8001, 'pptp\x00', 'syz0\x00', {0x6f7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000000206030000000000000000000000000705000100070000000900020073797a31000000000c00078008001300000000000500050002000000050004000100000011000300686173683a6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) timer_settime(r4, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)={{0x0}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) removexattr(&(0x7f0000005a40)='./file0\x00', &(0x7f0000005a80)=@known='user.incfs.id\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000003f80)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x7, 0xd, 0x7, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x20, 0x0, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005700)={0xffffffffffffffff, 0xe0, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000005440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000005480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000054c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000005500)=[{}], 0x8, 0x10, &(0x7f0000005540), &(0x7f0000005580), 0x8, 0x17, 0x8, 0x8, &(0x7f00000055c0)}}, 0x10) sendmmsg$inet(r2, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="1d22d5929784fd0157e8eeb9808d784e8e0ff7f7e8a46908d8a4a91c7e0d0ccf7adcab33ad3ef94f317d1610e0d5fdbb156f1f06b836b2d934c69d1d91ab868e528f00d265cc5a34b155e022907e522bb08d475efcc2e5b7fc65b7fd4105e359b34b2536b6b15508f03aa3b8e8a7db7aa859c87eca155fe58b17df8f6e785123ef66642667ff2276051032598d7eea698c819f4b37cd09ed518eae66a0050952cf42e355b7fb266801c2f433f71f4504491d54663cf78b49ca39f26544aa05de9207446901b675a646dc5daca8e319ba4dd090c485a1e8811824a9441986", 0xde}, {&(0x7f0000000340)="a0b591212f088e1f78b2c9ef6aed634c012e459e6f5f3d4a243125f810a0b72f92164c5c708dee1b13172a40945124a39b12562445f75e4b709880ef10e507bd5c49a63c598a5a09f1e75bc7db64c34accabb7194de0dfdf8b0dbbfcc41686899cbe815825b3cc8728ee0819557f13d2a118a273d7fbb35fb61b9313165375185733699b19390cbb71fe4222c8606fdb3e0e437f6d7da58c9113cffb252ef471e8df9d679ea3696212cb0918308a49", 0xba}, {&(0x7f0000000100)="d9feefc5e8678a028122b8", 0xb}, {&(0x7f0000000e00)="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", 0x1000}], 0x4, &(0x7f0000005ac0)=ANY=[@ANYBLOB="6c00000000000000000000000700000094040100014408d910000000004434dfd1ac1414aa000000077f000001000000060a0101020000000d6401010100000005e0000001000000006401010180000000940401008609ffffffff06036c860ee9ee488df0fdf1a62eaabbe90000000030000000000000000000000007000000441cdb53ffffffff000000030a01010200000004640101000000000600000000110000000000000000000000010000000600000000000000110000000000000000000000010000008100000000000000dc000000000000000000000007000000070f46ac141439ac1414aae000000144184da00000008a0000000affffffff00000040000000048911db1ffd59656a7f7cd74eb5f5889bf801441c6680000000000000000000000005000000000000000700000008892341ac1e0001000000000a010102ffffffff0a010101ac1414bb00000000ac1414bb860c000000038306478eb935831779ac1e0101ac1414aaffffffff64010101e000000244246f630000000000000009e0000002000000016401010000008001640101000000000a880a65e0eba44e02c5a500000000000000140000000000000000000000020000000e0000000000000011000000000000000000000001000000800000000000000070000000000000000000000007000000441416030a01010000000fff7f0000010000000107039c94040100820afcf74d534c2159774424ce33ac1414aa00000003ac14143e00000001ac14141a000000037f00000100000800441496a0000000040000000200000001000000060000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="e0000002ac1414bb00000000809d378e819bb3f8c38484ca78745443d02938a75e86ae3f4c57d47d0e38cd517b83abc5b7cecec76418eb902f31a349110f"], 0x270}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000007c0)="5592635ab6e4f02b29401ca9d9551bb86d93b1eb355557b2f6412206b7dfdcd6087af0817c5bf22441c3773e26eb7d42cff5a1e540ea72f4d9a8c61f69fd222e8a5dc4bed5fa7cb8bc5975b5b453edfe17de456b", 0x54}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000000840)="1d3fe742a8f7e246c59457b38941be9c714a4eb0783bf02cc57eb9448f19d66cb3c7b119924fa2e0c26b2f6e83c64a09f7aa667d4ef445117cfaa3846e887f371cdf13396dabcba384c6da2aaf3d67c836c1fa455ddee1fe0ca8a60019baca222bea556b51012acad05bf5d909e04e43c41324111b1982b6ac2c04f607647db997abe177719a70cd6e714cafb9b50732c2ccca276fcf59619fc22ccffa65309cc9afa1c599299d329b2f39efff6335229ce5b0a5f9d7a3e904ac679657b702582e31f6ef86f7e87fa0466dea00cab40024f89600f4172c83546d53d16723528a34d5a1f7d2bc17195b71c75f62884b701eacfa8cbc0cfe670a", 0xf9}, {&(0x7f0000003e00)="5fa99461bbfaaa6cc9653e864e8d6aee51a1bfc52b2972fe0f3f78a2c021b391cf5b459b4a5125869d400529759276084f632fa55e2c5aa73fa0412a011d37abb7f530a533e943b315fcf215fc117d10ad962490d9d6e983fb8aab1758f3ab7f2df050ce4cfd082e44a6daf1e12a2179e047537e93f46c3a1048693bc2c24dd5617ec71c9aa90021b3fa45807a70bab7fa11c0b7c320c69ee93d41cb9edf3271dd4b04e6ee9d64946e8504b9fb89a7fb15af2969d06b6c1289c6fd4b01aaed052903e1d6916e985bdb7b85b5b1f9820594048e", 0xd3}], 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000000000000000007000000070b1c97e092fac163e46b00000000001400000000000000000000000200000004000000000000001400000000000000000000000100000001000100000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="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"], 0xfffffffffffffe7f}}, {{&(0x7f0000000940)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000004300)=[{&(0x7f00000040c0)="a7f131d09cab88bfc600274e16f90bc17b1df5293f7948dc97d65a3449b4e0c591780ae2af45133ba7e8e3c1", 0x2c}, {&(0x7f0000004100)="1061a289c0b6e0d1545325d6be14b391cda6f684f6e57847a5eab57fb3755e3131e1b5ef8a6a12bd2671a6de739267b3236d14c0828324caa35fc4e8d2b3c4b133cf14cc58ac9a22659ebe3ecd52f30120fc1c409c7cc5ac764f647d85058faf3cfdd409b706f8375b4bacac493062fbfeb8485421cb8221aba7fa8721c5eafa919b02", 0x83}, {&(0x7f00000041c0)="7ed89029990eec86ab63d952cfba0a59de29707b95688eb1c4b247d81cdca188ab6ae804815cfae84161cd24a782073c671cbb6b42bf28d2f38191935e4276910687d7123e214ac16f5e4832e7a2bd14c25b1234a0ec4d9fcbdd2a4ade9de8c6cc51bca809b43c4a090e08d2f82ea3c0640922b380", 0x75}, {&(0x7f0000004240)="f5cc39b93df838d2ff136038b01628674d40643a821b6908095e6549bf5fe7067def538ff3cce575ad94e14eead732aebadfaca29c6dea9b2ac980463744c7b1d33252039f869ecd880bb841c3585657b87dadbc7710e107d603f2d00bd1c794503e02cbe9216aa05d9b3ee4e8c059008a44603580da9dbb95bdfcc24da4a22fe55ec30f801671b8ab151b6d0bdef27159f7e38ef849b800126df5095dc263bb0b78452beee94a943348de4806c35455e91520b9386bd280b5c520a4c6bb", 0xbe}], 0x4, &(0x7f0000004340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xd5, 0x0, 0x0, [0xc, 0x882e]}, @rr={0x7, 0x2b, 0x64, [@rand_addr=0x64010102, @private=0x1, @multicast1, @empty, @remote, @loopback, @remote, @local, @rand_addr=0x64010102, @multicast1]}]}}}], 0x78}}, {{&(0x7f00000043c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000005400)=[{&(0x7f0000004400)="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", 0x1000}], 0x1, &(0x7f0000005740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}], 0x38}}], 0x4, 0x4000040) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=ANY=[@ANYRES8=r7, @ANYRESDEC=r2, @ANYBLOB="0100ec5f879e8ec7e7ba01200000"], 0x14}, 0x1, 0x0, 0x0, 0x24004800}, 0x20008040) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r11, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r11, 0x407, 0x7000000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000005880)) 3.402948592s ago: executing program 8 (id=1319): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) mount$9p_unix(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000280), 0x10002, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=unx,\x00']) recvmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/175, 0xaf}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000100)=""/80, 0x50}, {&(0x7f0000001480)=""/222, 0xde}, {&(0x7f0000001580)=""/91, 0x5b}, {&(0x7f0000001600)=""/139, 0x8b}], 0x8, &(0x7f0000001740)=""/233, 0xe9}, 0x20) 3.244441461s ago: executing program 5 (id=1321): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8112, 0x0, 0x5e44, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) setregid(0x0, r1) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x82) fchdir(r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffd3) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x2}, 0x8112, 0x0, 0x5e44, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setgroups(0x0, 0x0) (async) getgroups(0x1, &(0x7f0000000080)=[0xee00]) (async) pipe(&(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) splice(r2, 0x0, r3, 0x0, 0x4ffe6, 0x0) (async) setregid(0x0, r1) (async) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r4, 0x0, 0x82) (async) fchdir(r5) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffd3) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8000) (async) 3.208845064s ago: executing program 8 (id=1323): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r4, 0x3, "0020ef", "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"}}, 0x110) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) pread64(r1, &(0x7f0000000200)=""/43, 0x2b, 0x730) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x14b201) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)=0x8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{}, {0x6}, 0x150, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="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", 0x1b7, 0x0, &(0x7f00000004c0)=ANY=[], 0x84}) 3.10263561s ago: executing program 5 (id=1324): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x484}, 0x2004008d) r0 = open(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x80242, 0x0) sendfile(r0, r0, 0x0, 0x800000009) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x4, 0xf) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x5) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) 2.802393527s ago: executing program 8 (id=1325): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@empty}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.599436267s ago: executing program 6 (id=1336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x0) 1.54002701s ago: executing program 5 (id=1337): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) (fail_nth: 3) 1.425826836s ago: executing program 1 (id=1339): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x2142, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x81, 0xf, 0x0, 0x8}]}) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, 0x0, 0x0, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)="dfedb8", 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.246962997s ago: executing program 9 (id=1343): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x4, 0x0, 0x4, 0x0, 0x7, 0x2b00}, [@RTA_IIF={0x8, 0x3, r4}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0xea5bc50b6199d77e) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14}}, 0x28}}, 0x4004000) 1.234945787s ago: executing program 9 (id=1344): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r1, r6, 0x0) 865.947189ms ago: executing program 8 (id=1345): r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2, 0x1, 0x7f, 0x0, 0x0, 0x100000000, 0x4000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x200, 0x7fff8000, 0x9, 0x2, 0x401, 0x5, 0x2, 0x0, 0xfffffffd, 0x0, 0x8ab}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x5, 0x80, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xd73, 0x3}, 0x0, 0x6, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffefffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="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"], 0x110}}, 0x20040084) 751.764096ms ago: executing program 6 (id=1346): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$eJzs3c9vG1kdAPCv3fxw03SThT0sCNiyLBRU1U7c3Wi1B1guSGi1WqRlTwh1o8SNothxFDulCZFIJW5ckajECf4EDkgckHrizg1uXIoEUoGKqkFCyGjscZo4dhM1cdzGn4808ps3k/l+n6V5L37+8QIYWlciYicixiLi04iYSusz6Rbvt7bkvCePthd2H20vZKLR+PifI+mZ2wvt89supdfMRXyU7I93iVvb3FqZL5dL6+l+oV5ZK9Q2t64vV+aXSkul1WJxbnZu5t0b7xRPra1vVH7z8DvLH3zy+9998cEfd77x4yTnb7UOjSVtO7VA+7Sel9GY3FeXPHMf9CPYAFxI2zM26ER4LtmI+ExEvJmW9+QGlxMA0F+NxlQ0pvbv95Y5xjkAwIsvec0/GZlsPn39PxnZbD7fnMPLvRYT2XK1Vr92q7qxuhjNOazpGM3eWi6XZtK5wukYzST7s83y0/1ix/6NiHg1In4+frG5n1+olhcH9U8PAAy5Sx3j/+Px1vh/DN4hAICXmZEcAIbP4fF/dCB5AABnx+t/ABg++8b/bt/VBQDOoVzHd/8BgPPvyPn/1+MnPzybVACAM+L9fwAYKt/78MNka+ymv3+9eHtzY6V6+/piqbaSr2ws5Beq62v5pWp1qfmbPZWjrleuVtdm346NO4V6qVYv1Da3blaqG6v1m83f9b5Z8sUCABi8V9+4/+dMROy8d7G5RXstBx8IgHPPbQ7D68KgEwAGZmTQCQADYz4eyBxxvOdHhO71/puLJ8gH6L+rn+sx/9/tf4O7e6X/Nc4uRaBPzP/D8DrZ/L/ZA3iZmf+H4dVoZKznDwBD5hiv4H1EEM65537/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYZHPLZPPpWuCTkc3m8xGXI2I6RjO3lsulmYh4JSL+ND46nuzPDjppAOCEsn/PpOt/XZ16a7Lz6FjmP+PNx4j40S8//sWd+Xp9fTap/9deff1eWl/sGmC8/20AAPYZ6axoj9Ptcby9vu+TR9sL7e0sE3z47dbioknc3XRrp95KPhejETHx78yBxmROaWHinbsR8Xpn+7N7x6fTlU874yexL/ctfjRbOHkgfvZA/GzzWOsxeS4+ewq5wLC5n/Q/73e7/7JxpfmY3n+Zg51pLn52uHN9Du3+b7fR2f+17vePLueafU23/u/KcWO8/Yfv9jx290Lj8yMRu4f63/aK0LlmqVv8t7pd8KfffLzRUfWXL3zpzV7xG7+KuBrPit8qFeqVtUJtc+v6cmV+qbRUWi0W52bnZt698U6x0JyjLrRnqg/7x3vXXund/oiJHvFzR7T/q70u2uHX//30B19+Rvyvf6Vb/Gy89oz4yZj4tWPGn5/4bc/lu5P4iz3aP3Ig/tiBv0vqrh0z/oO/bi0e81QA4AzUNrdW5svl0rrCSQu5fl350gvSQIUehb99cuCeGng+p1IYWJcEnJGnN/2gMwEAAAAAAAAAAAAAAHqpfT/9yb8+fhlu0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA///RQMtW") (async, rerun: 64) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r1, 0x103, 0x1) getdents(r1, 0x0, 0x58) 556.059237ms ago: executing program 5 (id=1347): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r1, 0x26, 0x0, @val=@netkit}, 0x1c) close(r1) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)="d140ca", 0x84, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={&(0x7f0000000980), &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r3}, 0x38) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x150) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) getpid() syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x88fb, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffec0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x100000000000028e, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000d44000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1000000000000c, 0x2) 513.213479ms ago: executing program 9 (id=1348): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/202) (async) ioctl$KDSKBLED(r0, 0x4b65, 0x2) 496.59554ms ago: executing program 1 (id=1349): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa220000000000007020000f8ffffffb703000008000000b70400000000000085f3961635ed330c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc0, 0xccee9c1c9e8aeada) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) flistxattr(r6, &(0x7f0000000280)=""/238, 0xee) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f00000001c0)=0xf, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="176c000076000d0b20000000ffdbdf25030000000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') fchdir(r10) 327.26371ms ago: executing program 9 (id=1350): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3, 0x20}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x412002, 0x0) rmdir(&(0x7f00000002c0)='./control\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0xe, 0x1, 0x1d5, &(0x7f0000000300)}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0x8]}, &(0x7f0000000000), 0x8) 326.93242ms ago: executing program 6 (id=1351): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd6d, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b00a0000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x3f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 229.986666ms ago: executing program 9 (id=1352): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x210000, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) chroot(&(0x7f0000000100)='./file0\x00') (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffff030000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) (async, rerun: 32) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0) (async, rerun: 32) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') 210.887797ms ago: executing program 9 (id=1353): r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000001000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x4000) 191.654338ms ago: executing program 5 (id=1354): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280)="d140ca", 0x84, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={0x0, &(0x7f0000000a00)=""/89, &(0x7f0000000a80), &(0x7f0000000b40), 0x3, r0, 0x0, 0x10000000}, 0x38) 60.427226ms ago: executing program 5 (id=1355): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r4, 0x3, "0020ef", "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"}}, 0x110) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) pread64(r1, &(0x7f0000000200)=""/43, 0x2b, 0x730) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffe, 0x14b201) futex(&(0x7f0000000000)=0x1, 0x6, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)=0x8) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000400)={{}, {0x6}, 0x150, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)="ce9c54a2f2ba15acdae14a389648fbaac5853ad62f37c8a3043677c7074790b5d25dc2399c077cb6d7e2b0f25278048c4ebb85107a9baee2a4f585f138b3eca9f143d5d3e72aed8717e82b3a9c3bd06b5e2b2a182a59af7fe100e40f626bc23e5ffc8e0bc3fb89da5a5465197c95d579ecbeea135d94dc409f87e8bb804f2861236abf6969cf9402c3bb5593495e2a2901fe359259020dc2aa42b1fc26e325f48da8531397915fb86565b212ec39005922d99101bb0cbae809d6f241ce425b20dd2399f884d1423c8f42e88a769779d168d77bceaaa3f14ddafa739520694ebc8f324ce90adfea8c807b3ecbb14d627febd470202570e7e489e7b95b058761b24b895fda243e6cf55853abec5269b08df99694014d9639d54996495e9f31ec343d0c6ecbb030ed79fe406eb53082d4d23ed379bed093801a01ace8addd4d39a5aad0e38031719cdd0fc90fd9d9d5f05fe77a5d1fae83de4c298d67df11dda37826d6de57af678b9b77f0b83c32bacef94f3a69f633f10a882f8ce4fb3a0480bbac76ab4497e95606ca7d856e93598f223164dd6a181bace6673ddabaf0b82611814e0d32f5c3431a2b3c3d47f6c6f646422dde87f45551", 0x1b7, 0x0, &(0x7f00000004c0)=ANY=[], 0x84}) 0s ago: executing program 1 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 52.811037][ T4246] bond1: option mode: unable to set because the bond device has slaves [ 52.839748][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.164'. [ 52.869038][ T29] audit: type=1400 audit(1770308833.616:263): avc: denied { create } for pid=4245 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.892716][ T4246] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 53.282123][ T4270] hub 9-0:1.0: USB hub found [ 53.287537][ T4270] hub 9-0:1.0: 8 ports detected [ 54.151786][ T4278] hub 9-0:1.0: USB hub found [ 54.160381][ T4278] hub 9-0:1.0: 8 ports detected [ 54.453627][ T4284] loop0: detected capacity change from 0 to 128 [ 54.508865][ T4284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 54.593086][ T4295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.174'. [ 54.602712][ T4295] netlink: 16 bytes leftover after parsing attributes in process `syz.5.174'. [ 54.612055][ T4295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.174'. [ 54.821005][ T4295] netlink: 36 bytes leftover after parsing attributes in process `syz.5.174'. [ 55.111683][ T4307] hub 9-0:1.0: USB hub found [ 55.116793][ T4307] hub 9-0:1.0: 8 ports detected [ 55.747812][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.179'. [ 56.462566][ T4347] hub 9-0:1.0: USB hub found [ 56.467526][ T4347] hub 9-0:1.0: 8 ports detected [ 57.143020][ T3425] IPVS: starting estimator thread 0... [ 57.159021][ T4357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.498523][ T29] audit: type=1400 audit(1770308837.996:264): avc: denied { write } for pid=4350 comm="syz.0.187" name="file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.521445][ T29] audit: type=1400 audit(1770308837.996:265): avc: denied { open } for pid=4350 comm="syz.0.187" path="/43/file0" dev="tmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.540384][ T4363] IPVS: using max 2352 ests per chain, 117600 per kthread [ 57.544365][ T29] audit: type=1400 audit(1770308837.996:266): avc: denied { ioctl } for pid=4350 comm="syz.0.187" path="/43/file0" dev="tmpfs" ino=247 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 57.584312][ T4357] bond_slave_0: entered promiscuous mode [ 57.590044][ T4357] bond_slave_1: entered promiscuous mode [ 57.600163][ T4357] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.609990][ T4357] bond1: (slave macvlan2): making interface the new active one [ 57.619945][ T4357] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 57.695277][ T4357] syz.7.188 (4357) used greatest stack depth: 10008 bytes left [ 58.023167][ T4399] hub 9-0:1.0: USB hub found [ 58.027891][ T4399] hub 9-0:1.0: 8 ports detected [ 59.293003][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 60.241300][ T4468] netlink: 36 bytes leftover after parsing attributes in process `syz.6.213'. [ 60.251182][ T4468] netlink: 16 bytes leftover after parsing attributes in process `syz.6.213'. [ 60.260163][ T4468] netlink: 36 bytes leftover after parsing attributes in process `syz.6.213'. [ 60.274545][ T4468] netlink: 36 bytes leftover after parsing attributes in process `syz.6.213'. [ 60.279416][ T4466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.592644][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.218'. [ 61.083603][ T9] IPVS: starting estimator thread 0... [ 61.180426][ T4491] IPVS: using max 1872 ests per chain, 93600 per kthread [ 61.595825][ T4504] bond1: option mode: unable to set because the bond device has slaves [ 61.667562][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.229'. [ 62.527775][ T4545] loop4: detected capacity change from 0 to 512 [ 62.538340][ T4545] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.241: invalid block [ 62.551543][ T4545] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.241: invalid indirect mapped block 4294967295 (level 1) [ 62.565930][ T4545] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.241: invalid indirect mapped block 4294967295 (level 1) [ 62.582065][ T4545] EXT4-fs (loop4): 2 truncates cleaned up [ 62.588298][ T4545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.774149][ T29] audit: type=1400 audit(1770308843.536:267): avc: denied { ioctl } for pid=4551 comm="syz.7.244" path="socket:[9492]" dev="sockfs" ino=9492 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.774297][ T4552] syzkaller0: entered promiscuous mode [ 62.806242][ T4552] syzkaller0: entered allmulticast mode [ 62.827281][ T29] audit: type=1400 audit(1770308843.586:268): avc: denied { write } for pid=4551 comm="syz.7.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.964868][ T3374] IPVS: starting estimator thread 0... [ 63.070377][ T4557] IPVS: using max 2448 ests per chain, 122400 per kthread [ 63.911374][ T4590] loop7: detected capacity change from 0 to 512 [ 63.952892][ T4590] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.253: invalid indirect mapped block 4294967295 (level 1) [ 64.072589][ T4590] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.253: invalid indirect mapped block 4294967295 (level 1) [ 64.148767][ T4590] EXT4-fs (loop7): 2 truncates cleaned up [ 64.185153][ T4590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.537339][ T4613] syzkaller0: entered promiscuous mode [ 64.543186][ T4613] syzkaller0: entered allmulticast mode [ 64.663884][ T3980] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.696969][ T52] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.745603][ T4637] loop6: detected capacity change from 0 to 128 [ 64.783483][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.262'. [ 64.807912][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.830661][ T52] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.953786][ T52] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.460783][ T4670] hub 9-0:1.0: USB hub found [ 65.465566][ T4670] hub 9-0:1.0: 8 ports detected [ 65.919567][ T52] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.053090][ T4645] chnl_net:caif_netlink_parms(): no params data found [ 66.181479][ T52] bridge_slave_1: left allmulticast mode [ 66.187310][ T52] bridge_slave_1: left promiscuous mode [ 66.193463][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.498055][ T52] bridge_slave_0: left allmulticast mode [ 66.503775][ T52] bridge_slave_0: left promiscuous mode [ 66.509617][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.535727][ T52] bond_slave_0: left promiscuous mode [ 66.541728][ T52] bond_slave_1: left promiscuous mode [ 66.822958][ T52] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 66.835221][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.845835][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.856042][ T52] bond0 (unregistering): Released all slaves [ 66.864806][ T52] bond1 (unregistering): Released all slaves [ 67.361241][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.368449][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.377418][ T4645] bridge_slave_0: entered allmulticast mode [ 67.385052][ T4645] bridge_slave_0: entered promiscuous mode [ 67.442237][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.449567][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.474491][ T4744] loop6: detected capacity change from 0 to 256 [ 67.502586][ T4645] bridge_slave_1: entered allmulticast mode [ 67.532653][ T4744] FAT-fs (loop6): codepage cp775 not found [ 67.550399][ T4645] bridge_slave_1: entered promiscuous mode [ 67.904028][ T52] hsr_slave_0: left promiscuous mode [ 67.919282][ T52] hsr_slave_1: left promiscuous mode [ 67.927076][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.934513][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.943105][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.950699][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.001737][ T52] veth1_macvtap: left promiscuous mode [ 68.023541][ T52] veth0_macvtap: left promiscuous mode [ 68.060889][ T52] veth1_vlan: left promiscuous mode [ 68.087071][ T52] veth0_vlan: left promiscuous mode [ 68.592681][ T52] team0 (unregistering): Port device team_slave_1 removed [ 68.602634][ T52] team0 (unregistering): Port device team_slave_0 removed [ 68.686600][ T4762] hub 9-0:1.0: USB hub found [ 68.691568][ T4762] hub 9-0:1.0: 8 ports detected [ 69.104925][ T4662] chnl_net:caif_netlink_parms(): no params data found [ 69.115960][ T4645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.209239][ T4783] hub 9-0:1.0: USB hub found [ 69.220282][ T4783] hub 9-0:1.0: 8 ports detected [ 69.766614][ T4645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.235973][ T4645] team0: Port device team_slave_0 added [ 70.355227][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.363129][ T4662] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.444075][ T4807] loop6: detected capacity change from 0 to 512 [ 70.510943][ T4662] bridge_slave_0: entered allmulticast mode [ 71.333492][ T4662] bridge_slave_0: entered promiscuous mode [ 71.342715][ T4807] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.299: invalid indirect mapped block 4294967295 (level 1) [ 71.381464][ T4662] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.388880][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.417436][ T4807] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.299: invalid indirect mapped block 4294967295 (level 1) [ 71.453436][ T4662] bridge_slave_1: entered allmulticast mode [ 71.480466][ T4807] EXT4-fs (loop6): 2 truncates cleaned up [ 71.487002][ T4662] bridge_slave_1: entered promiscuous mode [ 71.513239][ T4807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.528256][ T4645] team0: Port device team_slave_1 added [ 71.537660][ T52] IPVS: stop unused estimator thread 0... [ 71.601778][ T4807] EXT4-fs error (device loop6): empty_inline_dir:1770: inode #12: block 7: comm syz.6.299: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 71.624799][ T29] audit: type=1400 audit(1770308852.366:269): avc: denied { ioctl } for pid=4806 comm="syz.6.299" path=2F66696C65302F233137202864656C6574656429 dev="loop6" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.665947][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.673096][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.699503][ T4645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.702807][ T4807] EXT4-fs warning (device loop6): empty_inline_dir:1777: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 71.726122][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.733519][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.760164][ T4645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.782025][ T4662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.803523][ T3955] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.811561][ T4645] hsr_slave_0: entered promiscuous mode [ 71.819171][ T4645] hsr_slave_1: entered promiscuous mode [ 71.825563][ T4645] debugfs: 'hsr0' already exists in 'hsr' [ 71.831558][ T4645] Cannot create hsr debugfs directory [ 71.858041][ T4662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.879586][ T4662] team0: Port device team_slave_0 added [ 71.887312][ T4662] team0: Port device team_slave_1 added [ 71.904874][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.912429][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.939595][ T4662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.967197][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.974437][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.000765][ T4662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.081260][ T4839] loop5: detected capacity change from 0 to 128 [ 72.125540][ T4843] hub 9-0:1.0: USB hub found [ 72.130677][ T4843] hub 9-0:1.0: 8 ports detected [ 72.188094][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.307'. [ 72.212552][ T4662] hsr_slave_0: entered promiscuous mode [ 72.219243][ T4662] hsr_slave_1: entered promiscuous mode [ 72.246292][ T4662] debugfs: 'hsr0' already exists in 'hsr' [ 72.252101][ T4662] Cannot create hsr debugfs directory [ 72.417663][ T4645] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 72.443900][ T4645] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 72.494851][ T4645] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 72.509236][ T4645] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 72.548201][ T4662] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 72.756277][ T4662] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 73.162007][ T4662] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 73.179647][ T4662] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 73.268561][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.339379][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.676627][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.683850][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.720912][ T1882] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.728085][ T1882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.804346][ T4645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.815214][ T4645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.837305][ T4662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.915909][ T4662] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.953098][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.960578][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.983445][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.990809][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.041339][ T4662] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.051811][ T4662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.107500][ T4645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.229932][ T4662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.370275][ T29] audit: type=1400 audit(1770308855.106:270): avc: denied { create } for pid=4951 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.390730][ T29] audit: type=1400 audit(1770308855.116:271): avc: denied { write } for pid=4951 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.414111][ T4953] hub 9-0:1.0: USB hub found [ 74.419025][ T4953] hub 9-0:1.0: 8 ports detected [ 74.493948][ T4952] infiniband syz0: set down [ 74.498893][ T4952] infiniband syz0: added bond0 [ 74.612821][ T4662] veth0_vlan: entered promiscuous mode [ 74.624539][ T4662] veth1_vlan: entered promiscuous mode [ 74.638114][ T4952] RDS/IB: syz0: added [ 74.651531][ T4952] smc: adding ib device syz0 with port count 1 [ 74.662116][ T4952] smc: ib device syz0 port 1 has no pnetid [ 74.697771][ T4662] veth0_macvtap: entered promiscuous mode [ 74.727551][ T4662] veth1_macvtap: entered promiscuous mode [ 74.758297][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.780042][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.796464][ T4645] veth0_vlan: entered promiscuous mode [ 74.818326][ T1882] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.832881][ T4645] veth1_vlan: entered promiscuous mode [ 74.843511][ T1882] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.884660][ T4645] veth0_macvtap: entered promiscuous mode [ 74.902090][ T1882] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.913539][ T4645] veth1_macvtap: entered promiscuous mode [ 74.922050][ T1882] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.955411][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.980107][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.992814][ T1882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.038939][ T1926] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.102271][ T4973] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.109659][ T4973] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.232222][ T4973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.288073][ T4973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.326831][ T1926] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.357143][ T1926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.505162][ T1926] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.576570][ T1926] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.586077][ T1926] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.597889][ T1926] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.627516][ T4999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.324'. [ 75.636972][ T4999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.324'. [ 75.645916][ T4999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.324'. [ 75.880976][ T4999] netlink: 36 bytes leftover after parsing attributes in process `syz.5.324'. [ 76.237704][ T29] audit: type=1400 audit(1770308856.766:272): avc: denied { lock } for pid=5003 comm="syz.8.326" path="socket:[11919]" dev="sockfs" ino=11919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.522363][ T5013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.713019][ T5023] loop8: detected capacity change from 0 to 128 [ 76.739803][ T5023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.332'. [ 76.952072][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.959936][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.124143][ T5028] hub 9-0:1.0: USB hub found [ 77.178086][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.211726][ T5025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.258773][ T5028] hub 9-0:1.0: 8 ports detected [ 77.344783][ T52] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.385895][ T52] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.437286][ T52] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.480681][ T52] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.619295][ T5043] syzkaller0: entered promiscuous mode [ 77.625283][ T5043] syzkaller0: entered allmulticast mode [ 77.661937][ T5044] netlink: 36 bytes leftover after parsing attributes in process `syz.8.335'. [ 77.670953][ T5044] netlink: 16 bytes leftover after parsing attributes in process `syz.8.335'. [ 77.679905][ T5044] netlink: 36 bytes leftover after parsing attributes in process `syz.8.335'. [ 77.690864][ T5044] netlink: 36 bytes leftover after parsing attributes in process `syz.8.335'. [ 78.365426][ T5056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.389350][ T5056] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 78.400540][ T5056] bond2: (slave macvlan3): making interface the new active one [ 78.410025][ T5056] bond2: (slave macvlan3): Enslaving as an active interface with an up link [ 78.521544][ T5063] hub 9-0:1.0: USB hub found [ 78.526590][ T5063] hub 9-0:1.0: 8 ports detected [ 78.934033][ T5074] loop5: detected capacity change from 0 to 128 [ 78.953182][ T5074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'. [ 79.035709][ T5078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.763399][ T5122] bond2: option mode: unable to set because the bond device has slaves [ 80.881778][ T5122] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 80.931364][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.9.367'. [ 81.177302][ T5145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.204934][ T5145] bond_slave_0: entered promiscuous mode [ 81.210742][ T5145] bond_slave_1: entered promiscuous mode [ 81.217061][ T5145] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.227914][ T5145] bond1: (slave macvlan2): making interface the new active one [ 81.239334][ T5145] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 81.253200][ T5152] netlink: 36 bytes leftover after parsing attributes in process `syz.8.372'. [ 81.262284][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.8.372'. [ 81.271292][ T5152] netlink: 36 bytes leftover after parsing attributes in process `syz.8.372'. [ 81.282347][ T5152] netlink: 36 bytes leftover after parsing attributes in process `syz.8.372'. [ 82.026870][ T29] audit: type=1400 audit(1770308862.766:273): avc: denied { create } for pid=5166 comm="syz.8.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.453766][ T5182] syzkaller0: entered promiscuous mode [ 82.459325][ T5182] syzkaller0: entered allmulticast mode [ 82.670921][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.678688][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.704658][ T5187] bond_slave_0: left promiscuous mode [ 82.710238][ T5187] bond_slave_1: left promiscuous mode [ 82.794878][ T5193] __nla_validate_parse: 1 callbacks suppressed [ 82.794896][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.5.390'. [ 83.020982][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.061691][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.201720][ T52] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.284028][ T52] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.327791][ T52] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.342361][ T52] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.423796][ T5198] loop9: detected capacity change from 0 to 128 [ 83.478931][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.9.393'. [ 83.961598][ T5212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.399'. [ 84.115947][ T5222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.197359][ T5227] hub 9-0:1.0: USB hub found [ 84.202538][ T5227] hub 9-0:1.0: 8 ports detected [ 84.327495][ T5222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.355586][ T5222] bond1: (slave macvlan2): making interface the new active one [ 84.364176][ T52] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:680f:41ff:fea5:cdd5 error=-28 [ 84.399996][ T5222] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 84.831341][ T5250] loop0: detected capacity change from 0 to 512 [ 85.099970][ T5250] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.409: invalid indirect mapped block 4294967295 (level 1) [ 85.195332][ T5250] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.409: invalid indirect mapped block 4294967295 (level 1) [ 85.334453][ T5250] EXT4-fs (loop0): 2 truncates cleaned up [ 85.462682][ T5250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.643820][ T5285] loop6: detected capacity change from 0 to 128 [ 86.739011][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.417'. [ 86.989907][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.419'. [ 86.999000][ T5304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.419'. [ 87.007957][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.419'. [ 87.064708][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.099519][ T5304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.419'. [ 89.385469][ T5318] chnl_net:caif_netlink_parms(): no params data found [ 89.496600][ T5378] loop8: detected capacity change from 0 to 128 [ 89.527796][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.431'. [ 89.577410][ T5318] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.584590][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.627153][ T5318] bridge_slave_0: entered allmulticast mode [ 89.647324][ T5318] bridge_slave_0: entered promiscuous mode [ 89.717976][ T5318] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.725112][ T5318] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.785136][ T5392] hub 9-0:1.0: USB hub found [ 89.789918][ T5392] hub 9-0:1.0: 8 ports detected [ 89.866030][ T5318] bridge_slave_1: entered allmulticast mode [ 89.887558][ T5318] bridge_slave_1: entered promiscuous mode [ 90.030027][ T5400] netlink: 36 bytes leftover after parsing attributes in process `syz.5.436'. [ 90.039285][ T5400] netlink: 16 bytes leftover after parsing attributes in process `syz.5.436'. [ 90.048396][ T5400] netlink: 36 bytes leftover after parsing attributes in process `syz.5.436'. [ 90.132644][ T5400] netlink: 36 bytes leftover after parsing attributes in process `syz.5.436'. [ 90.209746][ T5318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.282278][ T5318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.308238][ T5318] team0: Port device team_slave_0 added [ 90.316899][ T5318] team0: Port device team_slave_1 added [ 90.353107][ T5318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.360278][ T5318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.386576][ T5318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.438360][ T5318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.445551][ T5318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.472623][ T5318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.551870][ T5318] hsr_slave_0: entered promiscuous mode [ 90.560908][ T5318] hsr_slave_1: entered promiscuous mode [ 90.571466][ T5318] debugfs: 'hsr0' already exists in 'hsr' [ 90.577250][ T5318] Cannot create hsr debugfs directory [ 91.139879][ T5318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.149000][ T5318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.163123][ T5318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.172262][ T5318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.187607][ T5432] loop8: detected capacity change from 0 to 128 [ 91.232441][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.8.443'. [ 91.311214][ T5318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.344779][ T5318] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.395392][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.402507][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.462007][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.469133][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.541851][ T5318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.643752][ T5318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.746071][ T5477] hub 9-0:1.0: USB hub found [ 91.840733][ T5477] hub 9-0:1.0: 8 ports detected [ 91.846260][ T5318] veth0_vlan: entered promiscuous mode [ 91.881569][ T5318] veth1_vlan: entered promiscuous mode [ 91.935039][ T5318] veth0_macvtap: entered promiscuous mode [ 91.955370][ T5318] veth1_macvtap: entered promiscuous mode [ 91.985011][ T5318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.015410][ T5318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.048216][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.081357][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.100570][ T5495] hub 9-0:1.0: USB hub found [ 92.130828][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.132024][ T5495] hub 9-0:1.0: 8 ports detected [ 92.139575][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.206951][ T5507] netlink: 36 bytes leftover after parsing attributes in process `syz.8.449'. [ 92.216221][ T5507] netlink: 16 bytes leftover after parsing attributes in process `syz.8.449'. [ 92.225225][ T5507] netlink: 36 bytes leftover after parsing attributes in process `syz.8.449'. [ 92.371410][ T5507] netlink: 36 bytes leftover after parsing attributes in process `syz.8.449'. [ 93.826490][ T5608] hub 9-0:1.0: USB hub found [ 93.831287][ T5608] hub 9-0:1.0: 8 ports detected [ 95.372572][ T5679] hub 9-0:1.0: USB hub found [ 95.520253][ T5679] hub 9-0:1.0: 8 ports detected [ 96.030921][ T5551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.205323][ T5696] netlink: 36 bytes leftover after parsing attributes in process `syz.9.460'. [ 96.214288][ T5696] netlink: 16 bytes leftover after parsing attributes in process `syz.9.460'. [ 96.223368][ T5696] netlink: 36 bytes leftover after parsing attributes in process `syz.9.460'. [ 96.323155][ T5696] netlink: 36 bytes leftover after parsing attributes in process `syz.9.460'. [ 96.445946][ T5705] netlink: 36 bytes leftover after parsing attributes in process `syz.5.464'. [ 96.454952][ T5705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.464'. [ 96.464118][ T5705] netlink: 36 bytes leftover after parsing attributes in process `syz.5.464'. [ 96.548335][ T5705] netlink: 36 bytes leftover after parsing attributes in process `syz.5.464'. [ 97.137618][ T5713] loop6: detected capacity change from 0 to 128 [ 97.206843][ T5713] netlink: 8 bytes leftover after parsing attributes in process `syz.6.468'. [ 97.388376][ T5721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.520916][ T5752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.667054][ T5764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.686650][ T5764] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 98.695896][ T5764] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 100.386375][ T5782] loop1: detected capacity change from 0 to 128 [ 100.446617][ T5729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 100.530826][ T5782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 100.621456][ T5789] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.662282][ T5791] netlink: 'syz.6.492': attribute type 7 has an invalid length. [ 100.669967][ T5791] netlink: 'syz.6.492': attribute type 8 has an invalid length. [ 100.691601][ T5795] loop9: detected capacity change from 0 to 128 [ 100.724480][ T29] audit: type=1400 audit(1770308881.486:274): avc: denied { getopt } for pid=5788 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.895481][ T29] audit: type=1404 audit(1770308881.656:275): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 100.936757][ T29] audit: type=1404 audit(1770308881.686:276): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 100.989046][ T29] audit: type=1400 audit(1770308881.736:277): avc: denied { prog_load } for pid=5802 comm="syz.5.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 101.008744][ T29] audit: type=1400 audit(1770308881.736:278): avc: denied { bpf } for pid=5802 comm="syz.5.496" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.029563][ T29] audit: type=1400 audit(1770308881.736:279): avc: denied { perfmon } for pid=5802 comm="syz.5.496" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.050998][ T29] audit: type=1400 audit(1770308881.736:280): avc: denied { read write } for pid=3955 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.075811][ T29] audit: type=1400 audit(1770308881.736:281): avc: denied { open } for pid=3955 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.100218][ T29] audit: type=1400 audit(1770308881.736:282): avc: denied { ioctl } for pid=3955 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 101.125828][ T29] audit: type=1400 audit(1770308881.746:283): avc: denied { allowed } for pid=5804 comm="syz.6.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 101.164291][ T5807] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 101.173533][ T5807] bond1: (slave macvlan4): Enslaving as an active interface with an up link [ 101.392547][ T5814] loop9: detected capacity change from 0 to 128 [ 101.413858][ T5814] __nla_validate_parse: 1 callbacks suppressed [ 101.413877][ T5814] netlink: 24 bytes leftover after parsing attributes in process `syz.9.500'. [ 102.003049][ T5829] hub 9-0:1.0: USB hub found [ 102.008077][ T5829] hub 9-0:1.0: 8 ports detected [ 102.951509][ T5848] hub 9-0:1.0: USB hub found [ 102.956608][ T5848] hub 9-0:1.0: 8 ports detected [ 104.529736][ T5818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.877639][ T5883] FAULT_INJECTION: forcing a failure. [ 104.877639][ T5883] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.890893][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.8.521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.890927][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.890940][ T5883] Call Trace: [ 104.890948][ T5883] [ 104.890957][ T5883] __dump_stack+0x1d/0x30 [ 104.890982][ T5883] dump_stack_lvl+0x95/0xd0 [ 104.891002][ T5883] dump_stack+0x15/0x1b [ 104.891065][ T5883] should_fail_ex+0x263/0x280 [ 104.891099][ T5883] should_fail+0xb/0x20 [ 104.891124][ T5883] should_fail_usercopy+0x1a/0x20 [ 104.891158][ T5883] _copy_from_user+0x1c/0xb0 [ 104.891184][ T5883] do_semtimedop+0x152/0x220 [ 104.891291][ T5883] __x64_sys_semop+0x41/0x50 [ 104.891321][ T5883] x64_sys_call+0x2d17/0x3000 [ 104.891415][ T5883] do_syscall_64+0xc0/0x2a0 [ 104.891446][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.891474][ T5883] RIP: 0033:0x7f65627caeb9 [ 104.891495][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.891563][ T5883] RSP: 002b:00007f6561206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 104.891584][ T5883] RAX: ffffffffffffffda RBX: 00007f6562a46090 RCX: 00007f65627caeb9 [ 104.891597][ T5883] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000000 [ 104.891611][ T5883] RBP: 00007f6561206090 R08: 0000000000000000 R09: 0000000000000000 [ 104.891671][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.891684][ T5883] R13: 00007f6562a46128 R14: 00007f6562a46090 R15: 00007ffec6925bf8 [ 104.891707][ T5883] [ 105.228552][ T5893] hub 9-0:1.0: USB hub found [ 105.251140][ T5893] hub 9-0:1.0: 8 ports detected [ 105.329743][ T5898] hub 9-0:1.0: USB hub found [ 105.363809][ T5898] hub 9-0:1.0: 8 ports detected [ 105.640030][ T5904] netlink: 32 bytes leftover after parsing attributes in process `syz.9.524'. [ 108.128308][ T5887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.293611][ T5951] hub 9-0:1.0: USB hub found [ 108.298419][ T5951] hub 9-0:1.0: 8 ports detected [ 109.380293][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 109.380313][ T29] audit: type=1400 audit(1770308890.086:345): avc: denied { read write } for pid=5959 comm="syz.1.539" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.411136][ T29] audit: type=1400 audit(1770308890.086:346): avc: denied { open } for pid=5959 comm="syz.1.539" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 109.923689][ T29] audit: type=1400 audit(1770308890.686:347): avc: denied { getopt } for pid=5966 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.022192][ T29] audit: type=1400 audit(1770308890.786:348): avc: denied { map } for pid=5968 comm="syz.1.543" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.046609][ T29] audit: type=1400 audit(1770308890.786:349): avc: denied { read write } for pid=5968 comm="syz.1.543" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 110.113582][ T5972] loop1: detected capacity change from 0 to 512 [ 110.141002][ T5972] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 110.149040][ T5972] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 110.209189][ T5972] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.231956][ T29] audit: type=1400 audit(1770308890.996:350): avc: denied { create } for pid=5983 comm="syz.6.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.253378][ T29] audit: type=1400 audit(1770308890.996:351): avc: denied { setopt } for pid=5983 comm="syz.6.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.273237][ T29] audit: type=1400 audit(1770308890.996:352): avc: denied { open } for pid=5983 comm="syz.6.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.292445][ T29] audit: type=1400 audit(1770308890.996:353): avc: denied { kernel } for pid=5983 comm="syz.6.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.300685][ C0] hrtimer: interrupt took 34339 ns [ 110.318063][ T5972] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 110.350272][ T5972] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 110.365477][ T5972] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 110.373464][ T5972] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.543: bg 0: block 40: padding at end of block bitmap is not set [ 110.480363][ T5972] EXT4-fs (loop1): Remounting filesystem read-only [ 110.491261][ T5972] EXT4-fs (loop1): 1 truncate cleaned up [ 110.501913][ T5972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.866405][ T6012] loop5: detected capacity change from 0 to 128 [ 110.881370][ T6012] hub 9-0:1.0: USB hub found [ 110.886380][ T6012] hub 9-0:1.0: 8 ports detected [ 110.891964][ T5318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.938497][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.556'. [ 110.995819][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.558'. [ 111.046894][ T6026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.060056][ T6026] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 111.430058][ T6041] Invalid logical block size (2) [ 111.990462][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.8.567'. [ 112.270031][ T6055] 8021q: adding VLAN 0 to HW filter on device bond4 [ 112.282025][ T6055] bond2: (slave macvlan4): Error -98 calling set_mac_address [ 112.453502][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.8.577'. [ 112.462734][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.8.577'. [ 112.471708][ T6066] netlink: 52 bytes leftover after parsing attributes in process `syz.8.577'. [ 112.672854][ T6077] loop8: detected capacity change from 0 to 512 [ 112.692897][ T6077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.706764][ T6077] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.742378][ T6077] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.582: corrupted inode contents [ 112.754548][ T6077] EXT4-fs (loop8): Remounting filesystem read-only [ 112.761494][ T6077] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 112.768459][ T6086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.788803][ T4645] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.862497][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.587'. [ 112.890990][ T6093] syzkaller0: entered promiscuous mode [ 112.896539][ T6093] syzkaller0: entered allmulticast mode [ 112.908055][ T6093] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 113.669134][ T5998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.772760][ T6115] FAULT_INJECTION: forcing a failure. [ 113.772760][ T6115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.786109][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz.5.595 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.786143][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.786167][ T6115] Call Trace: [ 113.786175][ T6115] [ 113.786183][ T6115] __dump_stack+0x1d/0x30 [ 113.786242][ T6115] dump_stack_lvl+0x95/0xd0 [ 113.786270][ T6115] dump_stack+0x15/0x1b [ 113.786294][ T6115] should_fail_ex+0x263/0x280 [ 113.786351][ T6115] should_fail+0xb/0x20 [ 113.786385][ T6115] should_fail_usercopy+0x1a/0x20 [ 113.786424][ T6115] _copy_to_user+0x20/0xa0 [ 113.786463][ T6115] simple_read_from_buffer+0xb5/0x130 [ 113.786548][ T6115] proc_fail_nth_read+0x10e/0x150 [ 113.786576][ T6115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.786617][ T6115] vfs_read+0x1ab/0x7f0 [ 113.786719][ T6115] ? __fget_files+0x184/0x1c0 [ 113.786748][ T6115] ? __rcu_read_unlock+0x4e/0x70 [ 113.786784][ T6115] ? __fget_files+0x184/0x1c0 [ 113.786885][ T6115] ? mutex_lock+0x57/0x90 [ 113.786912][ T6115] ksys_read+0xdc/0x1a0 [ 113.786937][ T6115] __x64_sys_read+0x40/0x50 [ 113.786961][ T6115] x64_sys_call+0x2889/0x3000 [ 113.786997][ T6115] do_syscall_64+0xc0/0x2a0 [ 113.787034][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.787073][ T6115] RIP: 0033:0x7f8d264bb78e [ 113.787094][ T6115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.787116][ T6115] RSP: 002b:00007f8d24f56fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.787141][ T6115] RAX: ffffffffffffffda RBX: 00007f8d24f576c0 RCX: 00007f8d264bb78e [ 113.787166][ T6115] RDX: 000000000000000f RSI: 00007f8d24f570a0 RDI: 0000000000000006 [ 113.787180][ T6115] RBP: 00007f8d24f57090 R08: 0000000000000000 R09: 0000000000000000 [ 113.787284][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.787300][ T6115] R13: 00007f8d26776038 R14: 00007f8d26775fa0 R15: 00007ffd8be0b078 [ 113.787349][ T6115] [ 114.104594][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.5.598'. [ 114.176798][ T6128] loop8: detected capacity change from 0 to 512 [ 114.214727][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.6.599'. [ 114.228667][ T6128] EXT4-fs: test_dummy_encryption option not supported [ 114.238122][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.245619][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.399660][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 114.399678][ T29] audit: type=1400 audit(1770308895.156:384): avc: denied { ioctl } for pid=6118 comm="syz.6.599" path="socket:[14934]" dev="sockfs" ino=14934 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 114.477581][ T29] audit: type=1400 audit(1770308895.216:385): avc: denied { sys_module } for pid=6118 comm="syz.6.599" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.495508][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.526423][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.574960][ T29] audit: type=1400 audit(1770308895.336:386): avc: denied { read } for pid=6150 comm="syz.9.606" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.599720][ T29] audit: type=1400 audit(1770308895.336:387): avc: denied { open } for pid=6150 comm="syz.9.606" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.625724][ T29] audit: type=1400 audit(1770308895.336:388): avc: denied { read } for pid=6150 comm="syz.9.606" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.629143][ T1729] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.648635][ T29] audit: type=1400 audit(1770308895.336:389): avc: denied { open } for pid=6150 comm="syz.9.606" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.648669][ T29] audit: type=1400 audit(1770308895.336:390): avc: denied { ioctl } for pid=6150 comm="syz.9.606" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.746591][ T1729] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.756056][ T1729] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.783136][ T1729] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.876846][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.612'. [ 114.980662][ T6177] FAULT_INJECTION: forcing a failure. [ 114.980662][ T6177] name failslab, interval 1, probability 0, space 0, times 1 [ 114.993565][ T6177] CPU: 0 UID: 0 PID: 6177 Comm: syz.8.613 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.993637][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.993649][ T6177] Call Trace: [ 114.993658][ T6177] [ 114.993669][ T6177] __dump_stack+0x1d/0x30 [ 114.993701][ T6177] dump_stack_lvl+0x95/0xd0 [ 114.993803][ T6177] dump_stack+0x15/0x1b [ 114.993831][ T6177] should_fail_ex+0x263/0x280 [ 114.993873][ T6177] should_failslab+0x8c/0xb0 [ 114.993899][ T6177] kmem_cache_alloc_noprof+0x68/0x490 [ 114.993929][ T6177] ? security_file_alloc+0x32/0xf0 [ 114.993955][ T6177] security_file_alloc+0x32/0xf0 [ 114.994040][ T6177] init_file+0x5c/0x1c0 [ 114.994073][ T6177] alloc_empty_file+0x8b/0x200 [ 114.994106][ T6177] path_openat+0x62/0x23c0 [ 114.994190][ T6177] ? _parse_integer_limit+0x170/0x190 [ 114.994245][ T6177] ? _parse_integer+0x27/0x40 [ 114.994276][ T6177] ? kstrtoull+0x111/0x140 [ 114.994310][ T6177] ? kstrtouint+0x76/0xc0 [ 114.994344][ T6177] do_filp_open+0x15d/0x280 [ 114.994433][ T6177] do_sys_openat2+0xa6/0x150 [ 114.994470][ T6177] __x64_sys_open+0xe6/0x110 [ 114.994517][ T6177] x64_sys_call+0x166f/0x3000 [ 114.994549][ T6177] do_syscall_64+0xc0/0x2a0 [ 114.994634][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.994656][ T6177] RIP: 0033:0x7f65627caeb9 [ 114.994672][ T6177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.994693][ T6177] RSP: 002b:00007f6561206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 114.994771][ T6177] RAX: ffffffffffffffda RBX: 00007f6562a46090 RCX: 00007f65627caeb9 [ 114.994789][ T6177] RDX: 0000000000000000 RSI: 0000000000008201 RDI: 0000200000000000 [ 114.994804][ T6177] RBP: 00007f6561206090 R08: 0000000000000000 R09: 0000000000000000 [ 114.994817][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.994836][ T6177] R13: 00007f6562a46128 R14: 00007f6562a46090 R15: 00007ffec6925bf8 [ 114.994857][ T6177] [ 115.150366][ T29] audit: type=1400 audit(1770308895.816:391): avc: denied { read } for pid=6160 comm="syz.1.610" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.227817][ T29] audit: type=1400 audit(1770308895.816:392): avc: denied { open } for pid=6160 comm="syz.1.610" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.251820][ T29] audit: type=1400 audit(1770308895.816:393): avc: denied { ioctl } for pid=6160 comm="syz.1.610" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.321034][ T6176] hub 9-0:1.0: USB hub found [ 115.326157][ T6176] hub 9-0:1.0: 8 ports detected [ 115.416386][ T6188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.435097][ T6189] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 115.466212][ T6189] bond1: (slave macvlan5): Enslaving as an active interface with an up link [ 115.805616][ T6195] loop9: detected capacity change from 0 to 512 [ 115.818458][ T6195] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.619: ea_inode with extended attributes [ 115.845127][ T6195] EXT4-fs (loop9): Remounting filesystem read-only [ 115.895551][ T6195] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 115.939031][ T6195] EXT4-fs (loop9): 1 orphan inode deleted [ 115.983367][ T6195] EXT4-fs (loop9): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.036358][ T6195] EXT4-fs (loop9): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 116.318038][ T6225] Invalid logical block size (2) [ 116.532964][ T6230] hub 9-0:1.0: USB hub found [ 116.545623][ T6230] hub 9-0:1.0: 8 ports detected [ 117.223931][ T6260] loop5: detected capacity change from 0 to 128 [ 117.239455][ T6260] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.258629][ T6260] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.963026][ T3674] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.190499][ T6278] Invalid logical block size (2) [ 118.586665][ T6285] loop8: detected capacity change from 0 to 256 [ 118.733878][ T6288] __nla_validate_parse: 2 callbacks suppressed [ 118.733947][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 118.861684][ T6205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.950962][ T6298] delete_channel: no stack [ 119.173672][ T6308] loop9: detected capacity change from 0 to 128 [ 119.275455][ T6312] hub 9-0:1.0: USB hub found [ 119.280282][ T6312] hub 9-0:1.0: 8 ports detected [ 119.297880][ T6313] FAULT_INJECTION: forcing a failure. [ 119.297880][ T6313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.311451][ T6313] CPU: 1 UID: 0 PID: 6313 Comm: syz.9.659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.311485][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.311500][ T6313] Call Trace: [ 119.311509][ T6313] [ 119.311528][ T6313] __dump_stack+0x1d/0x30 [ 119.311627][ T6313] dump_stack_lvl+0x95/0xd0 [ 119.311650][ T6313] dump_stack+0x15/0x1b [ 119.311670][ T6313] should_fail_ex+0x263/0x280 [ 119.311741][ T6313] should_fail+0xb/0x20 [ 119.311773][ T6313] should_fail_usercopy+0x1a/0x20 [ 119.311803][ T6313] _copy_from_user+0x1c/0xb0 [ 119.311827][ T6313] kstrtouint_from_user+0x69/0xf0 [ 119.311875][ T6313] proc_fail_nth_write+0x50/0x160 [ 119.311938][ T6313] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.311969][ T6313] vfs_write+0x269/0x9f0 [ 119.311992][ T6313] ? __rcu_read_unlock+0x4e/0x70 [ 119.312023][ T6313] ? __fget_files+0x184/0x1c0 [ 119.312062][ T6313] ? mutex_lock+0x57/0x90 [ 119.312089][ T6313] ksys_write+0xdc/0x1a0 [ 119.312113][ T6313] __x64_sys_write+0x40/0x50 [ 119.312147][ T6313] x64_sys_call+0x2847/0x3000 [ 119.312240][ T6313] do_syscall_64+0xc0/0x2a0 [ 119.312277][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.312301][ T6313] RIP: 0033:0x7fc2e4f8b78e [ 119.312318][ T6313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.312335][ T6313] RSP: 002b:00007fc2e3a05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.312420][ T6313] RAX: ffffffffffffffda RBX: 00007fc2e3a066c0 RCX: 00007fc2e4f8b78e [ 119.312435][ T6313] RDX: 0000000000000001 RSI: 00007fc2e3a060a0 RDI: 0000000000000004 [ 119.312448][ T6313] RBP: 00007fc2e3a06090 R08: 0000000000000000 R09: 0000000000000000 [ 119.312485][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.312498][ T6313] R13: 00007fc2e5246128 R14: 00007fc2e5246090 R15: 00007ffcb9ee5248 [ 119.312516][ T6313] [ 119.740337][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 119.740359][ T29] audit: type=1400 audit(1770308900.416:679): avc: denied { execmem } for pid=6316 comm="syz.9.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.775910][ T29] audit: type=1400 audit(1770308900.536:680): avc: denied { write } for pid=6316 comm="syz.9.660" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.827388][ T29] audit: type=1400 audit(1770308900.546:681): avc: denied { create } for pid=6292 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.846705][ T29] audit: type=1400 audit(1770308900.546:682): avc: denied { setopt } for pid=6292 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.966573][ T29] audit: type=1400 audit(1770308900.696:683): avc: denied { read write } for pid=6320 comm="syz.8.661" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.990908][ T29] audit: type=1400 audit(1770308900.696:684): avc: denied { open } for pid=6320 comm="syz.8.661" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.014616][ T29] audit: type=1400 audit(1770308900.696:685): avc: denied { write } for pid=6292 comm="syz.5.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.034476][ T29] audit: type=1400 audit(1770308900.706:686): avc: denied { create } for pid=6321 comm="syz.9.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.054317][ T29] audit: type=1400 audit(1770308900.706:687): avc: denied { setopt } for pid=6321 comm="syz.9.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.074119][ T29] audit: type=1400 audit(1770308900.706:688): avc: denied { bind } for pid=6321 comm="syz.9.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.177279][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.6.665'. [ 120.307224][ T6346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.331672][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'. [ 121.378866][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.678'. [ 122.403426][ T6384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.594061][ T6391] syzkaller0: entered promiscuous mode [ 122.599672][ T6391] syzkaller0: entered allmulticast mode [ 122.607463][ T6391] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 122.667247][ T6398] Invalid logical block size (2) [ 122.727138][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.690'. [ 122.741301][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.690'. [ 122.756728][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.690'. [ 122.766129][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.690'. [ 122.779778][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.690'. [ 122.789473][ T6401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.690'. [ 122.790463][ T6403] netlink: 'syz.6.691': attribute type 1 has an invalid length. [ 122.925473][ T6322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.978001][ T6409] hub 9-0:1.0: USB hub found [ 122.999972][ T6409] hub 9-0:1.0: 8 ports detected [ 123.113748][ T6425] loop5: detected capacity change from 0 to 764 [ 123.120083][ T6427] syzkaller0: entered promiscuous mode [ 123.120681][ T6425] iso9660: Unknown parameter '' [ 123.125840][ T6427] syzkaller0: entered allmulticast mode [ 123.153880][ T6427] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 123.453232][ T6442] Invalid logical block size (2) [ 124.512141][ T6476] __nla_validate_parse: 44 callbacks suppressed [ 124.512163][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.9.717'. [ 124.590675][ T6479] 9p: Bad value for 'trans' [ 124.595118][ T6480] loop9: detected capacity change from 0 to 1024 [ 124.639433][ T6480] EXT4-fs: dax option not supported [ 125.351483][ T6496] hub 9-0:1.0: USB hub found [ 125.356279][ T6496] hub 9-0:1.0: 8 ports detected [ 125.450239][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 125.450260][ T29] audit: type=1400 audit(1770308906.126:740): avc: denied { create } for pid=6493 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.476821][ T29] audit: type=1400 audit(1770308906.126:741): avc: denied { bind } for pid=6493 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.496430][ T29] audit: type=1400 audit(1770308906.176:742): avc: denied { listen } for pid=6493 comm="syz.1.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 125.862999][ T29] audit: type=1400 audit(1770308906.626:743): avc: denied { read } for pid=6498 comm="syz.9.723" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.887110][ T29] audit: type=1400 audit(1770308906.626:744): avc: denied { open } for pid=6498 comm="syz.9.723" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.971501][ T29] audit: type=1400 audit(1770308906.686:745): avc: denied { ioctl } for pid=6498 comm="syz.9.723" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 125.997065][ T29] audit: type=1400 audit(1770308906.726:746): avc: denied { ioctl } for pid=6512 comm="syz.1.728" path="socket:[16549]" dev="sockfs" ino=16549 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.021941][ T29] audit: type=1400 audit(1770308906.726:747): avc: denied { bind } for pid=6512 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.041257][ T29] audit: type=1400 audit(1770308906.726:748): avc: denied { write } for pid=6512 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.094823][ T29] audit: type=1400 audit(1770308906.846:749): avc: denied { create } for pid=6515 comm="syz.6.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.261123][ T6530] hub 9-0:1.0: USB hub found [ 126.271699][ T6530] hub 9-0:1.0: 8 ports detected [ 127.172512][ T6579] netlink: 36 bytes leftover after parsing attributes in process `syz.5.733'. [ 127.181751][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.5.733'. [ 127.191021][ T6579] netlink: 36 bytes leftover after parsing attributes in process `syz.5.733'. [ 127.590962][ T6579] netlink: 36 bytes leftover after parsing attributes in process `syz.5.733'. [ 127.779677][ T6626] hub 9-0:1.0: USB hub found [ 127.813817][ T6626] hub 9-0:1.0: 8 ports detected [ 127.943687][ T6638] syzkaller0: entered promiscuous mode [ 127.949219][ T6638] syzkaller0: entered allmulticast mode [ 127.995673][ T6638] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 128.813694][ T6676] Invalid logical block size (2) [ 128.891147][ T6680] netlink: 36 bytes leftover after parsing attributes in process `syz.6.749'. [ 128.900052][ T6680] netlink: 16 bytes leftover after parsing attributes in process `syz.6.749'. [ 128.909339][ T6680] netlink: 36 bytes leftover after parsing attributes in process `syz.6.749'. [ 128.970958][ T6685] FAULT_INJECTION: forcing a failure. [ 128.970958][ T6685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.984193][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.9.753 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.984226][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.984239][ T6685] Call Trace: [ 128.984245][ T6685] [ 128.984252][ T6685] __dump_stack+0x1d/0x30 [ 128.984324][ T6685] dump_stack_lvl+0x95/0xd0 [ 128.984351][ T6685] dump_stack+0x15/0x1b [ 128.984375][ T6685] should_fail_ex+0x263/0x280 [ 128.984404][ T6685] should_fail+0xb/0x20 [ 128.984543][ T6685] should_fail_usercopy+0x1a/0x20 [ 128.984582][ T6685] _copy_from_iter+0xcf/0xea0 [ 128.984605][ T6685] ? __alloc_skb+0x397/0x4b0 [ 128.984668][ T6685] ? __alloc_skb+0x219/0x4b0 [ 128.984698][ T6685] netlink_sendmsg+0x4ae/0x6f0 [ 128.984789][ T6685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.984891][ T6685] ____sys_sendmsg+0x5af/0x600 [ 128.984915][ T6685] ___sys_sendmsg+0x195/0x1e0 [ 128.984985][ T6685] __x64_sys_sendmsg+0xd4/0x160 [ 128.985006][ T6685] x64_sys_call+0x17ba/0x3000 [ 128.985030][ T6685] do_syscall_64+0xc0/0x2a0 [ 128.985069][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.985123][ T6685] RIP: 0033:0x7fc2e4fcaeb9 [ 128.985143][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.985165][ T6685] RSP: 002b:00007fc2e3a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.985188][ T6685] RAX: ffffffffffffffda RBX: 00007fc2e5245fa0 RCX: 00007fc2e4fcaeb9 [ 128.985254][ T6685] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 128.985269][ T6685] RBP: 00007fc2e3a27090 R08: 0000000000000000 R09: 0000000000000000 [ 128.985282][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.985295][ T6685] R13: 00007fc2e5246038 R14: 00007fc2e5245fa0 R15: 00007ffcb9ee5248 [ 128.985312][ T6685] [ 128.996887][ T6687] syzkaller0: entered promiscuous mode [ 129.015490][ T6680] netlink: 36 bytes leftover after parsing attributes in process `syz.6.749'. [ 129.016689][ T6687] syzkaller0: entered allmulticast mode [ 129.251779][ T6693] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 129.312879][ T6707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.381943][ T6752] syzkaller0: entered promiscuous mode [ 130.387633][ T6752] syzkaller0: entered allmulticast mode [ 130.396367][ T6752] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 130.706759][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 130.706779][ T29] audit: type=1400 audit(1770308911.466:777): avc: denied { create } for pid=6770 comm="syz.6.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 130.733594][ T29] audit: type=1400 audit(1770308911.476:778): avc: denied { write } for pid=6770 comm="syz.6.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 130.849456][ T6783] syzkaller0: entered promiscuous mode [ 130.855109][ T6783] syzkaller0: entered allmulticast mode [ 130.862490][ T6783] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 132.537943][ T6725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.640465][ T6811] syzkaller0: entered promiscuous mode [ 132.645985][ T6811] syzkaller0: entered allmulticast mode [ 132.655223][ T6816] netlink: 328 bytes leftover after parsing attributes in process `syz.8.796'. [ 132.684793][ T29] audit: type=1400 audit(1770308913.446:779): avc: denied { create } for pid=6802 comm="syz.6.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.725878][ T6811] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 132.726801][ T29] audit: type=1400 audit(1770308913.466:780): avc: denied { ioctl } for pid=6802 comm="syz.6.791" path="socket:[16102]" dev="sockfs" ino=16102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 132.789991][ T6823] process 'syz.6.791' launched '/dev/fd/9' with NULL argv: empty string added [ 132.790123][ T29] audit: type=1400 audit(1770308913.546:781): avc: denied { execute } for pid=6802 comm="syz.6.791" dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.790176][ T29] audit: type=1400 audit(1770308913.546:782): avc: denied { execute_no_trans } for pid=6802 comm="syz.6.791" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.896259][ T6830] loop8: detected capacity change from 0 to 512 [ 132.896607][ T6830] EXT4-fs: Ignoring removed nobh option [ 132.943478][ T6830] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 133.088769][ T29] audit: type=1400 audit(1770308913.816:783): avc: denied { mount } for pid=6826 comm="syz.8.800" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 133.159612][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.803'. [ 133.201196][ T29] audit: type=1400 audit(1770308913.966:784): avc: denied { create } for pid=6839 comm="syz.6.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 133.586537][ T6866] netlink: 140 bytes leftover after parsing attributes in process `syz.1.810'. [ 133.727523][ T6875] vhci_hcd vhci_hcd.4: invalid port number 254 [ 133.733914][ T6875] vhci_hcd vhci_hcd.4: default hub control req: 8009 v000a i00fe l0 [ 134.531796][ T6889] loop8: detected capacity change from 0 to 2048 [ 134.652797][ T6889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.674875][ T29] audit: type=1400 audit(1770308915.426:785): avc: denied { mount } for pid=6888 comm="syz.8.817" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.693504][ T6889] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 134.697088][ T29] audit: type=1400 audit(1770308915.456:786): avc: denied { append } for pid=6888 comm="syz.8.817" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.786698][ T6889] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 134.799306][ T6889] EXT4-fs (loop8): This should not happen!! Data will be lost [ 134.799306][ T6889] [ 134.809484][ T6889] EXT4-fs (loop8): Total free blocks count 0 [ 134.815636][ T6889] EXT4-fs (loop8): Free/Dirty block details [ 134.821895][ T6889] EXT4-fs (loop8): free_blocks=2415919504 [ 134.827682][ T6889] EXT4-fs (loop8): dirty_blocks=256 [ 134.832979][ T6889] EXT4-fs (loop8): Block reservation details [ 134.839058][ T6889] EXT4-fs (loop8): i_reserved_data_blocks=16 [ 134.852402][ T6905] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 134.889973][ T6903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.370539][ T52] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 135.798689][ T6935] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 136.221764][ T6948] hub 9-0:1.0: USB hub found [ 136.226732][ T6948] hub 9-0:1.0: 8 ports detected [ 136.564907][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 136.676846][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 136.676864][ T29] audit: type=1400 audit(1770308917.436:794): avc: denied { create } for pid=6954 comm="syz.9.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 136.720888][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.837'. [ 136.741171][ T29] audit: type=1400 audit(1770308917.476:795): avc: denied { ioctl } for pid=6954 comm="syz.9.835" path="socket:[16364]" dev="sockfs" ino=16364 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 136.766155][ T29] audit: type=1400 audit(1770308917.476:796): avc: denied { create } for pid=6958 comm="syz.8.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 136.785748][ T29] audit: type=1400 audit(1770308917.486:797): avc: denied { write } for pid=6958 comm="syz.8.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.085648][ T6972] hub 9-0:1.0: USB hub found [ 137.090588][ T6972] hub 9-0:1.0: 8 ports detected [ 137.228990][ T29] audit: type=1400 audit(1770308917.986:798): avc: denied { create } for pid=6977 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.265383][ T6978] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.329490][ T29] audit: type=1400 audit(1770308918.026:799): avc: denied { write } for pid=6977 comm="syz.5.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.349426][ T29] audit: type=1400 audit(1770308918.086:800): avc: denied { mount } for pid=6977 comm="syz.5.840" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 138.029745][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.8.847'. [ 138.240543][ T29] audit: type=1400 audit(1770308918.996:801): avc: denied { ioctl } for pid=7002 comm="syz.8.848" path="socket:[17454]" dev="sockfs" ino=17454 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.343575][ T29] audit: type=1400 audit(1770308919.006:802): avc: denied { accept } for pid=7002 comm="syz.8.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.568914][ T29] audit: type=1404 audit(1770308919.326:803): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 138.721196][ T7025] tipc: Enabling of bearer rejected, failed to enable media [ 139.154667][ T7043] hub 9-0:1.0: USB hub found [ 139.170036][ T7043] hub 9-0:1.0: 8 ports detected [ 139.459218][ T7051] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 139.487234][ T7052] hub 9-0:1.0: USB hub found [ 139.492458][ T7052] hub 9-0:1.0: 8 ports detected [ 140.182731][ T7056] 9pnet_fd: Insufficient options for proto=fd [ 140.199836][ T7056] 9p: Bad value for 'rfdno' [ 140.213470][ T7058] loop9: detected capacity change from 0 to 128 [ 140.502297][ T7072] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.772898][ T7094] SELinux: failed to load policy [ 141.249134][ T7112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.283339][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.8.884'. [ 141.299045][ T7112] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 141.312641][ T7112] bond1: (slave macvlan3): making interface the new active one [ 141.323500][ T7112] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 141.485763][ T7128] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 141.496780][ T7128] program syz.8.886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.550857][ T7128] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 141.829453][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 141.829476][ T29] audit: type=1400 audit(1770308922.466:910): avc: denied { mount } for pid=7124 comm="syz.6.887" name="/" dev="rpc_pipefs" ino=17783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 142.060994][ T29] audit: type=1400 audit(1770308922.826:911): avc: denied { create } for pid=7135 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.122974][ T29] audit: type=1400 audit(1770308922.876:912): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 142.144157][ T29] audit: type=1400 audit(1770308922.886:913): avc: denied { create } for pid=7135 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.163776][ T29] audit: type=1400 audit(1770308922.886:914): avc: denied { setopt } for pid=7135 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 142.184525][ T29] audit: type=1400 audit(1770308922.886:915): avc: denied { search } for pid=3042 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.206013][ T29] audit: type=1400 audit(1770308922.886:916): avc: denied { search } for pid=3042 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.227873][ T29] audit: type=1400 audit(1770308922.886:917): avc: denied { search } for pid=3042 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.249564][ T29] audit: type=1400 audit(1770308922.886:918): avc: denied { read } for pid=3042 comm="dhcpcd" name="n37" dev="tmpfs" ino=4051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.271434][ T29] audit: type=1400 audit(1770308922.886:919): avc: denied { open } for pid=3042 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=4051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.295509][ T1926] bridge_slave_1: left allmulticast mode [ 142.301539][ T1926] bridge_slave_1: left promiscuous mode [ 142.307365][ T1926] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.330806][ T1926] bridge_slave_0: left allmulticast mode [ 142.336670][ T1926] bridge_slave_0: left promiscuous mode [ 142.342397][ T1926] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.564454][ T1926] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 142.720295][ T1808] smc: removing ib device syz0 [ 142.725780][ T1926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.820683][ T1926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.891877][ T1926] bond0 (unregistering): Released all slaves [ 142.953477][ T1926] bond1 (unregistering): Released all slaves [ 143.017753][ T1926] bond2 (unregistering): Released all slaves [ 143.592006][ T7205] netlink: 36 bytes leftover after parsing attributes in process `syz.9.903'. [ 143.601121][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.9.903'. [ 143.609995][ T7205] netlink: 36 bytes leftover after parsing attributes in process `syz.9.903'. [ 143.660285][ T7205] netlink: 36 bytes leftover after parsing attributes in process `syz.9.903'. [ 144.364123][ T7235] netlink: 'syz.9.906': attribute type 1 has an invalid length. [ 144.408582][ T7235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.423102][ T1926] hsr_slave_0: left promiscuous mode [ 144.430522][ T1926] hsr_slave_1: left promiscuous mode [ 144.460512][ T1926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.490928][ T1926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.585896][ T1926] team0 (unregistering): Port device team_slave_1 removed [ 144.742573][ T3425] IPVS: starting estimator thread 0... [ 144.830375][ T7254] IPVS: using max 2400 ests per chain, 120000 per kthread [ 145.007467][ T1926] team0 (unregistering): Port device team_slave_0 removed [ 145.063084][ T7242] bond4: (slave ip6erspan0): making interface the new active one [ 145.075186][ T7242] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 145.124384][ T7264] xt_limit: Overflow, try lower: 0/0 [ 145.209836][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 145.220750][ T7282] loop9: detected capacity change from 0 to 128 [ 145.250976][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.9.915'. [ 145.270991][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.914'. [ 145.317850][ T1926] IPVS: stop unused estimator thread 0... [ 145.325851][ T299] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.342162][ T7292] netlink: 36 bytes leftover after parsing attributes in process `syz.8.916'. [ 145.351320][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.8.916'. [ 145.360418][ T7292] netlink: 36 bytes leftover after parsing attributes in process `syz.8.916'. [ 145.383452][ T299] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.402151][ T299] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.429140][ T299] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.524236][ T7310] cgroup: subsys name conflicts with all [ 146.480851][ T7368] chnl_net:caif_netlink_parms(): no params data found [ 146.996263][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 146.996281][ T29] audit: type=1326 audit(1770308927.756:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.025848][ T29] audit: type=1326 audit(1770308927.756:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.049306][ T29] audit: type=1326 audit(1770308927.756:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.072895][ T29] audit: type=1326 audit(1770308927.756:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0ede8eb78e code=0x7ffc0000 [ 147.096366][ T29] audit: type=1326 audit(1770308927.756:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.119994][ T29] audit: type=1326 audit(1770308927.756:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.143594][ T29] audit: type=1326 audit(1770308927.756:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.167391][ T29] audit: type=1326 audit(1770308927.756:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.190740][ T29] audit: type=1326 audit(1770308927.756:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.214164][ T29] audit: type=1326 audit(1770308927.756:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 147.950285][ T7421] hub 9-0:1.0: USB hub found [ 147.955028][ T7421] hub 9-0:1.0: 8 ports detected [ 148.347719][ T7435] veth2: entered promiscuous mode [ 148.352839][ T7435] veth2: entered allmulticast mode [ 149.710857][ T7488] hub 9-0:1.0: USB hub found [ 149.716316][ T7488] hub 9-0:1.0: 8 ports detected [ 150.120441][ T7494] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 150.215163][ T7500] __nla_validate_parse: 2 callbacks suppressed [ 150.215240][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.979'. [ 150.588412][ T7519] hub 9-0:1.0: USB hub found [ 150.593542][ T7519] hub 9-0:1.0: 8 ports detected [ 151.080373][ T7532] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 151.100623][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.991'. [ 151.121321][ T7532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.990'. [ 151.188681][ T7543] netlink: 24 bytes leftover after parsing attributes in process `syz.9.994'. [ 151.345108][ T7543] netlink: 48 bytes leftover after parsing attributes in process `syz.9.994'. [ 151.409884][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.999'. [ 151.419124][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.999'. [ 151.440797][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.999'. [ 151.449998][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.999'. [ 151.490549][ T7559] hub 9-0:1.0: USB hub found [ 151.495608][ T7559] hub 9-0:1.0: 8 ports detected [ 151.595383][ T7562] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.062254][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1007'. [ 152.159745][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 152.159763][ T29] audit: type=1400 audit(1770308932.910:1014): avc: denied { ioctl } for pid=7517 comm="syz.8.986" path="socket:[19505]" dev="sockfs" ino=19505 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 152.466457][ T1808] bridge_slave_1: left allmulticast mode [ 152.472329][ T1808] bridge_slave_1: left promiscuous mode [ 152.478126][ T1808] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.524868][ T1808] bridge_slave_0: left allmulticast mode [ 152.530793][ T1808] bridge_slave_0: left promiscuous mode [ 152.536739][ T1808] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.624619][ T1808] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 152.749175][ T29] audit: type=1400 audit(1770308933.500:1015): avc: denied { block_suspend } for pid=7607 comm="syz.6.1018" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.847918][ T1808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.027277][ T29] audit: type=1400 audit(1770308933.570:1016): avc: denied { watch } for pid=7613 comm="syz.9.1019" path="/127" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 153.061196][ T1808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.074184][ T1808] bond0 (unregistering): Released all slaves [ 153.081941][ T1808] bond1 (unregistering): Released all slaves [ 153.092393][ T29] audit: type=1400 audit(1770308933.850:1017): avc: denied { unlink } for pid=4662 comm="syz-executor" name="file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 153.340748][ T1808] hsr_slave_0: left promiscuous mode [ 153.351822][ T1808] hsr_slave_1: left promiscuous mode [ 153.391867][ T1808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.443980][ T1808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.590265][ T1808] team0 (unregistering): Port device team_slave_1 removed [ 153.604111][ T1808] team0 (unregistering): Port device team_slave_0 removed [ 153.700799][ T7642] netlink: 'syz.8.1027': attribute type 15 has an invalid length. [ 153.715544][ T7642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7642 comm=syz.8.1027 [ 153.812529][ T29] audit: type=1400 audit(1770308934.570:1018): avc: denied { connect } for pid=7631 comm="syz.8.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 153.972665][ T29] audit: type=1400 audit(1770308934.720:1019): avc: denied { execute } for pid=7647 comm="syz.9.1030" path="/131/file1" dev="tmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.773241][ T29] audit: type=1400 audit(1770308935.520:1020): avc: denied { read append } for pid=7682 comm="syz.5.1036" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.797287][ T29] audit: type=1400 audit(1770308935.520:1021): avc: denied { open } for pid=7682 comm="syz.5.1036" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 154.821591][ T29] audit: type=1400 audit(1770308935.520:1022): avc: denied { ioctl } for pid=7682 comm="syz.5.1036" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x450a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 155.376940][ T29] audit: type=1400 audit(1770308935.770:1023): avc: denied { ioctl } for pid=7691 comm="syz.6.1039" path="socket:[20877]" dev="sockfs" ino=20877 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 155.829611][ T7720] __nla_validate_parse: 7 callbacks suppressed [ 155.829627][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1045'. [ 155.999486][ T7702] syz.8.1041 (7702) used greatest stack depth: 7464 bytes left [ 156.547737][ T7741] mmap: syz.1.1050 (7741) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.348129][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 157.348147][ T29] audit: type=1400 audit(1770308938.100:1030): avc: denied { write } for pid=7758 comm="syz.8.1053" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 157.408277][ T29] audit: type=1400 audit(1770308938.140:1031): avc: denied { accept } for pid=7758 comm="syz.8.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.535843][ T7774] FAULT_INJECTION: forcing a failure. [ 157.535843][ T7774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.549142][ T7774] CPU: 1 UID: 0 PID: 7774 Comm: syz.8.1056 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.549171][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.549183][ T7774] Call Trace: [ 157.549192][ T7774] [ 157.549202][ T7774] __dump_stack+0x1d/0x30 [ 157.549229][ T7774] dump_stack_lvl+0x95/0xd0 [ 157.549285][ T7774] dump_stack+0x15/0x1b [ 157.549386][ T7774] should_fail_ex+0x263/0x280 [ 157.549416][ T7774] should_fail+0xb/0x20 [ 157.549442][ T7774] should_fail_usercopy+0x1a/0x20 [ 157.549478][ T7774] _copy_from_iter+0xcf/0xea0 [ 157.549530][ T7774] ? _raw_spin_lock_bh+0x56/0xb0 [ 157.549563][ T7774] raw_sendmsg+0x28f/0x510 [ 157.549625][ T7774] ieee802154_sock_sendmsg+0x51/0x60 [ 157.549655][ T7774] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 157.549686][ T7774] ____sys_sendmsg+0x5af/0x600 [ 157.549714][ T7774] ___sys_sendmsg+0x195/0x1e0 [ 157.549750][ T7774] __x64_sys_sendmsg+0xd4/0x160 [ 157.549918][ T7774] x64_sys_call+0x17ba/0x3000 [ 157.549945][ T7774] do_syscall_64+0xc0/0x2a0 [ 157.550052][ T7774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.550079][ T7774] RIP: 0033:0x7f65627caeb9 [ 157.550097][ T7774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.550115][ T7774] RSP: 002b:00007f6561227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.550141][ T7774] RAX: ffffffffffffffda RBX: 00007f6562a45fa0 RCX: 00007f65627caeb9 [ 157.550223][ T7774] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 157.550239][ T7774] RBP: 00007f6561227090 R08: 0000000000000000 R09: 0000000000000000 [ 157.550255][ T7774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.550309][ T7774] R13: 00007f6562a46038 R14: 00007f6562a45fa0 R15: 00007ffec6925bf8 [ 157.550333][ T7774] [ 157.773357][ T7780] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.522892][ T29] audit: type=1400 audit(1770308939.280:1032): avc: denied { execute_no_trans } for pid=7813 comm="syz.9.1065" path="/140/file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.725908][ T29] audit: type=1400 audit(1770308939.480:1033): avc: denied { write } for pid=7839 comm="syz.8.1067" name="dev" dev="proc" ino=4026532534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 158.807453][ T29] audit: type=1400 audit(1770308939.560:1034): avc: denied { write } for pid=7839 comm="syz.8.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.842099][ T7845] FAULT_INJECTION: forcing a failure. [ 158.842099][ T7845] name failslab, interval 1, probability 0, space 0, times 0 [ 158.854939][ T7845] CPU: 1 UID: 0 PID: 7845 Comm: syz.9.1068 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.854995][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.855009][ T7845] Call Trace: [ 158.855017][ T7845] [ 158.855025][ T7845] __dump_stack+0x1d/0x30 [ 158.855056][ T7845] dump_stack_lvl+0x95/0xd0 [ 158.855082][ T7845] dump_stack+0x15/0x1b [ 158.855130][ T7845] should_fail_ex+0x263/0x280 [ 158.855167][ T7845] should_failslab+0x8c/0xb0 [ 158.855211][ T7845] __kmalloc_noprof+0xb8/0x580 [ 158.855235][ T7845] ? kobject_get_path+0x92/0x1c0 [ 158.855268][ T7845] kobject_get_path+0x92/0x1c0 [ 158.855342][ T7845] kobject_uevent_env+0x1da/0x570 [ 158.855383][ T7845] kobject_uevent+0x1d/0x30 [ 158.855477][ T7845] device_del+0x70f/0x790 [ 158.855508][ T7845] __del_gendisk+0x4a7/0x590 [ 158.855684][ T7845] del_gendisk+0xab/0xf0 [ 158.855718][ T7845] loop_remove+0x26/0x80 [ 158.855749][ T7845] loop_control_ioctl+0x3b3/0x3f0 [ 158.855840][ T7845] ? __pfx_loop_control_ioctl+0x10/0x10 [ 158.855879][ T7845] __se_sys_ioctl+0xce/0x140 [ 158.855919][ T7845] __x64_sys_ioctl+0x43/0x50 [ 158.856015][ T7845] x64_sys_call+0x14b0/0x3000 [ 158.856044][ T7845] do_syscall_64+0xc0/0x2a0 [ 158.856078][ T7845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.856100][ T7845] RIP: 0033:0x7fc2e4fcaeb9 [ 158.856134][ T7845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.856152][ T7845] RSP: 002b:00007fc2e3a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.856174][ T7845] RAX: ffffffffffffffda RBX: 00007fc2e5245fa0 RCX: 00007fc2e4fcaeb9 [ 158.856191][ T7845] RDX: 000000000000000c RSI: 0000000000004c81 RDI: 0000000000000004 [ 158.856211][ T7845] RBP: 00007fc2e3a27090 R08: 0000000000000000 R09: 0000000000000000 [ 158.856224][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.856299][ T7845] R13: 00007fc2e5246038 R14: 00007fc2e5245fa0 R15: 00007ffcb9ee5248 [ 158.856320][ T7845] [ 159.074509][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1070'. [ 159.325496][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1075'. [ 159.511931][ T7880] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.903603][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1080'. [ 159.910262][ T29] audit: type=1400 audit(1770308940.660:1035): avc: denied { watch_reads } for pid=7898 comm="syz.9.1080" path="/148" dev="tmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 159.913215][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1080'. [ 160.061877][ T29] audit: type=1326 audit(1770308940.820:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.8.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65627caeb9 code=0x7ffc0000 [ 160.085734][ T29] audit: type=1326 audit(1770308940.820:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.8.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65627caeb9 code=0x7ffc0000 [ 160.109185][ T29] audit: type=1326 audit(1770308940.820:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.8.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65627caeb9 code=0x7ffc0000 [ 160.133002][ T29] audit: type=1326 audit(1770308940.820:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.8.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65627caeb9 code=0x7ffc0000 [ 160.166958][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1082'. [ 160.176390][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1082'. [ 160.237986][ T7914] bridge_slave_1: left allmulticast mode [ 160.243838][ T7914] bridge_slave_1: left promiscuous mode [ 160.249804][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.337594][ T7921] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.349559][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1089'. [ 160.358670][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1089'. [ 160.634724][ T7947] hub 9-0:1.0: USB hub found [ 160.750234][ T7947] hub 9-0:1.0: 8 ports detected [ 161.386137][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.395088][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.494575][ T7977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=515 sclass=netlink_tcpdiag_socket pid=7977 comm=syz.5.1099 [ 162.807287][ T8013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8013 comm=syz.9.1105 [ 162.952039][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 162.961170][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 162.970365][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 162.979609][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 162.988968][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 162.998070][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 163.007211][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 163.016442][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 163.025674][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 163.034874][ T8013] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1105'. [ 163.138355][ T8036] sd 0:0:1:0: device reset [ 163.222854][ T8038] FAULT_INJECTION: forcing a failure. [ 163.222854][ T8038] name failslab, interval 1, probability 0, space 0, times 0 [ 163.235571][ T8038] CPU: 0 UID: 0 PID: 8038 Comm: syz.1.1113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.235612][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.235625][ T8038] Call Trace: [ 163.235632][ T8038] [ 163.235639][ T8038] __dump_stack+0x1d/0x30 [ 163.235713][ T8038] dump_stack_lvl+0x95/0xd0 [ 163.235734][ T8038] dump_stack+0x15/0x1b [ 163.235760][ T8038] should_fail_ex+0x263/0x280 [ 163.235790][ T8038] should_failslab+0x8c/0xb0 [ 163.235859][ T8038] kmem_cache_alloc_noprof+0x68/0x490 [ 163.235883][ T8038] ? skb_clone+0x151/0x1f0 [ 163.235902][ T8038] skb_clone+0x151/0x1f0 [ 163.235988][ T8038] netlink_broadcast_filtered+0x561/0xd10 [ 163.236036][ T8038] netlink_broadcast+0x37/0x50 [ 163.236120][ T8038] kobject_uevent_net_broadcast+0x2a1/0x410 [ 163.236146][ T8038] kobject_uevent_env+0x43d/0x570 [ 163.236168][ T8038] kobject_uevent+0x1d/0x30 [ 163.236234][ T8038] device_del+0x70f/0x790 [ 163.236295][ T8038] __del_gendisk+0x4a7/0x590 [ 163.236326][ T8038] del_gendisk+0xab/0xf0 [ 163.236354][ T8038] loop_remove+0x26/0x80 [ 163.236409][ T8038] loop_control_ioctl+0x3b3/0x3f0 [ 163.236439][ T8038] ? __pfx_loop_control_ioctl+0x10/0x10 [ 163.236533][ T8038] __se_sys_ioctl+0xce/0x140 [ 163.236564][ T8038] __x64_sys_ioctl+0x43/0x50 [ 163.236592][ T8038] x64_sys_call+0x14b0/0x3000 [ 163.236621][ T8038] do_syscall_64+0xc0/0x2a0 [ 163.236649][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.236670][ T8038] RIP: 0033:0x7f0ede92aeb9 [ 163.236761][ T8038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.236779][ T8038] RSP: 002b:00007f0edd387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.236799][ T8038] RAX: ffffffffffffffda RBX: 00007f0edeba5fa0 RCX: 00007f0ede92aeb9 [ 163.236869][ T8038] RDX: 000000000000000e RSI: 0000000000004c81 RDI: 0000000000000004 [ 163.236882][ T8038] RBP: 00007f0edd387090 R08: 0000000000000000 R09: 0000000000000000 [ 163.236939][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.236952][ T8038] R13: 00007f0edeba6038 R14: 00007f0edeba5fa0 R15: 00007fffe3bfd0e8 [ 163.236971][ T8038] [ 163.653511][ T8047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.080039][ T8066] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 164.101316][ T8066] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.114640][ T8066] vlan2: entered promiscuous mode [ 164.119782][ T8066] bond5: entered promiscuous mode [ 164.125080][ T8066] vlan2: entered allmulticast mode [ 164.130243][ T8066] bond5: entered allmulticast mode [ 164.144244][ T8066] bond5: (slave bridge1): making interface the new active one [ 164.151803][ T8066] bridge1: entered promiscuous mode [ 164.157100][ T8066] bridge1: entered allmulticast mode [ 164.163569][ T8066] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 164.183502][ T8069] IPv6: NLM_F_REPLACE set, but no existing node found! [ 164.305670][ T8073] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 164.316812][ T8073] bond2: (slave macvlan4): Enslaving as an active interface with an up link [ 164.552302][ T8081] hub 9-0:1.0: USB hub found [ 164.557122][ T8081] hub 9-0:1.0: 8 ports detected [ 165.310561][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 165.310588][ T29] audit: type=1400 audit(1770308946.070:1134): avc: denied { create } for pid=8103 comm="syz.8.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.356198][ T8104] netlink: 'syz.8.1135': attribute type 1 has an invalid length. [ 165.365756][ T29] audit: type=1400 audit(1770308946.100:1135): avc: denied { getopt } for pid=8103 comm="syz.8.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.385849][ T29] audit: type=1400 audit(1770308946.100:1136): avc: denied { ioctl } for pid=8103 comm="syz.8.1135" path="socket:[21415]" dev="sockfs" ino=21415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.518750][ T8104] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.896968][ T29] audit: type=1326 audit(1770308946.650:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8118 comm="syz.8.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65627caeb9 code=0x7ffc0000 [ 166.096630][ T29] audit: type=1400 audit(1770308946.830:1138): avc: denied { write } for pid=8124 comm="syz.1.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.117140][ T29] audit: type=1400 audit(1770308946.830:1139): avc: denied { nlmsg_write } for pid=8124 comm="syz.1.1139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.213134][ T8141] 9p: Bad value for 'wfdno' [ 167.218018][ T8141] netlink: 'syz.5.1144': attribute type 21 has an invalid length. [ 167.226210][ T29] audit: type=1400 audit(1770308947.970:1140): avc: denied { mounton } for pid=8140 comm="syz.5.1144" path="/236/file0" dev="tmpfs" ino=1259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 167.600283][ T29] audit: type=1326 audit(1770308948.340:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d264faeb9 code=0x7ffc0000 [ 167.624123][ T29] audit: type=1326 audit(1770308948.340:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d264faeb9 code=0x7ffc0000 [ 167.648756][ T29] audit: type=1326 audit(1770308948.340:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8149 comm="syz.5.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d264faeb9 code=0x7ffc0000 [ 167.752141][ T8154] openvswitch: netlink: Missing key (keys=40, expected=80) [ 167.845861][ T8163] 8021q: adding VLAN 0 to HW filter on device bond6 [ 167.871389][ T8163] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 167.882083][ T8163] bond2: (slave macvlan5): Enslaving as an active interface with an up link [ 168.076788][ T8173] macvtap0: entered promiscuous mode [ 168.828431][ T8173] macvtap0: left promiscuous mode [ 169.295316][ T8198] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.312296][ T8195] __nla_validate_parse: 73 callbacks suppressed [ 169.312314][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 169.743014][ T8212] 8021q: adding VLAN 0 to HW filter on device bond4 [ 170.323639][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 170.323659][ T29] audit: type=1400 audit(1770308951.080:1258): avc: denied { create } for pid=8233 comm="syz.5.1170" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 170.697272][ T8245] hub 9-0:1.0: USB hub found [ 170.702346][ T8245] hub 9-0:1.0: 8 ports detected [ 170.965163][ T29] audit: type=1400 audit(1770308951.470:1259): avc: denied { create } for pid=8236 comm="syz.6.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.985084][ T29] audit: type=1400 audit(1770308951.470:1260): avc: denied { bind } for pid=8236 comm="syz.6.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.005319][ T29] audit: type=1400 audit(1770308951.500:1261): avc: denied { listen } for pid=8236 comm="syz.6.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.025094][ T29] audit: type=1400 audit(1770308951.690:1262): avc: denied { unlink } for pid=3674 comm="syz-executor" name="file0" dev="tmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 171.047993][ T29] audit: type=1400 audit(1770308951.710:1263): avc: denied { create } for pid=8253 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.068185][ T29] audit: type=1400 audit(1770308951.710:1264): avc: denied { bind } for pid=8253 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.087975][ T29] audit: type=1400 audit(1770308951.710:1265): avc: denied { listen } for pid=8253 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.107664][ T29] audit: type=1400 audit(1770308951.710:1266): avc: denied { create } for pid=8253 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.280794][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1176'. [ 171.342392][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 171.351468][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1178'. [ 171.371784][ T29] audit: type=1400 audit(1770308951.890:1267): avc: denied { setopt } for pid=8253 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.417292][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1178'. [ 171.426268][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1178'. [ 171.689028][ T8306] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.305172][ T8320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 172.547404][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 173.004743][ T8350] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1194'. [ 173.030443][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1194'. [ 173.323595][ T8350] netlink: 'syz.9.1194': attribute type 1 has an invalid length. [ 173.360694][ T8350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.702620][ T1808] Bluetooth: hci0: Frame reassembly failed (-84) [ 173.750933][ T8390] 9p: Bad value for 'rfdno' [ 173.890332][ T8394] bond6: option updelay: invalid value (18446744073709551613) [ 173.898005][ T8394] bond6: option updelay: allowed values 0 - 2147483647 [ 173.947372][ T8394] bond6 (unregistering): Released all slaves [ 174.169965][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1210'. [ 174.620798][ T8414] __nla_validate_parse: 3 callbacks suppressed [ 174.620819][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1213'. [ 174.692044][ T8416] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1214'. [ 174.709048][ T8416] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1214'. [ 174.926874][ T8422] netlink: 'syz.9.1217': attribute type 1 has an invalid length. [ 174.945419][ T8422] bond6: entered promiscuous mode [ 174.954963][ T8422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.001077][ T8422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.018806][ T8422] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 175.028970][ T8422] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 175.050873][ T8430] usb usb9: usbfs: process 8430 (syz.9.1217) did not claim interface 0 before use [ 175.079417][ T8422] bond6: (slave xfrm1): making interface the new active one [ 175.087032][ T8422] xfrm1: entered promiscuous mode [ 175.115168][ T8422] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 175.211619][ T8433] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 175.419292][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 175.419312][ T29] audit: type=1400 audit(1770308956.170:1317): avc: denied { ioctl } for pid=8447 comm="syz.8.1224" path="socket:[24799]" dev="sockfs" ino=24799 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.524482][ T8458] hub 9-0:1.0: USB hub found [ 175.529244][ T8458] hub 9-0:1.0: 8 ports detected [ 175.734750][ T29] audit: type=1400 audit(1770308956.470:1318): avc: denied { write } for pid=8461 comm="syz.8.1228" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 175.763832][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 175.781543][ T3709] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 175.940347][ T29] audit: type=1400 audit(1770308956.630:1319): avc: denied { cpu } for pid=8463 comm="syz.9.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 175.959982][ T29] audit: type=1326 audit(1770308956.630:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e4fcaeb9 code=0x7ffc0000 [ 175.983497][ T29] audit: type=1326 audit(1770308956.630:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e4fcaeb9 code=0x7ffc0000 [ 175.984713][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 176.007260][ T29] audit: type=1326 audit(1770308956.630:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e4fcaeb9 code=0x7ffc0000 [ 176.025320][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 176.040012][ T29] audit: type=1326 audit(1770308956.630:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc2e4fcaeb9 code=0x7ffc0000 [ 176.040085][ T29] audit: type=1400 audit(1770308956.640:1325): avc: denied { write } for pid=8466 comm="syz.1.1230" path="socket:[24467]" dev="sockfs" ino=24467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.057053][ T8473] tmpfs: Bad value for 'mode' [ 176.072807][ T29] audit: type=1326 audit(1770308956.630:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e4fcaeb9 code=0x7ffc0000 [ 176.072844][ T29] audit: type=1326 audit(1770308956.650:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.9.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e4fcaeb9 code=0x7ffc0000 [ 177.168903][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1239'. [ 177.505111][ T8516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1238'. [ 177.514234][ T8516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1238'. [ 177.523543][ T8516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1238'. [ 177.584897][ T8516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1238'. [ 178.906375][ T8546] 8021q: adding VLAN 0 to HW filter on device bond7 [ 179.444855][ T8560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29696 sclass=netlink_route_socket pid=8560 comm=syz.5.1255 [ 179.693262][ T8564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1259'. [ 179.978809][ T8579] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1262'. [ 180.499641][ T8587] 8021q: adding VLAN 0 to HW filter on device bond7 [ 180.728971][ T8592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8592 comm=syz.8.1267 [ 180.841684][ T8599] capability: warning: `syz.8.1269' uses 32-bit capabilities (legacy support in use) [ 181.064827][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 181.064846][ T29] audit: type=1400 audit(1770308961.820:1370): avc: denied { shutdown } for pid=8607 comm="syz.8.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 181.142114][ T29] audit: type=1400 audit(1770308961.820:1371): avc: denied { name_connect } for pid=8607 comm="syz.8.1272" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 181.295141][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1275'. [ 181.383719][ T29] audit: type=1400 audit(1770308962.140:1372): avc: denied { watch watch_reads } for pid=8617 comm="syz.1.1276" path="/147" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 181.411420][ T8619] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 181.508726][ T29] audit: type=1400 audit(1770308962.240:1373): avc: denied { ioctl } for pid=8624 comm="syz.1.1278" path="socket:[25948]" dev="sockfs" ino=25948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.604754][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1270'. [ 181.705822][ T29] audit: type=1400 audit(1770308962.460:1374): avc: denied { setopt } for pid=8600 comm="syz.9.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.806590][ T29] audit: type=1400 audit(1770308962.550:1375): avc: denied { write } for pid=8600 comm="syz.9.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.876077][ T29] audit: type=1400 audit(1770308962.560:1376): avc: denied { create } for pid=8639 comm="syz.8.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 181.896120][ T29] audit: type=1400 audit(1770308962.560:1377): avc: denied { sys_admin } for pid=8639 comm="syz.8.1284" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 181.919851][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 182.030449][ T29] audit: type=1400 audit(1770308962.710:1378): avc: denied { listen } for pid=8600 comm="syz.9.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.202429][ T29] audit: type=1400 audit(1770308962.960:1379): avc: denied { lock } for pid=8571 comm="syz.5.1263" path="socket:[25833]" dev="sockfs" ino=25833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.510848][ T8670] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1294'. [ 182.596157][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1289'. [ 182.751760][ T8679] tmpfs: Unknown parameter 'ia' [ 182.912102][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 182.926773][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 182.936124][ T8698] netlink: 'syz.1.1303': attribute type 5 has an invalid length. [ 182.975388][ T8699] hub 9-0:1.0: USB hub found [ 182.980512][ T8699] hub 9-0:1.0: 8 ports detected [ 182.995891][ T8698] geneve2: entered promiscuous mode [ 183.001581][ T8698] geneve2: entered allmulticast mode [ 183.207753][ T299] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 65535 - 0 [ 183.296273][ T299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 65535 - 0 [ 183.386459][ T299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 65535 - 0 [ 183.396157][ T299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 65535 - 0 [ 183.479660][ T8710] tc_dump_action: action bad kind [ 184.085922][ T8682] bridge0: port 3(macvtap1) entered blocking state [ 184.092790][ T8682] bridge0: port 3(macvtap1) entered disabled state [ 184.144140][ T8682] macvtap1: entered allmulticast mode [ 184.149742][ T8682] bridge0: entered allmulticast mode [ 184.241648][ T8682] macvtap1: left allmulticast mode [ 184.246930][ T8682] bridge0: left allmulticast mode [ 184.737547][ T8763] __nla_validate_parse: 3 callbacks suppressed [ 184.737567][ T8763] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1320'. [ 184.819672][ T8765] 9p: Could not find request transport: unx [ 185.708722][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1326'. [ 186.079676][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.452520][ T8811] netlink: 'syz.9.1335': attribute type 9 has an invalid length. [ 186.490863][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 186.490882][ T29] audit: type=1400 audit(1770308967.250:1403): avc: denied { bind } for pid=8810 comm="syz.9.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 186.574193][ T29] audit: type=1400 audit(1770308967.280:1404): avc: denied { sqpoll } for pid=8810 comm="syz.9.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.636190][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1338'. [ 186.665121][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1338'. [ 186.698090][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1338'. [ 187.077109][ T8835] hub 9-0:1.0: USB hub found [ 187.081920][ T8835] hub 9-0:1.0: 8 ports detected [ 187.470315][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1345'. [ 187.478961][ T29] audit: type=1400 audit(1770308968.230:1405): avc: denied { read } for pid=8844 comm="syz.1.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.499128][ T8845] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.607857][ T29] audit: type=1400 audit(1770308968.360:1406): avc: denied { setopt } for pid=8847 comm="syz.1.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.651438][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1347'. [ 187.697658][ T29] audit: type=1326 audit(1770308968.440:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 187.722412][ T29] audit: type=1326 audit(1770308968.440:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 187.746631][ T29] audit: type=1326 audit(1770308968.440:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 187.770599][ T29] audit: type=1326 audit(1770308968.440:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 187.794982][ T29] audit: type=1326 audit(1770308968.440:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 187.819581][ T29] audit: type=1326 audit(1770308968.440:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8847 comm="syz.1.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ede92aeb9 code=0x7ffc0000 [ 188.210738][ T4662] ================================================================== [ 188.219058][ T4662] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 188.226727][ T4662] [ 188.229077][ T4662] read-write to 0xffff88811d4c4f90 of 8 bytes by task 8869 on cpu 0: [ 188.237168][ T4662] inode_add_bytes+0x47/0xe0 [ 188.241885][ T4662] __dquot_alloc_space+0x180/0x8a0 [ 188.247107][ T4662] shmem_inode_acct_blocks+0x125/0x230 [ 188.252602][ T4662] shmem_get_folio_gfp+0x5b2/0xd60 [ 188.257760][ T4662] shmem_write_begin+0xfc/0x1f0 [ 188.262744][ T4662] generic_perform_write+0x183/0x490 [ 188.268088][ T4662] shmem_file_write_iter+0xc5/0xf0 [ 188.273237][ T4662] __kernel_write_iter+0x319/0x590 [ 188.278478][ T4662] dump_user_range+0xa7d/0xdb0 [ 188.283369][ T4662] elf_core_dump+0x21a2/0x2330 [ 188.288179][ T4662] coredump_write+0xacf/0xdf0 [ 188.292894][ T4662] vfs_coredump+0x26bc/0x3120 [ 188.297950][ T4662] get_signal+0xd7b/0xf60 [ 188.302656][ T4662] arch_do_signal_or_restart+0x96/0x450 [ 188.308237][ T4662] irqentry_exit+0xf7/0x510 [ 188.312778][ T4662] asm_exc_page_fault+0x26/0x30 [ 188.317671][ T4662] [ 188.320019][ T4662] read to 0xffff88811d4c4f90 of 8 bytes by task 4662 on cpu 1: [ 188.327654][ T4662] generic_fillattr+0x27d/0x340 [ 188.332544][ T4662] shmem_getattr+0x181/0x200 [ 188.337205][ T4662] vfs_getattr_nosec+0x146/0x1e0 [ 188.342269][ T4662] vfs_getattr+0x48/0x60 [ 188.346550][ T4662] vfs_statx_path+0x28/0x140 [ 188.351181][ T4662] vfs_statx+0xc4/0x170 [ 188.355387][ T4662] vfs_fstatat+0x115/0x170 [ 188.359921][ T4662] __se_sys_newfstatat+0x55/0x3e0 [ 188.365067][ T4662] __x64_sys_newfstatat+0x55/0x70 [ 188.370125][ T4662] x64_sys_call+0x111f/0x3000 [ 188.374844][ T4662] do_syscall_64+0xc0/0x2a0 [ 188.379390][ T4662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.385309][ T4662] [ 188.387650][ T4662] value changed: 0x000000000000a990 -> 0x000000000000a9a8 [ 188.394867][ T4662] [ 188.397296][ T4662] Reported by Kernel Concurrency Sanitizer on: [ 188.403684][ T4662] CPU: 1 UID: 0 PID: 4662 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.413706][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.423962][ T4662] ==================================================================