last executing test programs: 6m6.924325043s ago: executing program 32 (id=433): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x40083, 0x44310}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7ff}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x4040) 6m3.506288822s ago: executing program 0 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r1, 0x321, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 6m3.424968167s ago: executing program 0 (id=476): socket$nl_netfilter(0x10, 0x3, 0xc) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x80000001, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8}, @tmpl={0x44, 0x1c, [{{@in6=@private2}, 0x0, @in=@multicast2}]}]}, 0x174}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d000000060000000400", @ANYRES32=r6], 0x50) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 6m3.37981447s ago: executing program 0 (id=478): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r4, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r4}}, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) 6m2.434797714s ago: executing program 0 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 6m2.34355149s ago: executing program 0 (id=487): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300ffef07391bd06b", 0x41}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac7073e1b8cc", 0x97}], 0x2, 0x0, 0x0, 0x7400}, 0x0) 6m2.025111849s ago: executing program 0 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 6m2.00547359s ago: executing program 33 (id=489): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}], 0x1}}], 0x1, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 5m54.143671099s ago: executing program 5 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000500)=0x7d8, &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) 5m54.075130943s ago: executing program 5 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x3, {0x0, 0xf0, 0x4}, 0xfd}, 0x18) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0xfffffffffffffffe}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 5m53.77342945s ago: executing program 5 (id=618): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="2fe28092c5ec1d88d05e0a6f2ce709c63de1ab461557270000fc494605c77dc874d0734eed79ecd2e373cf63d3a4e9a461877edf08af5c6c56be907e383f7a1cce50acae1ed1944d1e00f576d2365e27c059eaceee4e56e1f161effd91efedde230512ce932b03ea7ccfb1442c3d8c8954f4b9cdc4bc9dc1f14af9e5b22f9ba40774572c6992ca3e89d70fc2ab813333d71fbea6b7a7b60004285435319ebbae2cc5f343756ed4c9eb88760294047270864a6921876a953daf8b1e8dfa14c0626ce6597cd21a38b8b115ea15c3d63f4119", 0xd1}, {0x0}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c4) 5m53.748777402s ago: executing program 3 (id=619): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = syz_io_uring_setup(0x2b07, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x4, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) shutdown(r0, 0x1) 5m53.748202672s ago: executing program 5 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 5m53.690706705s ago: executing program 5 (id=621): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 5m53.337137356s ago: executing program 3 (id=623): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x40010, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd0009058202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5m53.324233526s ago: executing program 5 (id=625): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 5m53.194019114s ago: executing program 34 (id=625): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 5m52.665104555s ago: executing program 2 (id=630): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x75, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x229}], 0x1}}], 0x1, 0x4) 5m52.608957098s ago: executing program 3 (id=631): syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) shutdown(r0, 0x1) 5m52.147832715s ago: executing program 3 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 5m52.070217959s ago: executing program 3 (id=637): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x7, 0x700, 0x5, 0x405, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0xb, 0x29, 0x0, @private=0xa010100, @empty}}}}) 5m51.810600735s ago: executing program 2 (id=644): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) 5m51.747506458s ago: executing program 2 (id=645): symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 5m51.660973834s ago: executing program 3 (id=646): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000190001"], 0x24}, 0x1, 0x0, 0x0, 0xc450}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20007, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 5m51.660776554s ago: executing program 2 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 5m51.655988604s ago: executing program 35 (id=646): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000190001"], 0x24}, 0x1, 0x0, 0x0, 0xc450}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20007, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 5m51.641205775s ago: executing program 2 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x4, 0x4, 0x4, 0x0, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={&(0x7f0000000000)="cf56", 0x0, 0x0, 0x0, 0x7, r1}, 0x38) 5m51.501202463s ago: executing program 2 (id=650): socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff0003400000"], 0x0) 5m51.445429416s ago: executing program 36 (id=650): socket$inet6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff0003400000"], 0x0) 2m36.41016468s ago: executing program 9 (id=2484): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="0962d3", 0x3, 0x100400c1, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) read(r0, &(0x7f0000000000)=""/149, 0xaa) 2m36.366243672s ago: executing program 9 (id=2485): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001d80), 0x280, 0x0) preadv2(r0, &(0x7f0000002180)=[{&(0x7f0000001dc0)=""/60, 0x3c}], 0x1, 0x4, 0x0, 0x0) 2m36.316362805s ago: executing program 9 (id=2486): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000780)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 2m35.352994511s ago: executing program 9 (id=2496): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 2m35.268859846s ago: executing program 9 (id=2497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 2m34.956552925s ago: executing program 9 (id=2504): bind$inet(0xffffffffffffffff, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 2m34.953218335s ago: executing program 37 (id=2504): bind$inet(0xffffffffffffffff, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 5.411104054s ago: executing program 6 (id=4155): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000e80)={'gretap0\x00', &(0x7f0000000d80)={'erspan0\x00', 0x0, 0x10, 0x8000, 0x4, 0x80000001, {{0x2f, 0x4, 0x1, 0x7, 0xbc, 0x66, 0x0, 0x7, 0x4, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x13, 0x6a, [@empty, @local, @empty, @dev={0xac, 0x14, 0x14, 0x18}]}, @end, @rr={0x7, 0xf, 0xba, [@dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0xd}]}, @cipso={0x86, 0x5c, 0x3, [{0x5, 0x5, "088240"}, {0x1, 0x12, "a7253f5270e44eb91b5b8d56edd52347"}, {0x6, 0xf, "7296ce8cd7601dd9b04dfd4733"}, {0x2, 0x12, "be648d434acc745fdc754328464ac9b7"}, {0x7, 0x10, "0f676af5c82952ee930f5e99d713"}, {0x1, 0xe, "5be50ae29b1a22e0a2fa73c0"}]}, @end, @cipso={0x86, 0x12, 0x2, [{0x0, 0x8, "d53459c158d8"}, {0x7, 0x4, "bb9d"}]}, @end, @lsrr={0x83, 0x13, 0xa7, [@empty, @local, @empty, @loopback]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000f00)={'syztnl2\x00', r1, 0x4, 0x3, 0x3, 0x5, 0xa, @mcast1, @remote, 0x20, 0x8, 0x7}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x780) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x48fd559, @private2, 0x7}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000380)="785281", 0x3}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$isdn_base(0x22, 0x3, 0x0) r10 = getpid() ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f00000003c0)=r10) r11 = getuid() stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgrp(0x0) getresuid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) sendmsg$unix(r5, &(0x7f0000000d40)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000440)="9d2fc104f0a98dd3b1aa685bf3c5acf83b0b531a94a9c7d4f56cd9ebb90125ce1e5e2ec55b2ffd9b393b77a7a374b357312b39c98ed1b47ba70d276a7ca647c094e4c2b5eafa0794cdb7d15b9a40d8b27200a3b51d6ed3da43ea97d56b5b0a03c77796857c6c009bff229334555476af12884a5145b9227a72d15bc02df058b269d54485bc9f8d178ff7713cc880968d25e465239160", 0x96}, {&(0x7f0000000500)="2c9752d37e3f89ccc878e1c31334c2b865224bc236cccc859a7d4c9560db86182a388f04df1391977ad65fde18ca528f1a9ff74cc5d5abb498824a30f921c0d8c119877714e5a70adf2ce70c92233f99fe00a3d8efe0d0c06f8ba4a5aa776ce23d0ac699042625e484fecafaf68b2371354aadbed5133b5959c7f10d3307", 0x7e}, {0xfffffffffffffffd}, {&(0x7f0000000580)="cc3bbbb98a748fbb8e31fd3d12dad310402ae1d53dfdab1422fb5167d5f440117e82a1a4f978ea485cd07ebeb451e80e66845e7eef3c8d4103423db5c9738462a6e2dd41c39dd84f385bb802cc0d91b73b7b52db2455f92e69f9ebbb90", 0x5d}, {&(0x7f0000000600)="22805dd3cdd799b2c4d1fc47163501fffa06dc4d560786299935a0d7ca05f9d4e59a86fb1168198be2046a6f69242c137a98202087d2819b5263e0284408c1918871c5284b2539e5a8d7be78ec05fd266e01f641f02ac0e8ccd81fd7a733984a4a243caea7", 0x65}, {&(0x7f0000000680)="4f6b7a062d2d0acd7877fbe1abe2fcb931796ab3854c2e3d7ca7ce0fe5a08f3c80d7df58379eb067c204628d77c3aeffabcf19b6428fcf212773dae712390d5b16269d00f6dcd9ba846e5c2ccc2a56db3e000dbf758060f809d444364e8e33c3976e173457f762731ea9f14c0d6bd79586172b", 0x73}, {&(0x7f0000000800)="9d8bf9471afbadb0407deb9115ee5f32cf782753da194d16b86df8002fad6ea6f84ab9604a713a521a545d669424f7082db3dad6d78eff07a02883784da4543ea07ea641c6703219bd7123a0c96e8e9c619314be4df9fcb41d36f9b5deae5901f9976e849ce7971d57fe0853ffe04bd73c16e5fe20d7b095777e9fcb51304948c62b16c6b45f1734af7d875af0aece197061cbe0b162930c8201d40e61f933c480dd4cb800c8aa24c3bfcc653c2218a897f173487453aa62ed249c5b5ef882702db547d696f9074e238d177622a9d0e2871ce6fd1f8f8095833d5438e676c10f6451cf6a16660bf911626e6240a6be752338e8", 0xf3}, {&(0x7f00000000c0)="a5d933d9", 0x4}], 0x8, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r7}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r8]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x28, 0x1, 0x1, [r4, r3, r4, r2, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, 0xffffffffffffffff}}}], 0xc8, 0x4800}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x4) writev(r15, &(0x7f0000001340)=[{&(0x7f00000003c0)="480000001400190d09004beafd0d8c560a841419a11f375e317d569fa3476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00", 0x48}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 4.690761436s ago: executing program 4 (id=4169): socket$kcm(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4.324609117s ago: executing program 6 (id=4175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0xa, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r2], 0x0) 4.188481325s ago: executing program 6 (id=4176): r0 = msgget$private(0x0, 0x421) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200e9ea"], 0x8, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgrcv(r0, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x22, &(0x7f0000000140)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xb, 0x6, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x7b, 0x81, 0x5, 0xfffa, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x13, 0x2, 0xc, 0x6}]}}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0xe0c81) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01002100000000000000"], 0x0, 0xa6, 0x0, 0x0, 0x8}, 0x28) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000540)={[{@check_strict}, {@check_relaxed, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@session={'session', 0x3d, 0x62}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x58}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffe}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000008000300af51823c3567", @ANYRES32=0x0], 0x3c}}, 0x4000054) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==") truncate(&(0x7f0000002540)='./file2\x00', 0xe) 2.9045279s ago: executing program 4 (id=4192): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x7dc9, 0x0, &(0x7f0000000140), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 2.529151272s ago: executing program 1 (id=4198): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) 2.468928465s ago: executing program 1 (id=4200): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 2.468423895s ago: executing program 1 (id=4201): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x308, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x82, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "f1"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}]}, 0x80}, 0x1, 0x7}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000027c0)=@dstopts={0x89}, 0x8) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000002d00)) write(r0, 0x0, 0xeffd) 2.38882186s ago: executing program 1 (id=4203): r0 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0xfffe, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) 2.38305065s ago: executing program 1 (id=4205): r0 = syz_io_uring_setup(0x6ba8, &(0x7f0000000500)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'macvlan0\x00', 0x9d}) sched_setscheduler(r2, 0x3, &(0x7f0000000000)=0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x8001c8, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005d00)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000000000000700"/24], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44008004) write$binfmt_misc(r7, &(0x7f0000000300), 0xfdef) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0xc0000063, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x400, 0x0, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000000a010300000000000000000400000314000000090a01010000000000000000010000011400000011000100000000000000000002ec000a"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x10) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.134243035s ago: executing program 1 (id=4208): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaed}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2000, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r4, r4) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@commit={'commit', 0x3d, 0x9}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@noauto_da_alloc}, {@nouid32}, {@errors_continue}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaed}, 0x14105, 0x1, 0xfffffbff, 0x3, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2000, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000000000000000000100"/28], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) (async) fstat(0xffffffffffffffff, &(0x7f0000000140)) (async) setresuid(r4, r4, r4) (async) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@commit={'commit', 0x3d, 0x9}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@noauto_da_alloc}, {@nouid32}, {@errors_continue}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) 2.003140063s ago: executing program 4 (id=4209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1.756416487s ago: executing program 4 (id=4211): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095", @ANYRES16=r1], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x700}, 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x1, 0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r9) socket$inet_tcp(0x2, 0x1, 0x0) 1.719650789s ago: executing program 8 (id=4213): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r0, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) getsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000001800)=""/4096, &(0x7f0000000200)=0x1000) 1.623809994s ago: executing program 8 (id=4215): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x454a83, 0x5c, 0x8}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000003c000000090a010400000000000e00000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001e600000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003400038030000080080003400000000224000b80200001800e0001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.474217104s ago: executing program 7 (id=4217): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000001240)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/../file0\x00') 1.412470187s ago: executing program 7 (id=4218): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x88802, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x80800) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0xf, 0x0, @fd_index=0x1, 0x6, {}, 0x4, 0x15}) io_uring_enter(r5, 0x47f6, 0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) pwritev2(r3, 0x0, 0x0, 0x5405, 0x0, 0x0) 1.20092079s ago: executing program 8 (id=4219): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000680)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0x7dc9, &(0x7f0000000340)={0x0, 0xa12d, 0x10100, 0xfffffff8, 0x234, 0x0, r1}, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xf503, 0x40, 0x0, 0x10}, &(0x7f0000000180)=0x0, &(0x7f0000000640)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 974.531013ms ago: executing program 6 (id=4220): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRESHEX=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000004000000000000000001d8900"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x48000) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16fbde45676fc87d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00f6000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000240), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 830.616121ms ago: executing program 4 (id=4221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 648.189822ms ago: executing program 7 (id=4222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x8) 618.094334ms ago: executing program 7 (id=4223): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_clone3(&(0x7f00000004c0)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x19}, &(0x7f0000001b40)=""/4096, 0x1000, &(0x7f0000000400)=""/137, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) capget(&(0x7f0000000380)={0x0, r0}, &(0x7f0000000540)={0x9, 0x85f2, 0x6, 0x2, 0x10000, 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x90001) r3 = open(&(0x7f0000000240)='./file1\x00', 0x2c102, 0x6e) sendfile(r3, r3, 0x0, 0x800000009) 594.728575ms ago: executing program 6 (id=4224): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200), 0x0) 508.77159ms ago: executing program 6 (id=4225): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r5, r5, 0x0, 0x80000000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) 464.874773ms ago: executing program 7 (id=4226): mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x6227) clock_gettime(0x0, &(0x7f0000000340)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) (fail_nth: 1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3, 0x0) sendmsg$IEEE802154_ADD_IFACE(r6, 0x0, 0x40c4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) 443.556693ms ago: executing program 4 (id=4227): sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000540)='P', &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f0000000400), 0x20000000}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="a0005bf8", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff01000000000000000000000000000100000000000000000200010000000000000007fd0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1715}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) 311.993911ms ago: executing program 8 (id=4228): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) 37.046158ms ago: executing program 8 (id=4229): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000"], 0x0) 36.780528ms ago: executing program 7 (id=4230): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0xa0000009, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) listen(r2, 0x7e5a) bind$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x4}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) 0s ago: executing program 8 (id=4231): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) kernel console output (not intermixed with test programs): rer [ 366.189810][ T28] audit: type=1326 audit(2000000021.710:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x7ffc0000 [ 366.240052][ T28] audit: type=1326 audit(2000000021.710:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x7ffc0000 [ 366.322439][ T28] audit: type=1326 audit(2000000021.710:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f686858c84e code=0x7ffc0000 [ 366.402843][T13874] syzkaller0: entered promiscuous mode [ 366.413082][ T28] audit: type=1326 audit(2000000021.710:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f68685cd297 code=0x7ffc0000 [ 366.416861][T13874] syzkaller0: entered allmulticast mode [ 366.470275][T13884] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3357'. [ 366.489398][T13876] loop7: detected capacity change from 0 to 512 [ 366.498522][T13884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3357'. [ 366.502526][ T28] audit: type=1326 audit(2000000021.710:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68685cbf79 code=0x7ffc0000 [ 366.525259][T13884] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3357'. [ 366.572401][ T28] audit: type=1326 audit(2000000021.710:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f68685cd297 code=0x7ffc0000 [ 366.609299][T13884] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3357'. [ 366.694787][T13876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.711021][ T28] audit: type=1326 audit(2000000021.710:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f686858c84e code=0x7ffc0000 [ 366.761704][T13876] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.775494][ T28] audit: type=1326 audit(2000000021.710:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x7ffc0000 [ 366.799203][ T28] audit: type=1326 audit(2000000021.710:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13858 comm="syz.1.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x7ffc0000 [ 366.937796][T13892] loop4: detected capacity change from 0 to 1764 [ 367.186037][ T5359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.149922][T13920] 9p: Could not find request transport: tcp*por0000000004e22 [ 368.673677][T13931] loop6: detected capacity change from 0 to 1764 [ 370.084181][T13952] loop4: detected capacity change from 0 to 512 [ 370.385176][T13952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.423884][T13952] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.155182][T13714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.390061][T13986] tipc: Enabled bearer , priority 0 [ 371.534986][T13986] syzkaller0: entered promiscuous mode [ 371.560732][T13986] syzkaller0: entered allmulticast mode [ 371.567233][T13986] tipc: Resetting bearer [ 371.662994][T13985] tipc: Resetting bearer [ 371.729757][T13985] tipc: Disabling bearer [ 371.842461][ T28] kauditd_printk_skb: 520 callbacks suppressed [ 371.842535][ T28] audit: type=1326 audit(2000000027.420:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 371.888076][T14003] loop4: detected capacity change from 0 to 512 [ 371.923778][ T28] audit: type=1326 audit(2000000027.420:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 371.983587][ T28] audit: type=1326 audit(2000000027.420:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.029003][ T28] audit: type=1326 audit(2000000027.420:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.062337][ T28] audit: type=1326 audit(2000000027.420:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.086042][ T28] audit: type=1326 audit(2000000027.420:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.112796][ T28] audit: type=1326 audit(2000000027.420:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.136480][ T28] audit: type=1326 audit(2000000027.420:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.263971][ T28] audit: type=1326 audit(2000000027.420:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.287566][ T28] audit: type=1326 audit(2000000027.460:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14002 comm="syz.4.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f012191bf79 code=0x7ffc0000 [ 372.848409][T14032] 9p: Could not find request transport: tcp*por0000000004e22 [ 373.354045][T14041] tipc: Enabled bearer , priority 0 [ 373.408070][T14036] loop6: detected capacity change from 0 to 512 [ 373.486951][T14036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.523328][T14036] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.594779][T14041] syzkaller0: entered promiscuous mode [ 373.659052][T14041] syzkaller0: entered allmulticast mode [ 373.677068][T14041] tipc: Resetting bearer [ 373.745667][T14040] tipc: Resetting bearer [ 373.765329][T14050] xt_hashlimit: size too large, truncated to 1048576 [ 373.778975][T14040] tipc: Disabling bearer [ 374.069095][T14055] loop7: detected capacity change from 0 to 512 [ 374.092177][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.264662][T14055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.328494][T14055] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.456862][T14083] tipc: Enabled bearer , priority 0 [ 374.582065][T14083] syzkaller0: entered promiscuous mode [ 374.593907][T14083] syzkaller0: entered allmulticast mode [ 374.606188][T14083] tipc: Resetting bearer [ 374.725406][T14082] tipc: Resetting bearer [ 374.755077][T14082] tipc: Disabling bearer [ 374.769280][ T5359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.028100][T14107] syzkaller0: entered promiscuous mode [ 375.043657][T14107] syzkaller0: entered allmulticast mode [ 376.005589][T14133] tipc: Started in network mode [ 376.033235][T14133] tipc: Node identity 52e76b55bbaf, cluster identity 4711 [ 376.072625][T14133] tipc: Enabled bearer , priority 0 [ 376.261295][T14134] syzkaller0: entered promiscuous mode [ 376.281915][T14134] syzkaller0: entered allmulticast mode [ 376.307061][T14134] tipc: Resetting bearer [ 376.366669][T14131] tipc: Resetting bearer [ 376.456915][T14131] tipc: Disabling bearer [ 376.710578][T14144] 9p: Could not find request transport: tcp*por0000000004e22 [ 376.749362][T14150] syzkaller0: entered promiscuous mode [ 376.767436][T14150] syzkaller0: entered allmulticast mode [ 377.032164][T14160] loop6: detected capacity change from 0 to 512 [ 377.221853][T14160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.236705][T14160] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.495056][ T28] kauditd_printk_skb: 255 callbacks suppressed [ 377.495070][ T28] audit: type=1326 audit(2000000033.070:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 377.671031][T14178] tipc: Started in network mode [ 377.721570][ T28] audit: type=1326 audit(2000000033.110:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 377.745376][T14178] tipc: Node identity dedc4804458c, cluster identity 4711 [ 377.758433][ T28] audit: type=1326 audit(2000000033.120:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 377.783700][T14178] tipc: Enabled bearer , priority 0 [ 377.837076][ T28] audit: type=1326 audit(2000000033.120:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 377.921933][ T28] audit: type=1326 audit(2000000033.120:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 377.995406][T14180] syzkaller0: entered promiscuous mode [ 378.000965][T14180] syzkaller0: entered allmulticast mode [ 378.010700][T14180] tipc: Resetting bearer [ 378.057755][T14177] tipc: Resetting bearer [ 378.086949][ T28] audit: type=1326 audit(2000000033.120:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 378.110890][ T28] audit: type=1326 audit(2000000033.120:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 378.134825][ T28] audit: type=1326 audit(2000000033.140:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 378.158470][ T28] audit: type=1326 audit(2000000033.140:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 378.196365][T14177] tipc: Disabling bearer [ 378.215103][ T28] audit: type=1326 audit(2000000033.140:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.6.3447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 378.491922][T14189] loop7: detected capacity change from 0 to 512 [ 378.523254][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.575812][T14189] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.716122][T14189] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.757187][T14197] loop6: detected capacity change from 0 to 128 [ 378.840597][T14197] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.874544][T14197] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.141805][ T5359] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.284449][T14209] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3456'. [ 379.609844][T13316] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.236509][T14240] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 380.498439][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3471'. [ 380.522418][T14256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3471'. [ 380.531411][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3471'. [ 380.556151][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3471'. [ 381.161366][T14268] 9p: Could not find request transport: tcp*por0000000004e22 [ 382.172640][T14288] tipc: Enabled bearer , priority 0 [ 382.540703][T14288] syzkaller0: entered promiscuous mode [ 382.571826][T14288] syzkaller0: entered allmulticast mode [ 382.693164][T14288] tipc: Resetting bearer [ 382.839665][T14287] tipc: Resetting bearer [ 382.857879][T14287] tipc: Disabling bearer [ 383.123808][T14314] tipc: Enabled bearer , priority 0 [ 383.132913][T14314] syzkaller0: entered promiscuous mode [ 383.142547][T14314] syzkaller0: entered allmulticast mode [ 383.174339][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3493'. [ 383.204322][T14314] tipc: Resetting bearer [ 383.232500][T14313] tipc: Resetting bearer [ 383.257159][T14313] tipc: Disabling bearer [ 383.298662][T14324] tipc: Enabled bearer , priority 0 [ 383.408679][T14324] syzkaller0: entered promiscuous mode [ 383.429901][T14324] syzkaller0: entered allmulticast mode [ 383.437388][T14324] tipc: Resetting bearer [ 383.483035][T14328] syzkaller0: entered promiscuous mode [ 383.488608][T14328] syzkaller0: entered allmulticast mode [ 383.503566][T14323] tipc: Resetting bearer [ 383.543283][T14323] tipc: Disabling bearer [ 383.781151][T14359] tipc: Enabled bearer , priority 0 [ 383.788497][T14359] syzkaller0: entered promiscuous mode [ 383.794326][T14359] syzkaller0: entered allmulticast mode [ 383.803855][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3510'. [ 383.815923][T14359] tipc: Resetting bearer [ 383.826737][T14358] tipc: Resetting bearer [ 383.846493][T14358] tipc: Disabling bearer [ 384.112412][T14379] tipc: Enabled bearer , priority 0 [ 384.154715][T14379] syzkaller0: entered promiscuous mode [ 384.160282][T14379] syzkaller0: entered allmulticast mode [ 384.193385][T14379] tipc: Resetting bearer [ 384.325634][T14378] tipc: Resetting bearer [ 384.355548][T14378] tipc: Disabling bearer [ 385.053022][T14413] tipc: Enabled bearer , priority 0 [ 385.092430][T14413] syzkaller0: entered promiscuous mode [ 385.098022][T14413] syzkaller0: entered allmulticast mode [ 385.106703][T14413] tipc: Resetting bearer [ 385.384973][T14411] tipc: Resetting bearer [ 385.487058][T14411] tipc: Disabling bearer [ 385.599746][T14422] 9p: Could not find request transport: tcp*por0000000004e22 [ 386.064150][T14449] tipc: Enabled bearer , priority 0 [ 386.071407][T14449] syzkaller0: entered promiscuous mode [ 386.080367][T14449] syzkaller0: entered allmulticast mode [ 386.093365][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3543'. [ 386.119665][T14449] tipc: Resetting bearer [ 386.131911][T14448] tipc: Resetting bearer [ 386.157385][T14448] tipc: Disabling bearer [ 386.176956][T14451] tipc: Enabled bearer , priority 0 [ 386.231336][T14455] syzkaller0: entered promiscuous mode [ 386.252869][T14455] syzkaller0: entered allmulticast mode [ 386.266416][T14455] tipc: Resetting bearer [ 386.278156][T14450] tipc: Resetting bearer [ 386.294884][T14450] tipc: Disabling bearer [ 386.584360][T14474] tipc: Enabled bearer , priority 0 [ 386.594440][T14472] tipc: Disabling bearer [ 387.122380][T14466] 9p: Could not find request transport: tcp*por0000000004e22 [ 387.127002][T14476] 9p: Could not find request transport: tcp*por0000000004e22 [ 387.172667][T14484] 9p: Could not find request transport: fd0x0000000000000004 [ 387.446097][T14495] tipc: Enabled bearer , priority 0 [ 387.592011][T14495] syzkaller0: entered promiscuous mode [ 387.603744][T14495] syzkaller0: entered allmulticast mode [ 387.621868][T14495] tipc: Resetting bearer [ 387.636757][ T12] tipc: Resetting bearer [ 387.723110][T14494] tipc: Resetting bearer [ 387.765368][T14494] tipc: Disabling bearer [ 388.693204][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3564'. [ 388.731411][T14502] 9p: Could not find request transport: tcp*por0000000004e22 [ 388.786616][T14500] 9p: Could not find request transport: tcp*por0000000004e22 [ 389.259066][T14541] tipc: Enabling of bearer rejected, failed to enable media [ 389.319151][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3574'. [ 390.664939][T14571] 9p: Could not find request transport: tcp*por0000000004e22 [ 390.686551][T14579] netlink: 'syz.6.3584': attribute type 1 has an invalid length. [ 390.751481][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3584'. [ 391.057956][T14593] 9p: Bad value for 'rfdno' [ 391.795512][T14609] syzkaller0: entered promiscuous mode [ 391.801047][T14609] syzkaller0: entered allmulticast mode [ 391.895209][T14619] tipc: Enabled bearer , priority 0 [ 391.912312][T14619] syzkaller0: entered promiscuous mode [ 391.917905][T14619] syzkaller0: entered allmulticast mode [ 391.952599][T14619] tipc: Resetting bearer [ 391.959571][T14618] tipc: Resetting bearer [ 391.967172][T14618] tipc: Disabling bearer [ 392.194212][T14642] 9pnet_fd: Insufficient options for proto=fd [ 392.227696][T14637] 9p: Could not find request transport: tcp*por0000000004e22 [ 392.292750][T14648] tipc: Enabling of bearer rejected, failed to enable media [ 392.525024][T14630] chnl_net:caif_netlink_parms(): no params data found [ 392.616831][T14630] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.624135][T14630] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.631547][T14630] bridge_slave_0: entered allmulticast mode [ 392.639509][T14630] bridge_slave_0: entered promiscuous mode [ 392.647593][T14630] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.655332][T14630] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.663275][T14630] bridge_slave_1: entered allmulticast mode [ 392.685150][T14630] bridge_slave_1: entered promiscuous mode [ 392.786324][T14630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.825850][T14630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.908774][T14630] team0: Port device team_slave_0 added [ 392.933981][T14630] team0: Port device team_slave_1 added [ 392.998538][T14630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.022162][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.071213][T14630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.082686][T14630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.089657][T14630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.115919][T14630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.155631][T14630] hsr_slave_0: entered promiscuous mode [ 393.161795][T14630] hsr_slave_1: entered promiscuous mode [ 393.172847][T14630] debugfs: 'hsr0' already exists in 'hsr' [ 393.178604][T14630] Cannot create hsr debugfs directory [ 393.433077][T14684] tipc: Enabled bearer , priority 0 [ 393.440049][T14684] syzkaller0: entered promiscuous mode [ 393.445761][T14684] syzkaller0: entered allmulticast mode [ 393.458049][T14684] tipc: Resetting bearer [ 393.467173][T14683] tipc: Resetting bearer [ 393.475657][T14683] tipc: Disabling bearer [ 393.518736][T14630] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 393.534760][T14630] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 393.553144][T14691] tipc: Enabling of bearer rejected, failed to enable media [ 393.570782][T14630] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 393.593934][T14630] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 393.651535][T14704] tipc: Enabled bearer , priority 0 [ 393.668190][T14704] syzkaller0: entered promiscuous mode [ 393.677800][T14704] syzkaller0: entered allmulticast mode [ 393.695450][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3621'. [ 393.714824][T14704] tipc: Resetting bearer [ 393.725056][T14630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.732519][T14703] tipc: Resetting bearer [ 393.740280][T14703] tipc: Disabling bearer [ 393.761682][T14630] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.789245][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.796511][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.817719][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.824894][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.874529][T14630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.980210][T14630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.188832][T14630] veth0_vlan: entered promiscuous mode [ 394.199678][T14630] veth1_vlan: entered promiscuous mode [ 394.220513][T14630] veth0_macvtap: entered promiscuous mode [ 394.232796][T14630] veth1_macvtap: entered promiscuous mode [ 394.247108][T14630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.260974][T14630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.290604][ T356] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.309160][ T356] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.328685][ T356] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.349390][ T356] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.363748][T14736] 9p: Could not find request transport: ftÅßA5š?8®ö™ÄÚ€9#s [ 394.546769][T14730] loop4: detected capacity change from 0 to 128 [ 394.575768][T14730] syz.4.3625: attempt to access beyond end of device [ 394.575768][T14730] loop4: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 394.869290][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3631'. [ 394.884675][T14759] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3631'. [ 394.896741][T14759] sctp: [Deprecated]: syz.1.3631 (pid 14759) Use of int in maxseg socket option. [ 394.896741][T14759] Use struct sctp_assoc_value instead [ 395.525987][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 395.526006][ T28] audit: type=1400 audit(2000000051.110:4113): avc: denied { ioctl } for pid=14770 comm="syz.8.3635" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=47613 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 395.584120][T14775] syzkaller0: entered promiscuous mode [ 395.589736][T14775] syzkaller0: entered allmulticast mode [ 395.799083][T14782] tipc: Started in network mode [ 395.804206][T14782] tipc: Node identity 06c42ab9d98d, cluster identity 4711 [ 395.811402][T14782] tipc: Enabled bearer , priority 0 [ 395.820607][T14785] syzkaller0: entered promiscuous mode [ 395.826286][T14785] syzkaller0: entered allmulticast mode [ 395.838725][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3637'. [ 395.849847][T14777] tipc: Resetting bearer [ 395.861433][T14776] tipc: Resetting bearer [ 395.874365][T14776] tipc: Disabling bearer [ 395.951891][T14794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3639'. [ 395.987709][T14794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3639'. [ 396.019039][T14794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3639'. [ 396.070573][T14794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3639'. [ 396.239329][T14804] loop8: detected capacity change from 0 to 1024 [ 396.290539][T14804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.569808][T14630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.917531][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3646'. [ 396.968951][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3646'. [ 397.004197][T14826] syzkaller0: entered promiscuous mode [ 397.023781][T14826] syzkaller0: entered allmulticast mode [ 397.106256][T14831] tipc: Enabled bearer , priority 0 [ 397.122840][T14831] syzkaller0: entered promiscuous mode [ 397.128413][T14831] syzkaller0: entered allmulticast mode [ 397.208177][T14833] tipc: Resetting bearer [ 397.220914][T14830] tipc: Resetting bearer [ 397.239756][T14830] tipc: Disabling bearer [ 397.673886][T14847] loop8: detected capacity change from 0 to 512 [ 397.691002][T14847] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 397.725736][T14847] EXT4-fs (loop8): 1 truncate cleaned up [ 397.731938][T14847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.765741][T14630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.085228][ T28] audit: type=1400 audit(2000000054.670:4114): avc: denied { bind } for pid=14876 comm="syz.1.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 399.147022][ T28] audit: type=1400 audit(2000000054.670:4115): avc: denied { name_bind } for pid=14876 comm="syz.1.3667" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 399.174828][T14879] __vm_enough_memory: pid: 14879, comm: syz.1.3668, bytes: 4503599627366400 not enough memory for the allocation [ 399.210951][ T28] audit: type=1400 audit(2000000054.670:4116): avc: denied { node_bind } for pid=14876 comm="syz.1.3667" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 399.284020][T14881] syzkaller0: entered promiscuous mode [ 399.296069][T14881] syzkaller0: entered allmulticast mode [ 399.566833][ T28] audit: type=1400 audit(2000000055.150:4117): avc: denied { ioctl } for pid=14886 comm="syz.4.3672" path="socket:[47862]" dev="sockfs" ino=47862 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 399.771682][T14892] FAULT_INJECTION: forcing a failure. [ 399.771682][T14892] name failslab, interval 1, probability 0, space 0, times 0 [ 399.784822][T14892] CPU: 1 UID: 0 PID: 14892 Comm: syz.8.3674 Tainted: G W syzkaller #0 PREEMPT(full) [ 399.784854][T14892] Tainted: [W]=WARN [ 399.784860][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 399.784913][T14892] Call Trace: [ 399.784919][T14892] [ 399.784926][T14892] __dump_stack+0x1d/0x30 [ 399.784952][T14892] dump_stack_lvl+0x95/0xd0 [ 399.784973][T14892] dump_stack+0x15/0x1b [ 399.784992][T14892] should_fail_ex+0x263/0x280 [ 399.785043][T14892] should_failslab+0x8c/0xb0 [ 399.785071][T14892] __kvmalloc_node_noprof+0x144/0x620 [ 399.785165][T14892] ? page_pool_create_percpu+0x223/0x640 [ 399.785217][T14892] page_pool_create_percpu+0x223/0x640 [ 399.785310][T14892] page_pool_create+0x1a/0x30 [ 399.785403][T14892] bpf_test_run_xdp_live+0x1a8/0x1360 [ 399.785427][T14892] ? avc_has_perm+0x101/0x190 [ 399.785455][T14892] ? selinux_file_open+0x2e6/0x330 [ 399.785494][T14892] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 399.785520][T14892] ? _copy_from_user+0x89/0xb0 [ 399.785551][T14892] ? bpf_test_init+0xf4/0x130 [ 399.785640][T14892] bpf_prog_test_run_xdp+0x57b/0xa10 [ 399.785768][T14892] ? __rcu_read_unlock+0x4e/0x70 [ 399.785807][T14892] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 399.785827][T14892] bpf_prog_test_run+0x204/0x340 [ 399.785877][T14892] __sys_bpf+0x52e/0x7e0 [ 399.786037][T14892] __x64_sys_bpf+0x41/0x50 [ 399.786066][T14892] x64_sys_call+0x10cb/0x3020 [ 399.786145][T14892] do_syscall_64+0x12c/0x370 [ 399.786239][T14892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.786261][T14892] RIP: 0033:0x7f0581c3bf79 [ 399.786278][T14892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.786297][T14892] RSP: 002b:00007f058068f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.786317][T14892] RAX: ffffffffffffffda RBX: 00007f0581eb5fa0 RCX: 00007f0581c3bf79 [ 399.786349][T14892] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 399.786362][T14892] RBP: 00007f058068f090 R08: 0000000000000000 R09: 0000000000000000 [ 399.786413][T14892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.786425][T14892] R13: 00007f0581eb6038 R14: 00007f0581eb5fa0 R15: 00007ffc002b0258 [ 399.786445][T14892] [ 399.786453][T14892] page_pool_create_percpu() gave up with errno -12 [ 400.061483][T14901] tipc: Enabled bearer , priority 0 [ 400.069479][T14901] syzkaller0: entered promiscuous mode [ 400.076495][T14901] syzkaller0: entered allmulticast mode [ 400.087782][T14901] tipc: Resetting bearer [ 400.095136][T14900] tipc: Resetting bearer [ 400.102198][T14900] tipc: Disabling bearer [ 400.818816][T14918] __nla_validate_parse: 2 callbacks suppressed [ 400.818852][T14918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3683'. [ 400.883159][T14922] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.890482][T14922] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.898726][T14922] bridge0: entered allmulticast mode [ 400.913688][T14922] bridge_slave_1: left allmulticast mode [ 400.919578][T14922] bridge_slave_1: left promiscuous mode [ 400.925714][T14922] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.933988][T14922] bridge_slave_0: left allmulticast mode [ 400.939882][T14922] bridge_slave_0: left promiscuous mode [ 400.946478][T14922] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.037949][T14924] netlink: 'syz.1.3685': attribute type 7 has an invalid length. [ 401.087014][T14924] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3685'. [ 401.096613][T14926] loop8: detected capacity change from 0 to 512 [ 401.106154][T14928] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.113482][T14926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.167964][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'. [ 401.185965][T14926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.205931][T14922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.220901][T14922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.237825][T14932] __vm_enough_memory: pid: 14932, comm: syz.7.3688, bytes: 4503599627366400 not enough memory for the allocation [ 401.305428][T14926] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.330994][T14926] net_ratelimit: 1557 callbacks suppressed [ 401.331017][T14926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 401.343363][T14926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 401.392536][T14630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.534271][T14944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 401.545072][ T28] audit: type=1400 audit(2000000057.130:4118): avc: denied { getopt } for pid=14945 comm="syz.1.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 401.569272][T14943] loop8: detected capacity change from 0 to 512 [ 401.579845][T14943] EXT4-fs: test_dummy_encryption option not supported [ 401.587866][T14943] netlink: 'syz.8.3690': attribute type 1 has an invalid length. [ 401.596864][T14943] netlink: 'syz.8.3690': attribute type 3 has an invalid length. [ 401.609486][T14943] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3690'. [ 401.727172][ T28] audit: type=1400 audit(2000000057.310:4119): avc: denied { nlmsg_read } for pid=14958 comm="syz.8.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 401.797240][ T28] audit: type=1400 audit(2000000057.380:4120): avc: denied { open } for pid=14964 comm="syz.8.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 401.818400][T14965] FAULT_INJECTION: forcing a failure. [ 401.818400][T14965] name failslab, interval 1, probability 0, space 0, times 0 [ 401.831778][T14965] CPU: 0 UID: 0 PID: 14965 Comm: syz.8.3699 Tainted: G W syzkaller #0 PREEMPT(full) [ 401.831966][T14965] Tainted: [W]=WARN [ 401.832052][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 401.832125][T14965] Call Trace: [ 401.832135][T14965] [ 401.832145][T14965] __dump_stack+0x1d/0x30 [ 401.832177][T14965] dump_stack_lvl+0x95/0xd0 [ 401.832206][T14965] dump_stack+0x15/0x1b [ 401.832253][T14965] should_fail_ex+0x263/0x280 [ 401.832289][T14965] should_failslab+0x8c/0xb0 [ 401.832421][T14965] __kvmalloc_node_noprof+0x144/0x620 [ 401.832464][T14965] ? do_semtimedop+0xef/0x220 [ 401.832499][T14965] do_semtimedop+0xef/0x220 [ 401.832559][T14965] __x64_sys_semtimedop+0xc8/0xf0 [ 401.832631][T14965] x64_sys_call+0x2e5e/0x3020 [ 401.832688][T14965] do_syscall_64+0x12c/0x370 [ 401.832724][ T28] audit: type=1400 audit(2000000057.380:4121): avc: denied { kernel } for pid=14964 comm="syz.8.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 401.832721][T14965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.832757][T14965] RIP: 0033:0x7f0581c3bf79 [ 401.832806][T14965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.832910][T14965] RSP: 002b:00007f058068f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 401.832981][T14965] RAX: ffffffffffffffda RBX: 00007f0581eb5fa0 RCX: 00007f0581c3bf79 [ 401.833033][T14965] RDX: 00000000000001f4 RSI: 00002000000001c0 RDI: 0000000000000000 [ 401.833075][T14965] RBP: 00007f058068f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.833182][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.833221][T14965] R13: 00007f0581eb6038 R14: 00007f0581eb5fa0 R15: 00007ffc002b0258 [ 401.833289][T14965] [ 402.017926][ T28] audit: type=1400 audit(2000000057.380:4122): avc: denied { tracepoint } for pid=14964 comm="syz.8.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 402.066204][T14977] xt_l2tp: invalid flags combination: c [ 402.165097][ T28] audit: type=1400 audit(2000000057.750:4123): avc: denied { write } for pid=14993 comm="syz.8.3703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 402.185352][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3703'. [ 402.196479][T14995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.209574][T14995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.345521][T15005] loop8: detected capacity change from 0 to 164 [ 402.548147][T15005] netlink: 'syz.8.3705': attribute type 4 has an invalid length. [ 402.616124][T15025] tipc: Enabled bearer , priority 0 [ 402.649103][T15024] tipc: Disabling bearer [ 402.891148][T15046] loop6: detected capacity change from 0 to 2048 [ 403.040991][ T28] audit: type=1326 audit(2000000058.620:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.6.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 403.068695][T15056] loop6: detected capacity change from 0 to 512 [ 403.086855][T15056] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 403.150407][ T28] audit: type=1326 audit(2000000058.650:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.6.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 403.153826][T15056] EXT4-fs error (device loop6): ext4_init_orphan_info:620: comm syz.6.3715: orphan file block 0: bad magic [ 403.232456][T15056] loop6: lost filesystem error report for type 5 error -117 [ 403.232736][T15056] EXT4-fs (loop6): Remounting filesystem read-only [ 403.264935][ T28] audit: type=1326 audit(2000000058.650:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.6.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 403.332583][T15056] EXT4-fs (loop6): mount failed [ 403.387768][ T28] audit: type=1326 audit(2000000058.650:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15055 comm="syz.6.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 403.445824][T15056] netem: change failed [ 403.558421][T15076] loop6: detected capacity change from 0 to 512 [ 403.609834][T15076] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 403.987599][T15100] tipc: Enabling of bearer rejected, failed to enable media [ 404.487590][T15123] xt_HMARK: proto mask must be zero with L3 mode [ 404.600204][T15132] tipc: Enabled bearer , priority 0 [ 404.658805][T15132] syzkaller0: entered promiscuous mode [ 404.684297][T15132] syzkaller0: entered allmulticast mode [ 404.693174][T15132] tipc: Resetting bearer [ 404.733447][T15131] tipc: Resetting bearer [ 404.753140][T15131] tipc: Disabling bearer [ 405.695747][T15161] loop6: detected capacity change from 0 to 736 [ 405.733742][T15162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=15162 comm=syz.1.3740 [ 406.256074][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.283419][T15179] bridge_slave_0: left allmulticast mode [ 406.296211][T15179] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.377134][T15189] loop4: detected capacity change from 0 to 764 [ 406.553325][ T28] kauditd_printk_skb: 625 callbacks suppressed [ 406.553342][ T28] audit: type=1326 audit(2000000318.140:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61a47c84e code=0x7ffc0000 [ 406.600278][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3753'. [ 406.600789][ T28] audit: type=1326 audit(2000000318.170:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61a47c84e code=0x7ffc0000 [ 406.636675][T15202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3753'. [ 406.657631][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3753'. [ 406.681134][T15202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3753'. [ 406.703356][ T28] audit: type=1326 audit(2000000318.170:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61a47c84e code=0x7ffc0000 [ 406.779940][ T28] audit: type=1326 audit(2000000318.180:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61a47c84e code=0x7ffc0000 [ 407.084313][ T28] audit: type=1326 audit(2000000318.180:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb61a47c84e code=0x7ffc0000 [ 407.201734][ T28] audit: type=1326 audit(2000000318.220:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 407.322481][ T28] audit: type=1326 audit(2000000318.250:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 407.613299][T15225] loop8: detected capacity change from 0 to 128 [ 408.241918][T15240] loop7: detected capacity change from 0 to 128 [ 408.270654][T15240] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 408.289935][T15215] xt_CT: No such helper "snmp" [ 408.302659][T15240] ext4 filesystem being mounted at /597/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 408.589316][ T28] audit: type=1400 audit(2000000320.160:4760): avc: denied { bind } for pid=15253 comm="syz.6.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 408.620099][T15256] macvlan0: entered allmulticast mode [ 408.636962][T15256] veth1_vlan: entered allmulticast mode [ 408.674171][T15259] netlink: 'syz.6.3773': attribute type 2 has an invalid length. [ 408.692495][T15259] netlink: 'syz.6.3773': attribute type 3 has an invalid length. [ 408.711322][T15259] netlink: 'syz.6.3773': attribute type 8 has an invalid length. [ 408.719579][T15259] netlink: 199720 bytes leftover after parsing attributes in process `syz.6.3773'. [ 408.828004][T15272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3772'. [ 408.839325][T15272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3772'. [ 408.891339][T15272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3772'. [ 408.939765][T15272] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3772'. [ 409.375382][T15279] loop8: detected capacity change from 0 to 256 [ 409.417564][T15279] vfat: Unknown parameter 'À' [ 409.737357][ T28] audit: type=1400 audit(2000000321.320:4761): avc: denied { create } for pid=15284 comm="syz.1.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 409.739732][ T5359] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.776516][ T28] audit: type=1400 audit(2000000321.350:4762): avc: denied { write } for pid=15284 comm="syz.1.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 409.854861][T15290] loop6: detected capacity change from 0 to 1024 [ 410.825863][T15324] netem: change failed [ 410.830926][T15324] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3793'. [ 410.858251][T15327] loop4: detected capacity change from 0 to 512 [ 410.912553][T15327] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 410.920654][T15327] EXT4-fs (loop4): orphan cleanup on readonly fs [ 410.949033][T15327] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.3795: corrupted inode contents [ 410.974445][T15327] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 410.975278][T15327] EXT4-fs (loop4): Remounting filesystem read-only [ 411.003220][T15327] EXT4-fs (loop4): 1 truncate cleaned up [ 411.009120][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 411.035399][ T36] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 411.076596][ T36] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 411.160966][T15327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 411.246922][T15348] vhci_hcd vhci_hcd.4: invalid port number 254 [ 411.253719][T13714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.262455][T15348] vhci_hcd vhci_hcd.4: default hub control req: 6006 v0206 i00fe l0 [ 411.530782][T15331] chnl_net:caif_netlink_parms(): no params data found [ 411.907258][T15331] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.925238][T15331] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.944627][T15331] bridge_slave_0: entered allmulticast mode [ 411.951428][T15331] bridge_slave_0: entered promiscuous mode [ 411.969110][T15331] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.982488][T15331] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.989749][T15331] bridge_slave_1: entered allmulticast mode [ 412.033028][T15331] bridge_slave_1: entered promiscuous mode [ 412.063181][T15331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.084143][T15331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.126083][T15331] team0: Port device team_slave_0 added [ 412.139630][T15331] team0: Port device team_slave_1 added [ 412.177661][T15331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.192971][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.233335][T15376] loop6: detected capacity change from 0 to 128 [ 412.246112][T15331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.274052][T15331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.289803][T15331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.352344][T15331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.417792][T15331] hsr_slave_0: entered promiscuous mode [ 412.445657][T15387] loop6: detected capacity change from 0 to 512 [ 412.463101][T15331] hsr_slave_1: entered promiscuous mode [ 412.469073][T15331] debugfs: 'hsr0' already exists in 'hsr' [ 412.570946][T15388] 9p: Could not find request transport: tcp*por0000000004e22 [ 412.802560][T15331] Cannot create hsr debugfs directory [ 413.152161][T15402] __vm_enough_memory: pid: 15402, comm: syz.8.3815, bytes: 4503599627366400 not enough memory for the allocation [ 413.363590][T15331] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.401331][T15412] loop6: detected capacity change from 0 to 128 [ 413.442886][T15412] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.468940][T15412] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 413.480727][T15418] program syz.4.3822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.491148][T15331] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.500496][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 413.500537][ T28] audit: type=1400 audit(2000000325.070:4830): avc: granted { setsecparam } for pid=15417 comm="syz.4.3822" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 413.517549][T15420] loop8: detected capacity change from 0 to 1024 [ 413.591318][T15331] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.626761][T15420] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.684873][T15331] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.705050][T13316] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.743907][T15432] tipc: Enabled bearer , priority 0 [ 413.808256][ T28] audit: type=1326 audit(2000000325.370:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 413.820779][T15432] syzkaller0: entered promiscuous mode [ 413.834250][T15437] FAULT_INJECTION: forcing a failure. [ 413.834250][T15437] name failslab, interval 1, probability 0, space 0, times 0 [ 413.837582][T15432] syzkaller0: entered allmulticast mode [ 413.883739][T15438] FAULT_INJECTION: forcing a failure. [ 413.883739][T15438] name failslab, interval 1, probability 0, space 0, times 0 [ 413.896520][T15438] CPU: 0 UID: 0 PID: 15438 Comm: syz.8.3821 Tainted: G W syzkaller #0 PREEMPT(full) [ 413.896552][T15438] Tainted: [W]=WARN [ 413.896617][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 413.896710][T15438] Call Trace: [ 413.896717][T15438] [ 413.896725][T15438] __dump_stack+0x1d/0x30 [ 413.896750][T15438] dump_stack_lvl+0x95/0xd0 [ 413.896832][T15438] dump_stack+0x15/0x1b [ 413.896853][T15438] should_fail_ex+0x263/0x280 [ 413.896888][T15438] should_failslab+0x8c/0xb0 [ 413.896938][T15438] kmem_cache_alloc_noprof+0x66/0x400 [ 413.896973][T15438] ? security_inode_alloc+0x37/0x100 [ 413.897023][T15438] security_inode_alloc+0x37/0x100 [ 413.897050][T15438] inode_init_always_gfp+0x4b7/0x500 [ 413.897153][T15438] ? __pfx_mqueue_fill_super+0x10/0x10 [ 413.897247][T15438] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 413.897282][T15438] alloc_inode+0x58/0x170 [ 413.897372][T15438] new_inode+0x1d/0xe0 [ 413.897407][T15438] ? __pfx_mqueue_fill_super+0x10/0x10 [ 413.897513][T15438] mqueue_fill_super+0x89/0x1d0 [ 413.897546][T15438] ? __pfx_mqueue_fill_super+0x10/0x10 [ 413.897626][T15438] get_tree_nodev+0x83/0x100 [ 413.897659][T15438] mqueue_get_tree+0x63/0x90 [ 413.897692][T15438] vfs_get_tree+0x57/0x1d0 [ 413.897725][T15438] fc_mount_longterm+0x18/0xb0 [ 413.897791][T15438] mq_init_ns+0x2db/0x370 [ 413.897815][T15438] copy_ipcs+0x26e/0x460 [ 413.897849][T15438] create_new_namespaces+0x12a/0x440 [ 413.897979][T15438] unshare_nsproxy_namespaces+0xe6/0x120 [ 413.898065][T15438] ksys_unshare+0x3cd/0x6d0 [ 413.898101][T15438] __x64_sys_unshare+0x1f/0x30 [ 413.898133][T15438] x64_sys_call+0x1cef/0x3020 [ 413.898163][T15438] do_syscall_64+0x12c/0x370 [ 413.898263][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.898304][T15438] RIP: 0033:0x7f0581c3bf79 [ 413.898377][T15438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.898397][T15438] RSP: 002b:00007f058064d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 413.898421][T15438] RAX: ffffffffffffffda RBX: 00007f0581eb6180 RCX: 00007f0581c3bf79 [ 413.898435][T15438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000200 [ 413.898447][T15438] RBP: 00007f058064d090 R08: 0000000000000000 R09: 0000000000000000 [ 413.898460][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.898475][T15438] R13: 00007f0581eb6218 R14: 00007f0581eb6180 R15: 00007ffc002b0258 [ 413.898520][T15438] [ 414.183192][T15437] CPU: 0 UID: 0 PID: 15437 Comm: syz.6.3826 Tainted: G W syzkaller #0 PREEMPT(full) [ 414.183245][T15437] Tainted: [W]=WARN [ 414.183251][T15437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 414.183263][T15437] Call Trace: [ 414.183270][T15437] [ 414.183326][T15437] __dump_stack+0x1d/0x30 [ 414.183352][T15437] dump_stack_lvl+0x95/0xd0 [ 414.183427][T15437] dump_stack+0x15/0x1b [ 414.183448][T15437] should_fail_ex+0x263/0x280 [ 414.183476][T15437] ? audit_log_d_path+0x8d/0x150 [ 414.183590][T15437] should_failslab+0x8c/0xb0 [ 414.183628][T15437] __kmalloc_cache_noprof+0x5f/0x400 [ 414.183665][T15437] audit_log_d_path+0x8d/0x150 [ 414.183707][T15437] audit_log_d_path_exe+0x42/0x70 [ 414.183749][T15437] audit_log_task+0x1e8/0x250 [ 414.183790][T15437] audit_seccomp+0x60/0x100 [ 414.183895][T15437] ? __seccomp_filter+0x8db/0x1350 [ 414.183927][T15437] __seccomp_filter+0x8ec/0x1350 [ 414.183952][T15437] ? kmem_cache_free+0xc8/0x370 [ 414.184013][T15437] ? putname+0x7c/0xc0 [ 414.184041][T15437] ? fdget+0xcb/0x110 [ 414.184078][T15437] __secure_computing+0x81/0x150 [ 414.184160][T15437] do_syscall_64+0xd3/0x370 [ 414.184204][T15437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.184249][T15437] RIP: 0033:0x7fb61a47c84e [ 414.184267][T15437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 414.184292][T15437] RSP: 002b:00007fb618f0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 414.184318][T15437] RAX: ffffffffffffffda RBX: 00007fb618f0f6c0 RCX: 00007fb61a47c84e [ 414.184349][T15437] RDX: 000000000000000f RSI: 00007fb618f0f0a0 RDI: 0000000000000005 [ 414.184378][T15437] RBP: 00007fb618f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 414.184406][T15437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.184422][T15437] R13: 00007fb61a736038 R14: 00007fb61a735fa0 R15: 00007ffc22cb4038 [ 414.184447][T15437] [ 414.390317][T15432] tipc: Resetting bearer [ 414.464132][ T28] audit: type=1326 audit(2000000325.370:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.487751][ T28] audit: type=1326 audit(2000000325.370:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.511633][ T28] audit: type=1326 audit(2000000325.370:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.516985][T14630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.535207][ T28] audit: type=1326 audit(2000000325.370:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.567854][T15430] tipc: Resetting bearer [ 414.573942][ T28] audit: type=1326 audit(2000000325.390:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.597878][ T28] audit: type=1326 audit(2000000325.390:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.625133][ T28] audit: type=1326 audit(2000000325.390:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.637328][T15430] tipc: Disabling bearer [ 414.649794][ T28] audit: type=1326 audit(2000000325.390:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15436 comm="syz.6.3826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb61a4bbf79 code=0x7ffc0000 [ 414.754253][T15452] loop8: detected capacity change from 0 to 512 [ 414.790972][T15331] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 414.801626][T15452] EXT4-fs warning (device loop8): ext4_enable_quotas:7233: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 414.801954][T15331] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 414.828188][T15452] EXT4-fs (loop8): mount failed [ 414.842651][T15331] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 414.865966][T15331] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 415.088433][T15331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.135499][T15331] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.176028][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.183191][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.251349][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.258507][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.474470][T15477] loop8: detected capacity change from 0 to 128 [ 415.497877][T15477] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 415.556302][T15477] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.580760][T15331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.652983][T15477] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.012239][T15331] veth0_vlan: entered promiscuous mode [ 416.049208][T15331] veth1_vlan: entered promiscuous mode [ 416.110788][T15331] veth0_macvtap: entered promiscuous mode [ 416.153276][T15331] veth1_macvtap: entered promiscuous mode [ 416.195602][T15331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.351197][T15331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.369401][T15526] __vm_enough_memory: pid: 15526, comm: syz.4.3846, bytes: 4503599627366400 not enough memory for the allocation [ 416.388659][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.397670][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.415379][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.448597][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.556282][T15535] loop8: detected capacity change from 0 to 128 [ 416.593950][T15535] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.646345][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.653565][T15540] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.675778][T15535] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 416.710960][T15540] bridge0: entered allmulticast mode [ 416.719220][T15540] bridge_slave_1: left allmulticast mode [ 416.725135][T15540] bridge_slave_1: left promiscuous mode [ 416.730912][T15540] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.738995][T15540] bridge_slave_0: left allmulticast mode [ 416.745020][T15540] bridge_slave_0: left promiscuous mode [ 416.750748][T15540] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.789822][T15544] netlink: 'syz.7.3851': attribute type 7 has an invalid length. [ 416.829143][T15544] __nla_validate_parse: 1 callbacks suppressed [ 416.829193][T15544] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3851'. [ 416.878441][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3851'. [ 416.901751][T15544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.924097][T15552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3854'. [ 416.943933][T15544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.992541][T14630] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.032765][T15558] FAULT_INJECTION: forcing a failure. [ 417.032765][T15558] name failslab, interval 1, probability 0, space 0, times 0 [ 417.045724][T15558] CPU: 1 UID: 0 PID: 15558 Comm: syz.8.3856 Tainted: G W syzkaller #0 PREEMPT(full) [ 417.045792][T15558] Tainted: [W]=WARN [ 417.045799][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 417.045812][T15558] Call Trace: [ 417.045818][T15558] [ 417.045826][T15558] __dump_stack+0x1d/0x30 [ 417.045866][T15558] dump_stack_lvl+0x95/0xd0 [ 417.045895][T15558] dump_stack+0x15/0x1b [ 417.045915][T15558] should_fail_ex+0x263/0x280 [ 417.045952][T15558] ? tcf_block_get_ext+0x61a/0xca0 [ 417.046011][T15558] should_failslab+0x8c/0xb0 [ 417.046093][T15558] __kmalloc_cache_noprof+0x5f/0x400 [ 417.046191][T15558] tcf_block_get_ext+0x61a/0xca0 [ 417.046226][T15558] ? netlink_unicast+0x5c0/0x690 [ 417.046258][T15558] ? ___sys_sendmsg+0x195/0x1e0 [ 417.046354][T15558] ? x64_sys_call+0x194c/0x3020 [ 417.046415][T15558] ? __pfx_drr_init_qdisc+0x10/0x10 [ 417.046472][T15558] tcf_block_get+0x67/0xa0 [ 417.046501][T15558] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 417.046540][T15558] drr_init_qdisc+0x2c/0xb0 [ 417.046593][T15558] qdisc_create+0x582/0x9d0 [ 417.046629][T15558] tc_modify_qdisc+0xffc/0x14f0 [ 417.046720][T15558] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 417.046787][T15558] rtnetlink_rcv_msg+0x6a7/0x720 [ 417.046813][T15558] ? try_to_wake_up+0x425/0x660 [ 417.046867][T15558] ? __list_del_entry_valid_or_report+0x65/0x130 [ 417.046900][T15558] netlink_rcv_skb+0x123/0x220 [ 417.046923][T15558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 417.047016][T15558] rtnetlink_rcv+0x1c/0x30 [ 417.047038][T15558] netlink_unicast+0x5c0/0x690 [ 417.047111][T15558] netlink_sendmsg+0x5c8/0x6f0 [ 417.047141][T15558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.047161][T15558] ____sys_sendmsg+0x5af/0x600 [ 417.047187][T15558] ___sys_sendmsg+0x195/0x1e0 [ 417.047285][T15558] __x64_sys_sendmsg+0xd4/0x160 [ 417.047312][T15558] x64_sys_call+0x194c/0x3020 [ 417.047342][T15558] do_syscall_64+0x12c/0x370 [ 417.047437][T15558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.047460][T15558] RIP: 0033:0x7f0581c3bf79 [ 417.047479][T15558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.047503][T15558] RSP: 002b:00007f058068f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.047565][T15558] RAX: ffffffffffffffda RBX: 00007f0581eb5fa0 RCX: 00007f0581c3bf79 [ 417.047580][T15558] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000009 [ 417.047592][T15558] RBP: 00007f058068f090 R08: 0000000000000000 R09: 0000000000000000 [ 417.047604][T15558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.047686][T15558] R13: 00007f0581eb6038 R14: 00007f0581eb5fa0 R15: 00007ffc002b0258 [ 417.047713][T15558] [ 417.731840][T15573] loop8: detected capacity change from 0 to 764 [ 417.881036][T15584] netlink: 'syz.6.3864': attribute type 29 has an invalid length. [ 417.917907][T15584] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.933675][T15586] tipc: Enabled bearer , priority 0 [ 418.071678][T15586] syzkaller0: entered promiscuous mode [ 418.106564][T15586] syzkaller0: entered allmulticast mode [ 418.121161][T15586] tipc: Resetting bearer [ 418.157338][T15585] tipc: Resetting bearer [ 418.231284][T15621] loop7: detected capacity change from 0 to 8 [ 418.243275][T15585] tipc: Disabling bearer [ 418.426152][T15628] loop8: detected capacity change from 0 to 512 [ 418.653101][T15649] netlink: 'syz.4.3890': attribute type 15 has an invalid length. [ 418.746518][T15655] loop8: detected capacity change from 0 to 128 [ 418.765333][T15657] tipc: Enabled bearer , priority 0 [ 418.825066][T15657] syzkaller0: entered promiscuous mode [ 418.830656][T15657] syzkaller0: entered allmulticast mode [ 418.847264][T15657] tipc: Resetting bearer [ 418.854474][T15655] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 418.875321][T15660] loop4: detected capacity change from 0 to 164 [ 418.888610][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 418.888626][ T28] audit: type=1400 audit(2000000330.470:4893): avc: denied { execute } for pid=15659 comm="syz.4.3895" name="cgroup" dev="tmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 418.915735][T15655] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.948828][T15656] tipc: Resetting bearer [ 418.955490][T15660] loop4: detected capacity change from 0 to 164 [ 418.985901][ T28] audit: type=1326 audit(2000000330.570:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.011048][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3893'. [ 419.021576][ T28] audit: type=1326 audit(2000000330.590:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.079289][T15656] tipc: Disabling bearer [ 419.094416][T15660] loop4: detected capacity change from 0 to 164 [ 419.100976][ T28] audit: type=1326 audit(2000000330.590:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.146684][ T28] audit: type=1326 audit(2000000330.590:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.166546][T15660] loop4: detected capacity change from 0 to 164 [ 419.176038][ T28] audit: type=1326 audit(2000000330.590:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.218537][T15660] loop4: detected capacity change from 0 to 164 [ 419.225494][T14630] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 419.238658][ T28] audit: type=1326 audit(2000000330.590:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.275223][ T28] audit: type=1326 audit(2000000330.590:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.275345][ T28] audit: type=1326 audit(2000000330.590:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.275372][ T28] audit: type=1326 audit(2000000330.590:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.8.3893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 419.312765][T15674] tipc: Enabled bearer , priority 0 [ 419.314233][T15660] loop4: detected capacity change from 0 to 164 [ 419.459528][T15674] syzkaller0: entered promiscuous mode [ 419.459620][T15674] syzkaller0: entered allmulticast mode [ 419.460242][T15674] tipc: Resetting bearer [ 419.464546][T15683] tmpfs: Bad value for 'mpol' [ 419.487370][T15675] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 419.487519][T15675] EXT4-fs (loop6): Remounting filesystem read-only [ 419.487589][T15675] EXT4-fs (loop6): 1 truncate cleaned up [ 419.488077][T15675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.573299][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.715308][T15673] tipc: Resetting bearer [ 419.731025][T15673] tipc: Disabling bearer [ 419.742627][T15691] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 419.781931][T15691] EXT4-fs (loop4): 1 truncate cleaned up [ 419.802861][T15691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.948120][T15700] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 419.964112][T15696] FAULT_INJECTION: forcing a failure. [ 419.964112][T15696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.987339][T15698] FAULT_INJECTION: forcing a failure. [ 419.987339][T15698] name failslab, interval 1, probability 0, space 0, times 0 [ 420.022833][T15696] CPU: 1 UID: 0 PID: 15696 Comm: syz.4.3902 Tainted: G W syzkaller #0 PREEMPT(full) [ 420.022873][T15696] Tainted: [W]=WARN [ 420.022882][T15696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 420.022950][T15696] Call Trace: [ 420.022958][T15696] [ 420.022968][T15696] __dump_stack+0x1d/0x30 [ 420.023002][T15696] dump_stack_lvl+0x95/0xd0 [ 420.023027][T15696] dump_stack+0x15/0x1b [ 420.023111][T15696] should_fail_ex+0x263/0x280 [ 420.023147][T15696] should_fail+0xb/0x20 [ 420.023180][T15696] should_fail_usercopy+0x1a/0x20 [ 420.023285][T15696] _copy_from_user+0x1c/0xb0 [ 420.023325][T15696] xsk_setsockopt+0x308/0x640 [ 420.023442][T15696] ? __pfx_xsk_setsockopt+0x10/0x10 [ 420.023554][T15696] __sys_setsockopt+0x184/0x200 [ 420.023575][T15696] __x64_sys_setsockopt+0x64/0x80 [ 420.023602][T15696] x64_sys_call+0x2327/0x3020 [ 420.023632][T15696] do_syscall_64+0x12c/0x370 [ 420.023676][T15696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.023751][T15696] RIP: 0033:0x7f012191bf79 [ 420.023769][T15696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.023794][T15696] RSP: 002b:00007f012034e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 420.023819][T15696] RAX: ffffffffffffffda RBX: 00007f0121b96090 RCX: 00007f012191bf79 [ 420.023836][T15696] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 420.023852][T15696] RBP: 00007f012034e090 R08: 0000000000000020 R09: 0000000000000000 [ 420.023927][T15696] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 420.023945][T15696] R13: 00007f0121b96128 R14: 00007f0121b96090 R15: 00007ffec72962d8 [ 420.023973][T15696] [ 420.072777][T15698] CPU: 0 UID: 0 PID: 15698 Comm: syz.6.3901 Tainted: G W syzkaller #0 PREEMPT(full) [ 420.072875][T15698] Tainted: [W]=WARN [ 420.072896][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 420.072955][T15698] Call Trace: [ 420.072976][T15698] [ 420.073005][T15698] __dump_stack+0x1d/0x30 [ 420.073084][T15698] dump_stack_lvl+0x95/0xd0 [ 420.073195][T15698] dump_stack+0x15/0x1b [ 420.073265][T15698] should_fail_ex+0x263/0x280 [ 420.073385][T15698] ? alloc_tty_struct+0x4c/0x3c0 [ 420.073460][T15698] should_failslab+0x8c/0xb0 [ 420.073549][T15698] __kmalloc_cache_noprof+0x5f/0x400 [ 420.073738][T15698] alloc_tty_struct+0x4c/0x3c0 [ 420.073862][T15698] ? __kmalloc_cache_noprof+0x18a/0x400 [ 420.073988][T15698] pty_unix98_install+0x105/0x390 [ 420.074063][T15698] tty_init_dev+0x7c/0x320 [ 420.074146][T15698] ptmx_open+0x10b/0x2b0 [ 420.074271][T15698] chrdev_open+0x2eb/0x3a0 [ 420.074383][T15698] do_dentry_open+0x4ca/0xa90 [ 420.074454][T15698] ? __pfx_chrdev_open+0x10/0x10 [ 420.074565][T15698] vfs_open+0x37/0x1e0 [ 420.074726][T15698] path_openat+0x1b70/0x2050 [ 420.074811][T15698] ? _parse_integer_limit+0x170/0x190 [ 420.074919][T15698] ? kstrtouint+0x76/0xc0 [ 420.075012][T15698] do_file_open+0x16c/0x290 [ 420.075231][T15698] do_sys_openat2+0x94/0x130 [ 420.075316][T15698] __x64_sys_openat+0xf2/0x120 [ 420.075422][T15698] x64_sys_call+0x1e39/0x3020 [ 420.075497][T15698] do_syscall_64+0x12c/0x370 [ 420.075682][T15698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.075804][T15698] RIP: 0033:0x7fb61a4bbf79 [ 420.075855][T15698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.075917][T15698] RSP: 002b:00007fb618ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.075974][T15698] RAX: ffffffffffffffda RBX: 00007fb61a736180 RCX: 00007fb61a4bbf79 [ 420.076072][T15698] RDX: 0000000000008040 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 420.076114][T15698] RBP: 00007fb618ecd090 R08: 0000000000000000 R09: 0000000000000000 [ 420.076155][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.076265][T15698] R13: 00007fb61a736218 R14: 00007fb61a736180 R15: 00007ffc22cb4038 [ 420.076325][T15698] [ 420.479050][T13714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.488261][T15700] EXT4-fs (loop7): 1 truncate cleaned up [ 420.494573][T15700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.581203][T15720] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3909'. [ 420.603832][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3910'. [ 420.612882][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3910'. [ 420.726935][T15331] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.297070][T15750] netlink: 'syz.6.3921': attribute type 12 has an invalid length. [ 421.373418][T15750] vhci_hcd vhci_hcd.2: invalid port number 96 [ 421.386385][T15750] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 421.440032][T15750] veth2: entered promiscuous mode [ 422.301258][T15789] FAULT_INJECTION: forcing a failure. [ 422.301258][T15789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.318988][T15789] CPU: 1 UID: 0 PID: 15789 Comm: syz.8.3937 Tainted: G W syzkaller #0 PREEMPT(full) [ 422.319022][T15789] Tainted: [W]=WARN [ 422.319029][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 422.319046][T15789] Call Trace: [ 422.319055][T15789] [ 422.319065][T15789] __dump_stack+0x1d/0x30 [ 422.319097][T15789] dump_stack_lvl+0x95/0xd0 [ 422.319127][T15789] dump_stack+0x15/0x1b [ 422.319224][T15789] should_fail_ex+0x263/0x280 [ 422.319262][T15789] should_fail+0xb/0x20 [ 422.319309][T15789] should_fail_usercopy+0x1a/0x20 [ 422.319347][T15789] _copy_to_user+0x20/0xa0 [ 422.319435][T15789] simple_read_from_buffer+0xb5/0x130 [ 422.319533][T15789] proc_fail_nth_read+0x10e/0x150 [ 422.319564][T15789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 422.319592][T15789] vfs_read+0x1ab/0x7f0 [ 422.319672][T15789] ? __rcu_read_unlock+0x4e/0x70 [ 422.319709][T15789] ? __fget_files+0x184/0x1c0 [ 422.319820][T15789] ? mutex_lock+0x57/0x90 [ 422.319853][T15789] ksys_read+0xdc/0x1a0 [ 422.319899][T15789] __x64_sys_read+0x40/0x50 [ 422.319996][T15789] x64_sys_call+0x2886/0x3020 [ 422.320118][T15789] do_syscall_64+0x12c/0x370 [ 422.320158][T15789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.320187][T15789] RIP: 0033:0x7f0581bfc84e [ 422.320252][T15789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 422.320275][T15789] RSP: 002b:00007f058068efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.320307][T15789] RAX: ffffffffffffffda RBX: 00007f058068f6c0 RCX: 00007f0581bfc84e [ 422.320359][T15789] RDX: 000000000000000f RSI: 00007f058068f0a0 RDI: 0000000000000004 [ 422.320373][T15789] RBP: 00007f058068f090 R08: 0000000000000000 R09: 0000000000000000 [ 422.320388][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.320402][T15789] R13: 00007f0581eb6038 R14: 00007f0581eb5fa0 R15: 00007ffc002b0258 [ 422.320424][T15789] [ 422.606620][T15793] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.158920][T15821] set_capacity_and_notify: 7 callbacks suppressed [ 423.158937][T15821] loop8: detected capacity change from 0 to 256 [ 423.230270][T15821] FAT-fs (loop8): Directory bread(block 64) failed [ 423.242977][T15821] FAT-fs (loop8): Directory bread(block 65) failed [ 423.256578][T15821] FAT-fs (loop8): Directory bread(block 66) failed [ 423.270266][T15821] FAT-fs (loop8): Directory bread(block 67) failed [ 423.283805][T15821] FAT-fs (loop8): Directory bread(block 68) failed [ 423.297624][T15821] FAT-fs (loop8): Directory bread(block 69) failed [ 423.311085][T15821] FAT-fs (loop8): Directory bread(block 70) failed [ 423.324871][T15821] FAT-fs (loop8): Directory bread(block 71) failed [ 423.338300][T15821] FAT-fs (loop8): Directory bread(block 72) failed [ 423.351769][T15821] FAT-fs (loop8): Directory bread(block 73) failed [ 423.407712][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.503655][T15830] vhci_hcd vhci_hcd.2: invalid port number 96 [ 423.521355][T15830] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 423.627045][T15840] syz_tun: entered allmulticast mode [ 423.706003][T15843] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3959'. [ 423.730027][T15843] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3959'. [ 423.959404][T15856] lo: entered allmulticast mode [ 423.969240][T15856] lo: left allmulticast mode [ 423.978554][T15856] FAULT_INJECTION: forcing a failure. [ 423.978554][T15856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.003448][T15856] CPU: 1 UID: 0 PID: 15856 Comm: syz.6.3963 Tainted: G W syzkaller #0 PREEMPT(full) [ 424.003494][T15856] Tainted: [W]=WARN [ 424.003503][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 424.003519][T15856] Call Trace: [ 424.003528][T15856] [ 424.003538][T15856] __dump_stack+0x1d/0x30 [ 424.003586][T15856] dump_stack_lvl+0x95/0xd0 [ 424.003661][T15856] dump_stack+0x15/0x1b [ 424.003688][T15856] should_fail_ex+0x263/0x280 [ 424.003724][T15856] should_fail+0xb/0x20 [ 424.003756][T15856] should_fail_usercopy+0x1a/0x20 [ 424.003804][T15856] _copy_to_user+0x20/0xa0 [ 424.003910][T15856] simple_read_from_buffer+0xb5/0x130 [ 424.003989][T15856] proc_fail_nth_read+0x10e/0x150 [ 424.004126][T15856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 424.004155][T15856] vfs_read+0x1ab/0x7f0 [ 424.004185][T15856] ? __rcu_read_unlock+0x4e/0x70 [ 424.004247][T15856] ? __fget_files+0x184/0x1c0 [ 424.004289][T15856] ? mutex_lock+0x57/0x90 [ 424.004323][T15856] ksys_read+0xdc/0x1a0 [ 424.004358][T15856] __x64_sys_read+0x40/0x50 [ 424.004419][T15856] x64_sys_call+0x2886/0x3020 [ 424.004452][T15856] do_syscall_64+0x12c/0x370 [ 424.004619][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.004646][T15856] RIP: 0033:0x7fb61a47c84e [ 424.004665][T15856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 424.004690][T15856] RSP: 002b:00007fb618f0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.004716][T15856] RAX: ffffffffffffffda RBX: 00007fb618f0f6c0 RCX: 00007fb61a47c84e [ 424.004735][T15856] RDX: 000000000000000f RSI: 00007fb618f0f0a0 RDI: 0000000000000005 [ 424.004826][T15856] RBP: 00007fb618f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 424.004843][T15856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.004859][T15856] R13: 00007fb61a736038 R14: 00007fb61a735fa0 R15: 00007ffc22cb4038 [ 424.004885][T15856] [ 424.401313][T15871] loop4: detected capacity change from 0 to 1024 [ 424.476493][T15871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.572736][T15887] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.3970: bad entry in directory: inode out of bounds - offset=92, inode=196624, rec_len=16, size=1024 fake=0 [ 424.672154][T13714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.759896][T15894] syzkaller0: entered promiscuous mode [ 424.765573][T15894] syzkaller0: entered allmulticast mode [ 424.807557][T15906] syzkaller0: entered promiscuous mode [ 424.813159][T15906] syzkaller0: entered allmulticast mode [ 424.893938][T15915] syzkaller0: entered promiscuous mode [ 424.899475][T15915] syzkaller0: entered allmulticast mode [ 425.087927][T15928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3981'. [ 425.124906][T15928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3981'. [ 425.152426][T15928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3981'. [ 425.181326][T15928] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3981'. [ 425.370523][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 425.370541][ T28] audit: type=1326 audit(2000000336.950:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.402865][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.410202][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.452018][T15945] loop7: detected capacity change from 0 to 128 [ 425.460003][T15943] bridge0: entered allmulticast mode [ 425.468098][T15941] bridge_slave_1: left allmulticast mode [ 425.475645][T15941] bridge_slave_1: left promiscuous mode [ 425.481357][T15941] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.533586][T15943] netlink: 'syz.8.3988': attribute type 7 has an invalid length. [ 425.554615][T15941] bridge_slave_0: left allmulticast mode [ 425.560381][T15941] bridge_slave_0: left promiscuous mode [ 425.572525][T15943] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3988'. [ 425.592204][T15941] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.624825][ T28] audit: type=1326 audit(2000000336.950:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.650182][T15945] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.662658][ T28] audit: type=1326 audit(2000000336.950:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.673213][T15945] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 425.691239][ T28] audit: type=1326 audit(2000000336.950:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.698694][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3988'. [ 425.719723][ T28] audit: type=1326 audit(2000000336.950:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.751625][ T28] audit: type=1326 audit(2000000336.950:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.775003][ T28] audit: type=1326 audit(2000000336.950:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.817696][ T28] audit: type=1326 audit(2000000336.950:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.841994][ T28] audit: type=1326 audit(2000000336.950:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.866583][ T28] audit: type=1326 audit(2000000336.950:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15937 comm="syz.1.3989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68685cbf79 code=0x50000 [ 425.917744][T15955] FAULT_INJECTION: forcing a failure. [ 425.917744][T15955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.938779][T15939] loop4: detected capacity change from 0 to 128 [ 425.956102][T15955] CPU: 1 UID: 0 PID: 15955 Comm: syz.6.3991 Tainted: G W syzkaller #0 PREEMPT(full) [ 425.956141][T15955] Tainted: [W]=WARN [ 425.956149][T15955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 425.956208][T15955] Call Trace: [ 425.956215][T15955] [ 425.956222][T15955] __dump_stack+0x1d/0x30 [ 425.956247][T15955] dump_stack_lvl+0x95/0xd0 [ 425.956303][T15955] dump_stack+0x15/0x1b [ 425.956325][T15955] should_fail_ex+0x263/0x280 [ 425.956386][T15955] should_fail+0xb/0x20 [ 425.956420][T15955] should_fail_usercopy+0x1a/0x20 [ 425.956462][T15955] _copy_from_user+0x1c/0xb0 [ 425.956505][T15955] do_sock_getsockopt+0xf1/0x210 [ 425.956572][T15955] __x64_sys_getsockopt+0x11d/0x1a0 [ 425.956601][T15955] x64_sys_call+0x2dcf/0x3020 [ 425.956629][T15955] do_syscall_64+0x12c/0x370 [ 425.956740][T15955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.956763][T15955] RIP: 0033:0x7fb61a4bbf79 [ 425.956778][T15955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.956797][T15955] RSP: 002b:00007fb618f0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 425.956817][T15955] RAX: ffffffffffffffda RBX: 00007fb61a735fa0 RCX: 00007fb61a4bbf79 [ 425.956847][T15955] RDX: 0000000000000004 RSI: 00000000000000ff RDI: 0000000000000003 [ 425.956861][T15955] RBP: 00007fb618f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 425.956875][T15955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.956888][T15955] R13: 00007fb61a736038 R14: 00007fb61a735fa0 R15: 00007ffc22cb4038 [ 425.956947][T15955] [ 426.152094][T15939] syz.4.3984: attempt to access beyond end of device [ 426.152094][T15939] loop4: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 426.214093][T15331] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.237904][T15962] loop6: detected capacity change from 0 to 1024 [ 426.256156][T15964] lo: entered allmulticast mode [ 426.269570][T15962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.304297][T15962] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.3993: corrupted xattr block 113: invalid header [ 426.322163][T15962] EXT4-fs (loop6): Remounting filesystem read-only [ 426.418161][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.599098][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4000'. [ 426.705785][T15978] loop6: detected capacity change from 0 to 512 [ 426.789111][T15978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.813976][T15978] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.863032][T15978] netlink: 'syz.6.3998': attribute type 8 has an invalid length. [ 427.021264][T15989] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4001'. [ 427.042863][T15991] loop8: detected capacity change from 0 to 128 [ 427.082239][T15991] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.102568][T15991] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 427.338589][T14630] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.517049][T15997] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.530598][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.573667][T15997] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.618028][T15997] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.656835][T15997] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.743208][ T30] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.751476][ T30] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.776019][ T30] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.792904][ T30] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.113558][T16012] loop6: detected capacity change from 0 to 512 [ 428.294549][T16012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.319605][T16012] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.344538][T16017] tipc: Invalid UDP bearer configuration [ 428.344552][T16017] tipc: Enabling of bearer rejected, failed to enable media [ 428.613758][T16026] loop7: detected capacity change from 0 to 256 [ 428.671608][T16026] FAULT_INJECTION: forcing a failure. [ 428.671608][T16026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.717972][T16026] CPU: 0 UID: 0 PID: 16026 Comm: syz.7.4014 Tainted: G W syzkaller #0 PREEMPT(full) [ 428.718088][T16026] Tainted: [W]=WARN [ 428.718094][T16026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 428.718170][T16026] Call Trace: [ 428.718176][T16026] [ 428.718184][T16026] __dump_stack+0x1d/0x30 [ 428.718211][T16026] dump_stack_lvl+0x95/0xd0 [ 428.718232][T16026] dump_stack+0x15/0x1b [ 428.718252][T16026] should_fail_ex+0x263/0x280 [ 428.718341][T16026] should_fail+0xb/0x20 [ 428.718374][T16026] should_fail_usercopy+0x1a/0x20 [ 428.718405][T16026] _copy_to_user+0x20/0xa0 [ 428.718489][T16026] fat_generic_ioctl+0x4e4/0x800 [ 428.718532][T16026] ? do_vfs_ioctl+0x84f/0xe70 [ 428.718569][T16026] ? __pfx_fat_dir_ioctl+0x10/0x10 [ 428.718668][T16026] fat_dir_ioctl+0xc4/0x1f0 [ 428.718699][T16026] ? __fget_files+0x184/0x1c0 [ 428.718795][T16026] ? mutex_lock+0x57/0x90 [ 428.718822][T16026] ? __pfx_fat_dir_ioctl+0x10/0x10 [ 428.718903][T16026] __se_sys_ioctl+0xce/0x140 [ 428.718937][T16026] __x64_sys_ioctl+0x43/0x50 [ 428.718970][T16026] x64_sys_call+0x1563/0x3020 [ 428.719070][T16026] do_syscall_64+0x12c/0x370 [ 428.719113][T16026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.719141][T16026] RIP: 0033:0x7fbe2a15bf79 [ 428.719186][T16026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.719204][T16026] RSP: 002b:00007fbe28baf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.719223][T16026] RAX: ffffffffffffffda RBX: 00007fbe2a3d5fa0 RCX: 00007fbe2a15bf79 [ 428.719271][T16026] RDX: 0000200000000040 RSI: 00000000c0185879 RDI: 0000000000000004 [ 428.719288][T16026] RBP: 00007fbe28baf090 R08: 0000000000000000 R09: 0000000000000000 [ 428.719303][T16026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.719315][T16026] R13: 00007fbe2a3d6038 R14: 00007fbe2a3d5fa0 R15: 00007fff8b763478 [ 428.719340][T16026] [ 428.719582][T16022] wireguard0: entered promiscuous mode [ 428.927752][T16022] wireguard0: entered allmulticast mode [ 429.074185][T16032] loop7: detected capacity change from 0 to 128 [ 429.101552][T16032] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 429.139282][T16032] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.243060][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.252754][T16032] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.383667][T16043] __nla_validate_parse: 5 callbacks suppressed [ 429.383689][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4020'. [ 429.490232][T16043] loop7: detected capacity change from 0 to 512 [ 429.518668][T16049] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 429.528731][T16049] SELinux: failed to load policy [ 429.615067][T16043] FAT-fs (loop7): Directory bread(block 199916) failed [ 429.623923][T16043] FAT-fs (loop7): Directory bread(block 199917) failed [ 429.638155][T16043] FAT-fs (loop7): Directory bread(block 199918) failed [ 429.654486][T16043] FAT-fs (loop7): Directory bread(block 199919) failed [ 429.676604][T16043] FAT-fs (loop7): Directory bread(block 199920) failed [ 429.707193][T16043] FAT-fs (loop7): Directory bread(block 199921) failed [ 429.736673][T16043] FAT-fs (loop7): Directory bread(block 199922) failed [ 429.758081][T16043] FAT-fs (loop7): Directory bread(block 199923) failed [ 429.848530][T16043] FAT-fs (loop7): FAT read failed (blocknr 128) [ 429.984166][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4023'. [ 430.068653][T16058] loop6: detected capacity change from 0 to 128 [ 430.084396][T16059] loop7: detected capacity change from 0 to 512 [ 430.092013][T16059] EXT4-fs: Ignoring removed oldalloc option [ 430.102729][T16058] vfat: Unknown parameter '' [ 430.148644][T16059] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.4024: Parent and EA inode have the same ino 15 [ 430.175279][T16059] loop7: lost filesystem error report for type 5 error -117 [ 430.182481][T16059] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 430.222402][T16059] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.4024: Parent and EA inode have the same ino 15 [ 430.235040][T16065] loop4: detected capacity change from 0 to 2048 [ 430.242111][T16059] loop7: lost filesystem error report for type 5 error -117 [ 430.242366][T16059] EXT4-fs (loop7): 1 orphan inode deleted [ 430.247780][T16067] bond1 (unregistering): Released all slaves [ 430.250754][T16059] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.305819][T16059] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.306322][T16065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.381758][ T28] kauditd_printk_skb: 5593 callbacks suppressed [ 430.381791][ T28] audit: type=1400 audit(2000000341.960:10552): avc: denied { module_request } for pid=16075 comm="syz.6.4031" kmod="net-pf-10-proto-257-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 430.476049][ T28] audit: type=1400 audit(2000000342.050:10553): avc: denied { create } for pid=16082 comm="syz.7.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 430.583997][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'. [ 430.604141][ T28] audit: type=1400 audit(2000000342.110:10554): avc: denied { tracepoint } for pid=16076 comm="syz.1.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 430.631664][T13714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.641719][ T28] audit: type=1400 audit(2000000342.110:10555): avc: denied { write } for pid=16076 comm="syz.1.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.661781][ T28] audit: type=1400 audit(2000000342.110:10556): avc: denied { connect } for pid=16076 comm="syz.1.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.681920][ T28] audit: type=1400 audit(2000000342.110:10557): avc: denied { name_connect } for pid=16076 comm="syz.1.4032" dest=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 430.707672][ T28] audit: type=1400 audit(2000000342.110:10558): avc: denied { setopt } for pid=16076 comm="syz.1.4032" laddr=172.20.20.10 lport=50003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.741669][ T28] audit: type=1400 audit(2000000342.120:10559): avc: denied { create } for pid=16086 comm="syz.8.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 430.808422][T16102] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4037'. [ 430.825492][ T28] audit: type=1400 audit(2000000342.130:10560): avc: denied { write } for pid=16086 comm="syz.8.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 430.867010][ T28] audit: type=1400 audit(2000000342.140:10561): avc: denied { sys_module } for pid=16076 comm="syz.1.4032" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 431.237920][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4050'. [ 431.490608][T16155] 9p: Could not find request transport: tcp*por0000000004e22 [ 431.523651][T16162] loop7: detected capacity change from 0 to 512 [ 431.530495][T16162] EXT4-fs: Ignoring removed nobh option [ 431.537291][T16162] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 431.552725][T16162] EXT4-fs (loop7): 1 truncate cleaned up [ 431.570615][T16162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.649942][T16167] loop4: detected capacity change from 0 to 256 [ 431.666191][T15331] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.873850][T16179] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4061'. [ 431.906368][T16179] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4061'. [ 431.922807][T16179] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 431.979239][T16184] loop4: detected capacity change from 0 to 164 [ 432.033458][T16184] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4063'. [ 432.043249][T16184] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4063'. [ 432.055309][T16184] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 432.065949][T16184] bridge1: entered promiscuous mode [ 432.071179][T16184] bridge1: entered allmulticast mode [ 432.169526][T16195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4063'. [ 432.179274][T16195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16195 comm=syz.4.4063 [ 432.203538][T16193] loop7: detected capacity change from 0 to 128 [ 432.238259][T16193] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.265593][T16193] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.491505][T15331] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.656577][T16216] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.680463][T16216] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 432.876622][T16216] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 432.910724][T16216] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a000e018, mo2=0002] [ 432.933048][T16216] System zones: 0-1, 15-15, 18-18, 34-34 [ 432.943528][T16225] team_slave_0: entered promiscuous mode [ 432.949350][T16225] team_slave_1: entered promiscuous mode [ 432.955523][T16216] EXT4-fs (loop7): orphan cleanup on readonly fs [ 432.961961][T16216] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #4: comm syz.7.4072: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 432.991757][T16225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 433.013622][T16216] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 433.013817][T16216] EXT4-fs error (device loop7): ext4_quota_enable:7192: comm syz.7.4072: Bad quota inode: 4, type: 1 [ 433.043088][T16216] loop7: lost filesystem error report for type 5 error -117 [ 433.044115][T16216] EXT4-fs warning (device loop7): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 433.078093][T16216] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 433.100236][T16216] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.121628][T16216] EXT4-fs error (device loop7): ext4_get_link:106: inode #16: comm syz.7.4072: bad symlink. [ 433.189191][T16231] netlink: zone id is out of range [ 433.196583][T16231] netlink: zone id is out of range [ 433.205982][T16231] netlink: zone id is out of range [ 433.214767][T16231] netlink: zone id is out of range [ 433.224283][T16231] netlink: zone id is out of range [ 433.229454][T15331] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.233378][T16231] netlink: zone id is out of range [ 433.251770][T16231] netlink: zone id is out of range [ 433.270708][T16231] netlink: zone id is out of range [ 433.289445][T16231] netlink: zone id is out of range [ 433.334470][T16241] EXT4-fs: Ignoring removed bh option [ 433.350401][T16241] EXT4-fs: Mount option(s) incompatible with ext2 [ 433.783921][T16261] 9p: Could not find request transport: tcp*por0000000004e22 [ 434.252701][T16274] FAULT_INJECTION: forcing a failure. [ 434.252701][T16274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.331296][T16274] CPU: 0 UID: 0 PID: 16274 Comm: syz.7.4091 Tainted: G W syzkaller #0 PREEMPT(full) [ 434.331377][T16274] Tainted: [W]=WARN [ 434.331428][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 434.331443][T16274] Call Trace: [ 434.331449][T16274] [ 434.331456][T16274] __dump_stack+0x1d/0x30 [ 434.331482][T16274] dump_stack_lvl+0x95/0xd0 [ 434.331503][T16274] dump_stack+0x15/0x1b [ 434.331529][T16274] should_fail_ex+0x263/0x280 [ 434.331574][T16274] should_fail+0xb/0x20 [ 434.331629][T16274] should_fail_usercopy+0x1a/0x20 [ 434.331665][T16274] _copy_to_user+0x20/0xa0 [ 434.331716][T16274] simple_read_from_buffer+0xb5/0x130 [ 434.331771][T16274] proc_fail_nth_read+0x10e/0x150 [ 434.331801][T16274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.331828][T16274] vfs_read+0x1ab/0x7f0 [ 434.331873][T16274] ? __rcu_read_unlock+0x4e/0x70 [ 434.331912][T16274] ? __fget_files+0x184/0x1c0 [ 434.331952][T16274] ? mutex_lock+0x57/0x90 [ 434.331991][T16274] ksys_read+0xdc/0x1a0 [ 434.332042][T16274] __x64_sys_read+0x40/0x50 [ 434.332150][T16274] x64_sys_call+0x2886/0x3020 [ 434.332210][T16274] do_syscall_64+0x12c/0x370 [ 434.332254][T16274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.332317][T16274] RIP: 0033:0x7fbe2a11c84e [ 434.332335][T16274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.332357][T16274] RSP: 002b:00007fbe28baefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.332388][T16274] RAX: ffffffffffffffda RBX: 00007fbe28baf6c0 RCX: 00007fbe2a11c84e [ 434.332407][T16274] RDX: 000000000000000f RSI: 00007fbe28baf0a0 RDI: 0000000000000007 [ 434.332424][T16274] RBP: 00007fbe28baf090 R08: 0000000000000000 R09: 0000000000000000 [ 434.332442][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.332457][T16274] R13: 00007fbe2a3d6038 R14: 00007fbe2a3d5fa0 R15: 00007fff8b763478 [ 434.332480][T16274] [ 434.544592][T16281] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 434.660506][T16283] set_capacity_and_notify: 2 callbacks suppressed [ 434.660525][T16283] loop8: detected capacity change from 0 to 512 [ 434.764219][T16283] program syz.8.4095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.908521][T16289] loop7: detected capacity change from 0 to 1024 [ 434.962319][T16293] macvlan0: entered allmulticast mode [ 434.994693][T16293] veth1_vlan: entered allmulticast mode [ 435.001677][T16296] veth1_vlan: left allmulticast mode [ 435.088158][T16296] macvlan0 (unregistering): left allmulticast mode [ 435.259506][T16289] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.444922][ T28] kauditd_printk_skb: 276 callbacks suppressed [ 435.444942][ T28] audit: type=1400 audit(2000000347.030:10836): avc: denied { write } for pid=16285 comm="syz.7.4096" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.511629][T16310] syzkaller0: entered promiscuous mode [ 435.517236][T16310] syzkaller0: entered allmulticast mode [ 435.528165][T16287] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: comm syz.7.4096: inode #222232620: comm syz.7.4096: iget: illegal inode # [ 435.551091][ T28] audit: type=1400 audit(2000000347.030:10837): avc: denied { setattr } for pid=16285 comm="syz.7.4096" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.581168][T16287] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.4096: error while reading EA inode 222232620 err=-117 [ 435.772628][T16288] netlink: 'syz.7.4096': attribute type 20 has an invalid length. [ 436.134504][T16327] loop6: detected capacity change from 0 to 512 [ 436.299988][T16327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.346143][T16327] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.412671][T15331] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.447239][ T28] audit: type=1400 audit(2000000348.030:10838): avc: denied { add_name } for pid=16326 comm="syz.6.4108" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.485927][ T28] audit: type=1400 audit(2000000348.030:10839): avc: denied { create } for pid=16326 comm="syz.6.4108" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 436.527728][T16342] x_tables: duplicate underflow at hook 4 [ 436.546232][ T28] audit: type=1400 audit(2000000348.050:10840): avc: denied { open } for pid=16326 comm="syz.6.4108" path="/206/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 436.662205][ T28] audit: type=1400 audit(2000000348.090:10841): avc: denied { read } for pid=16326 comm="syz.6.4108" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 436.705824][T13316] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.727677][ T28] audit: type=1400 audit(2000000348.150:10842): avc: denied { create } for pid=16326 comm="syz.6.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.794060][T16347] wireguard0: entered promiscuous mode [ 436.811014][ T28] audit: type=1400 audit(2000000348.160:10843): avc: denied { listen } for pid=16326 comm="syz.6.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 436.830790][ T28] audit: type=1400 audit(2000000348.170:10844): avc: denied { ioctl } for pid=16326 comm="syz.6.4108" path="socket:[52220]" dev="sockfs" ino=52220 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 436.841803][T16351] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 436.866051][T16347] wireguard0: entered allmulticast mode [ 436.899102][ T28] audit: type=1400 audit(2000000348.480:10845): avc: denied { nlmsg_write } for pid=16355 comm="syz.8.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 436.950875][T16353] netlink: 'syz.7.4116': attribute type 12 has an invalid length. [ 436.967693][T16362] macvlan0: entered allmulticast mode [ 436.973578][T16362] veth1_vlan: entered allmulticast mode [ 436.980570][T16362] veth1_vlan: left allmulticast mode [ 436.986320][T16353] vhci_hcd vhci_hcd.2: invalid port number 96 [ 436.995221][T16353] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 437.004584][T16362] macvlan0 (unregistering): left allmulticast mode [ 437.029305][T16313] syz.4.4103 (16313) used greatest stack depth: 6872 bytes left [ 437.107524][T16369] loop4: detected capacity change from 0 to 512 [ 437.121573][T16369] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 437.139642][T16369] EXT4-fs (loop4): 1 truncate cleaned up [ 437.170076][T16369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.581990][T16388] __nla_validate_parse: 3 callbacks suppressed [ 437.582052][T16388] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4129'. [ 437.886147][T16396] loop8: detected capacity change from 0 to 1764 [ 438.236612][T16382] Process accounting resumed [ 438.671066][T13714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.895021][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4139'. [ 438.917344][T16420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4139'. [ 438.927000][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4139'. [ 438.936474][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4139'. [ 439.149358][T16424] batadv_slave_1: entered promiscuous mode [ 439.668663][T16446] loop8: detected capacity change from 0 to 8192 [ 439.677080][T16447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.684347][T16447] IPv6: NLM_F_CREATE should be set when creating new route [ 439.691593][T16447] IPv6: NLM_F_CREATE should be set when creating new route [ 439.713376][T16444] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4148'. [ 439.726367][T16449] bridge0: entered allmulticast mode [ 439.735161][ T3303] loop8: p4 < > [ 439.738024][T16451] IPv6: sit1: Disabled Multicast RS [ 439.745004][T16446] loop8: p4 < > [ 439.766037][T16449] bridge_slave_1: left allmulticast mode [ 439.772097][T16449] bridge_slave_1: left promiscuous mode [ 439.808429][T16449] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.823545][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 439.847746][T16459] netlink: 'syz.4.4152': attribute type 7 has an invalid length. [ 439.859422][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 439.862520][T16459] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4152'. [ 439.882719][T16447] loop6: detected capacity change from 0 to 128 [ 439.901237][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4152'. [ 440.033205][T16444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.067769][T16462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.082756][T16462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.419914][T16483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16483 comm=syz.1.4159 [ 440.441851][T16493] netlink: 'syz.4.4163': attribute type 8 has an invalid length. [ 440.453337][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 440.453350][ T28] audit: type=1326 audit(2000000352.040:10909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16491 comm="syz.8.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 440.457709][T16493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4163'. [ 440.460131][ T28] audit: type=1326 audit(2000000352.040:10910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16491 comm="syz.8.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 440.599748][ T28] audit: type=1400 audit(2000000352.100:10911): avc: denied { bind } for pid=16491 comm="syz.8.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 440.630928][T16500] loop4: detected capacity change from 0 to 128 [ 440.690012][T16500] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 440.725004][T16500] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.756495][T16500] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4165'. [ 440.832604][ T28] audit: type=1326 audit(2000000352.230:10912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.8.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 440.869067][T13714] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.891640][ T28] audit: type=1326 audit(2000000352.230:10913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.8.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 440.998683][ T28] audit: type=1326 audit(2000000352.230:10914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.8.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 441.064070][T16426] batadv_slave_1: left promiscuous mode [ 441.073430][ T28] audit: type=1326 audit(2000000352.230:10915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.8.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 441.204746][ T28] audit: type=1326 audit(2000000352.230:10916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.8.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 441.231659][ T28] audit: type=1326 audit(2000000352.230:10917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.8.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 441.264024][ T28] audit: type=1326 audit(2000000352.230:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16501 comm="syz.8.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0581c3bf79 code=0x7ffc0000 [ 441.464602][T16541] loop6: detected capacity change from 0 to 164 [ 441.572143][T16541] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 442.310670][T16571] bond1: option ad_select: invalid value (4) [ 442.334926][T16571] bond1 (unregistering): Released all slaves [ 442.445907][T16578] loop7: detected capacity change from 0 to 128 [ 442.462047][T16578] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.481707][T16578] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 442.532952][T15331] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 442.554399][T16583] netlink: 'syz.1.4190': attribute type 7 has an invalid length. [ 442.866037][T16594] syzkaller0: entered promiscuous mode [ 442.877951][T16594] syzkaller0: entered allmulticast mode [ 443.118208][T16622] loop7: detected capacity change from 0 to 128 [ 443.369594][T16631] netlink: 'syz.7.4207': attribute type 7 has an invalid length. [ 443.381236][T16631] __nla_validate_parse: 2 callbacks suppressed [ 443.381256][T16631] netlink: 140 bytes leftover after parsing attributes in process `syz.7.4207'. [ 443.418750][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4207'. [ 443.600436][T16642] syzkaller0: entered promiscuous mode [ 443.600605][T16644] loop7: detected capacity change from 0 to 4096 [ 443.607832][T16642] syzkaller0: entered allmulticast mode [ 443.650216][T16644] EXT4-fs warning (device loop7): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 443.682690][T16644] EXT4-fs (loop7): mount failed [ 443.917515][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 443.938004][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 443.958277][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 444.010438][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 444.039707][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 444.070362][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 444.166906][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 444.198715][T16659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4215'. [ 444.610437][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.617716][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.625532][T16678] bridge0: entered allmulticast mode [ 444.635370][T16678] bridge_slave_1: left allmulticast mode [ 444.641323][T16678] bridge_slave_1: left promiscuous mode [ 444.649377][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.658138][T16678] bridge_slave_0: left allmulticast mode [ 444.677894][T16678] bridge_slave_0: left promiscuous mode [ 444.684991][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.704123][T16679] netlink: 'syz.6.4220': attribute type 7 has an invalid length. [ 444.772839][T16682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.808534][T16682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.936366][T16689] loop7: detected capacity change from 0 to 1024 [ 444.962743][T16689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.971623][T16685] syzkaller0: entered promiscuous mode [ 444.978558][T16685] syzkaller0: entered allmulticast mode [ 445.000039][T16689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.048406][T15331] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.085037][T16699] loop4: detected capacity change from 0 to 512 [ 445.128636][T16699] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4227: inode has both inline data and extents flags [ 445.170436][T16704] FAULT_INJECTION: forcing a failure. [ 445.170436][T16704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.200810][T16699] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.201140][T16699] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4227: couldn't read orphan inode 15 (err -117) [ 445.224670][T16699] loop4: lost filesystem error report for type 5 error -117 [ 445.226079][T16699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.247930][T16704] CPU: 1 UID: 0 PID: 16704 Comm: syz.7.4226 Tainted: G W syzkaller #0 PREEMPT(full) [ 445.247970][T16704] Tainted: [W]=WARN [ 445.248031][T16704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 445.248098][T16704] Call Trace: [ 445.248106][T16704] [ 445.248115][T16704] __dump_stack+0x1d/0x30 [ 445.248148][T16704] dump_stack_lvl+0x95/0xd0 [ 445.248209][T16704] dump_stack+0x15/0x1b [ 445.248236][T16704] should_fail_ex+0x263/0x280 [ 445.248335][T16704] should_fail+0xb/0x20 [ 445.248368][T16704] should_fail_usercopy+0x1a/0x20 [ 445.248468][T16704] _copy_from_user+0x1c/0xb0 [ 445.248513][T16704] ___sys_sendmsg+0xc1/0x1e0 [ 445.248556][T16704] __x64_sys_sendmsg+0xd4/0x160 [ 445.248622][T16704] x64_sys_call+0x194c/0x3020 [ 445.248707][T16704] do_syscall_64+0x12c/0x370 [ 445.248754][T16704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.248796][T16704] RIP: 0033:0x7fbe2a15bf79 [ 445.248816][T16704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.248839][T16704] RSP: 002b:00007fbe28baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.248865][T16704] RAX: ffffffffffffffda RBX: 00007fbe2a3d5fa0 RCX: 00007fbe2a15bf79 [ 445.248884][T16704] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 445.248953][T16704] RBP: 00007fbe28baf090 R08: 0000000000000000 R09: 0000000000000000 [ 445.248969][T16704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.248985][T16704] R13: 00007fbe2a3d6038 R14: 00007fbe2a3d5fa0 R15: 00007fff8b763478 [ 445.249009][T16704] [ 445.577215][ T3302] ================================================================== [ 445.585359][ T3302] BUG: KCSAN: data-race in generic_fillattr / shmem_symlink [ 445.592740][ T3302] [ 445.595124][ T3302] write to 0xffff888103939df0 of 8 bytes by task 3303 on cpu 0: [ 445.602776][ T3302] shmem_symlink+0x37a/0x3b0 [ 445.607398][ T3302] vfs_symlink+0x106/0x220 [ 445.611856][ T3302] filename_symlinkat+0xe8/0x2b0 [ 445.616831][ T3302] __se_sys_symlink+0x42/0x1b0 [ 445.621631][ T3302] __x64_sys_symlink+0x31/0x40 [ 445.626444][ T3302] x64_sys_call+0x2465/0x3020 [ 445.631144][ T3302] do_syscall_64+0x12c/0x370 [ 445.635802][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.641735][ T3302] [ 445.644089][ T3302] read to 0xffff888103939df0 of 8 bytes by task 3302 on cpu 1: [ 445.651655][ T3302] generic_fillattr+0x201/0x340 [ 445.656541][ T3302] shmem_getattr+0x181/0x200 [ 445.661163][ T3302] vfs_getattr_nosec+0x146/0x1e0 [ 445.666144][ T3302] vfs_getattr+0x48/0x60 [ 445.670421][ T3302] vfs_statx_path+0x28/0x140 [ 445.675063][ T3302] vfs_statx+0xc4/0x170 [ 445.679258][ T3302] vfs_fstatat+0x118/0x170 [ 445.683720][ T3302] __se_sys_newfstatat+0x55/0x3e0 [ 445.688783][ T3302] __x64_sys_newfstatat+0x55/0x70 [ 445.693861][ T3302] x64_sys_call+0x2c64/0x3020 [ 445.698587][ T3302] do_syscall_64+0x12c/0x370 [ 445.703222][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.709150][ T3302] [ 445.711499][ T3302] value changed: 0x000000007735954a -> 0x0000000077359565 [ 445.718626][ T3302] [ 445.720984][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 445.727153][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 445.737612][ T3302] Tainted: [W]=WARN [ 445.741451][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 445.751538][ T3302] ================================================================== [ 445.951095][T13714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.