last executing test programs: 2.223019525s ago: executing program 4 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x7, 0x4, 0x2, 0x7, 0x0, 0x4, 0x22022, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2f, 0x7}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xa, r2, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r4, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$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") r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 2.165604546s ago: executing program 4 (id=1034): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25dfdbfc, {0x2, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5c}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "89b7c2c987f30893", "7b330806715654309f475671397544b5", "b6862124", "27fff8fef8b22086"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001840), 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x408, &(0x7f0000000380)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nodelalloc}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$eJzs3c9rHNcdAPDv7lqyJKuV7ZbWdqE2uOD+wLv6QbHU9tJT24Oh1NBLC44irRVHK63QrhxL+CAnNx9yCAkJhBxyz1+QS3yKCYSck3vIITgkjgJJILBhZndlWdLKC5G1RvP5wGhn5q3m+94u36eZNzOaADLrXPIjFzEcER9FxEhz8dE3nGu+bDy4NZNMuWg0rnyZS9+XLLff2v69YxGxHhEDEfGff0Q8m9sZt7a6Nj9dqZSXW8ul+sJSqba6dvH6wvRcea68ODZ5aWpqcnRifKr7xgzuXXzn5efvXH73X/3vfPvS/XuvvP9eUq3hVtnWduynZtP74sSWdUci4m9PIlgPFFrtecxHz1Mq+f5+ERHn0/wfiUL6bQJZ0Gg0Gj80jnYqXm8Ah1Y+3QfO5YsR0ZzP54vF5j78L2MoX6nW6n+6Vl1ZnG3uKx+Pvvy165XyaOtY4Xj05ZLlsXT+4fL4tuWJiHQf+NXCYLpcnKlWZg+2qwO2OdbK/8FW/n9TaOY/kBG7H/J3PCgADhFDfpBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF078n+XG3aBQ+ffly8nU6N9//vsjdWV+eqNi7Pl2nxxYWWmOFNdXirOVatzv84XZ6oLj9tepVpdGvtzrNws1cu1eqm2unZ1obqyWL+a3td/tdx3IK0CunHi7N1Pkr/2638ZTKdEf6tMrsLh1mjkotf3IAO9Ueh1BwT0jKF/yC7H+MDjzvgNdCpY2v+6AAcj3+sKAD1z4bTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bru8Pyvn215dtdoRPw8Ij4u9B1tP+sLOAzyn+ci8sn+/4WR3w1vL+3PfZeeIuiPiBfevPL6zel6fXksWf/V5vr6G631472oP9Ctdp628xgAyK6NB7dm2tNBxv3i782LEHbGP9IamxxIz1EObeQeuVYht0/XLqzfjohTu8XPpWMjI60zH0MbhR3xT7Zec81NpPU9kj43ff/iH98j/ukt8X+7Jf6Zn/ypQDbcTfqf0d3yL5/mdGzm36P9z/A+XTvRuf/Lb/Z/hQ7939kuYzz31oufdYx/O+LMrvHb8QbSWNvjJ3W70F343P3///dXnQobbze3s1v8zQ1ERKm+sFSqra5dTP+P3Fx5cWzy0tTU5OjE+FQpHaMutUeqd/rrqQ/v7dX+oYfxByOiq/Yn6/7QXfvj+9988L9ze8T//fndv/+Te8RPKvrHLuN/Pf7pM53KkvizHT7//B7xk3UTXcavvfZPzxIHgKdIbXVtfrpSKS+bMWPGzOZMr3sm4El7mPS9rgkAAAAAAAAAAADQrc6XAY/s2+XEvW4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBh8GMAAAD//0Gh0nQ=") ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1, 0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.667183499s ago: executing program 4 (id=1040): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0xb4d67fb29e4faba1, &(0x7f0000000040)=[{0xacff, 0x5, 0x4, 0x1}]}) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x1c, 0x19, 0x1, 0x70bd27, 0x25dfdbfb, {0x1c, 0xd601, 0x9}, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xd5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='1', 0x1) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0xfffffffffffffffe, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x2c}, 0x94) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) dup(r0) 1.541405032s ago: executing program 4 (id=1043): exit_group(0x0) exit_group(0x81) exit_group(0x9) exit_group(0x10) exit_group(0x9) exit_group(0xeecf) exit_group(0x7) exit_group(0x0) exit_group(0xd3a8) exit_group(0x1e82178e) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140e, 0x410, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) exit_group(0x4) exit_group(0x4) exit_group(0x636d) exit_group(0x3e5) exit_group(0xc6b) exit_group(0xd) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x24000005) exit_group(0x3) exit_group(0x81) exit_group(0x80) exit_group(0x3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) setpgid(0xffffffffffffffff, r3) exit_group(0xff) exit_group(0x80000000) exit_group(0xdc) 1.456294914s ago: executing program 4 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008f0000c93f7568407d3b530027000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)='\b', 0x1}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) unshare(0x22020600) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="190400009e42309daace0a6f4660bd5976d3de7d9794ed5f82add9bdc56336e8315ce32d9394d97c7379709dcf3bff314ea624337d004f6a88f2496196c3", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000000000000014100000018001700000001000000006574683a73797a5f74756e00"], 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a000000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40003820000000000000000100100200001267000000000100100201001001017705dc0000000073797a5f74756e000000000000000000"], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = open(0x0, 0x108843, 0x55) fcntl$setlease(r7, 0x400, 0x1) syz_ublk_setup_io_uring(0x2c73, &(0x7f0000000100)={0x0, 0x34bb, 0x800, 0x2, 0x2e0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r8 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r8, 0x9) 1.341060747s ago: executing program 3 (id=1047): r0 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000180)=0x4, 0x4) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x9, 0x40180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffe3, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x2004) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000040000000000000000ffff000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xfffffffffffffe78, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0xc41, 0x20) acct(&(0x7f00000001c0)='./file0\x00') syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x7, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x201001e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, 0x0, &(0x7f0000000340)={0x1000, 0x8, 0xfffffffffffffffe, 0x0, 0xfffffffffffff738, 0x3, 0x6, 0x4, 0x7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYBLOB="7e75a9347f1e769aaefe088bf83d7bd932d0a0ff67278fd4a47a92def19ebdacc21a490b2a3f66ff8593c7fd5c244e86057639d7c9a9470054b98f5bbaf50e2c63c715b44f0355ed819d4256e8a5c1463faf093d89fb89cb6417a135853ace855b2d721706", @ANYRES64=r0], 0x1, 0x319, &(0x7f0000000b80)="$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") r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40842}, 0x8000) 1.276944499s ago: executing program 3 (id=1050): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844b100e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) r1 = add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, 0x0, 0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x800c) ftruncate(r0, 0x2007ffa) sendfile(r0, r0, 0x0, 0x80000001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x20, 0x0, 0x1ff, 0x7, {{0xe, 0x4, 0x2, 0x2, 0x38, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0x1f, 0xcb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @rand_addr=0x64010101, @loopback, @multicast1, @empty]}, @lsrr={0x83, 0x3, 0x3c}, @noop]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r3, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./file2\x00', 0x8) r5 = socket$inet_tcp(0x2, 0x1, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000400)={'\x00', &(0x7f0000000500)=@ethtool_cmd={0x2, 0x0, 0x0, 0x3e8, 0x1, 0xff}}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000600)={'\x00', &(0x7f0000000500)}) listen(r5, 0x5) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r9 = accept$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r9, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "5e2043c1da420a92", "0200550200000000917794865181c67a", "212ac500", "f9d632d01e424eff"}, 0x28) recvfrom$inet(r9, 0x0, 0x0, 0x1d40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xfff}}, './file2\x00'}) 1.22478097s ago: executing program 1 (id=1052): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x18c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x0, 0x1}, {0x5, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_ACT={0x15c, 0x1, [@m_bpf={0xb4, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0x4, 0x0, 0x8}]}, @TCA_ACT_BPF_FD={0x8}]}, {0x61, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x58, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0x4}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x4c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.146387362s ago: executing program 1 (id=1054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0xffffffffffffffff, 0xa, r3, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r4, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) fsmount(r5, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 1.047541424s ago: executing program 1 (id=1056): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000001140)={[{@user_xattr}, {@noquota}, {@mb_optimize_scan}, {@jqfmt_vfsv1}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1f}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@sb={'sb', 0x3d, 0x476f}}, {@noinit_itable}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x66, 0x60, 0x36, 0x39, 0x36, 0x37, 0x38], 0x2d, [0x32, 0x31, 0x61, 0x65], 0x2d, [0x65, 0x34, 0x30, 0x30], 0x2d, [0x35, 0x64, 0x37, 0x64], 0x2d, [0x32, 0x4, 0x37, 0x63, 0x65, 0x38, 0x31, 0x60]}}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '..[,.!!'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!{'}}]}, 0x3, 0x5a5, &(0x7f0000002280)="$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") r0 = socket(0x200000000000011, 0x2, 0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000200)='3', 0x1}], 0x1, 0x800, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x260, 0x268, 0x300, 0x0, 0x268, 0x330, 0x460, 0x460, 0x330, 0x460, 0x9, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0xa8, 0xc8, 0x0, {0x9401}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2, @remote, [0x0, 0xffffffff], [0x0, 0xff], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80, 0xde52}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, &(0x7f0000001080)) 965.515956ms ago: executing program 1 (id=1059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x7, 0x4, 0x2, 0x7, 0x0, 0x4, 0x22022, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2f, 0x7}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xa, r2, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r4, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$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") r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 881.597628ms ago: executing program 1 (id=1071): socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x4}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_bp={0x0, 0x3}, 0x40, 0x35, 0x6, 0x8, 0x9, 0x6, 0x401, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000001800000004000000000000000700218c1e40ed58db8f582d7adbb40800008510002f"], &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe6) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e1f, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0xda1, 0x1f, 0xffffffffdffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2004d005}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffe, 0x103, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x4e20, 0x71c, 0x4e21, 0xfff9, 0x2, 0x0, 0x20, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x7, 0xf, 0x400006, 0x200000000000004, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0xf8}}, 0x4000004) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 829.675299ms ago: executing program 1 (id=1062): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x1101, &(0x7f0000000000)=0x0) r2 = eventfd(0xc1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000003780)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x89, r2, 0x0, 0x0, 0x2, 0x0, 0x1, r2}]) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x2000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x2, 0x4}]}}, 0x0, 0x42, 0x0, 0x1, 0x8}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1223, 0x0, 0x0, 0x1, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00db2c3e", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf250700000020000180060001000a00000014000400fe880000000000000000000000000101"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) write$rfkill(r7, &(0x7f0000000140)={0x6, 0x1, 0x0, 0x0, 0x1}, 0x8) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, 0x0) bind$inet6(r8, 0x0, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, 0x0, 0x0) bind$inet6(r8, 0x0, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}, 0x8) 828.61667ms ago: executing program 2 (id=1063): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB="f40bb8", @ANYRES32=r0, @ANYBLOB="0a000100bbbbbbbbbbbb0000"], 0x50}, 0x1, 0x0, 0x0, 0x4d818}, 0x0) 750.029321ms ago: executing program 2 (id=1064): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x188, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x0, 0x1}, {0x5, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x15c, 0x2, [@TCA_BPF_ACT={0x158, 0x1, [@m_bpf={0xb0, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0x4, 0x0, 0x8}]}, @TCA_ACT_BPF_FD={0x8}]}, {0x60, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x58, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0x4}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x4c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 748.968471ms ago: executing program 2 (id=1065): socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x100000001, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'ip6gre0\x00', {}, {}, 0x3b, 0xa2, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0xa14}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x3, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x38}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000000)={0x1, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x92, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x6, 0x3}, @sack_perm, @mss, @timestamp, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x6}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x40, 0x0, 0x29}, {0x80000, 0x2e, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x4e23, 0x981, @local, 0x5}, r6, 0x10}}, 0x48) sendto$inet(r5, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 665.170454ms ago: executing program 2 (id=1066): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) chmod(0x0, 0x1a) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xfa, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0xdbe, 0xff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) 664.804514ms ago: executing program 2 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x7, 0x4, 0x2, 0x7, 0x0, 0x4, 0x22022, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2f, 0x7}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xa, r3, 0x1) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, r4, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) fsmount(r5, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 639.163024ms ago: executing program 2 (id=1068): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x6, 0x20000000, 0xfffffff8, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x12b) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r6, &(0x7f0000000700)=[{&(0x7f0000000080)=""/111, 0x6f}], 0x1, 0x7, 0x4) socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 430.285789ms ago: executing program 0 (id=1069): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005e80), 0x0, 0x4810) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f"], 0x78) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) setns(0xc9, 0x0) socket(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff0000004200", @ANYRES32, @ANYBLOB="00000000000035cb08930f9f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) 374.963021ms ago: executing program 3 (id=1070): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000a00)=[{0x0, 0x47}, {&(0x7f0000000080)="9d", 0x1}], 0x2, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0xffffffffffffffff, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x2c, r3, 0x201, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60040021}, 0x40080) 373.752011ms ago: executing program 0 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x7, 0x4, 0x2, 0x7, 0x0, 0x4, 0x22022, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2f, 0x7}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xa, r2, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(r4, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$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") r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 299.187742ms ago: executing program 0 (id=1073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x7, 0x4, 0x2, 0x7, 0x0, 0x4, 0x22022, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2f, 0x7}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xa, r3, 0x1) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, r4, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$eJzs3U1rE0Ecx/F/kqZJWmt6EBFRGCqIIl2agDcPFmlBDChtI1hB2NqthmyTkg2FiNgeBK+ePfTgUQQRvHkR8dqLr8CnWy+9WbC4stndNE3WNa32yX4/h3a6M7+dyc6kD9N2s3Lp6WxxxtJ+2HVx8fRLVGJeeVHOf1j6fHr8/RH3Y6VGhycyWaWiInL74cuBd9Xem2+Ovk3Icv+dldXst+VTEyI/J+5LVBUsVbJtpaupcrkaccLTBauoKXXDNHTLUIWSZVSqXr0+ZRpqxizPzdWUXpru65mrGJal9FJNFY2aqpZVtVJT+j29UFKapqm+HkF9snzRtrpIWDD/Ys22ZdWZ+cSi2LYd0HrRL/hrI/F3g8V+0jL/oW3bFkdsJ0eG3bBmd3U8//j/uM//L8+Y/8Np/NbkteFcbmRMqaTI7JP5/Hzefe/Wf+qVgphiyNLYhcl1EbtBIs7b0au5kSFV1y9nZxe8/MJ83v3iMDzj5TOSdr5PacqLn8+4ebU5H5ee5nxW0nIsOJ/18xJtynfLuTNNeU3S8vGulMWUaXGyG/lHGaWuXM+19J+qtwMAAAAAAAAA4CDSVMPG/n2k8avelKYl6n/x0ahPOYeddm6Dxv76kKRlPXh/fihwf79LTnbt4QMHAAAAAOAQsWoPirppGpWdKcSep0K6iIuIUxB5POAMJvSEx70Rd9Z7t4i0V8XCu9hUSF10+3s15g1MdvJC/aOC/88aRd187VelJKhxdEsLYLA78Mond/UBSieNJbm9hZ3oeGm1FiLr/pETgW3syJ/PY+tm3D0iGzMYmrq8pafDbwvJ1gs1+NU9rxnySeN7Y4sPAAAAwAHS9IMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI9u6eZh/3/7NVeK9RHz7LdlaXyee+/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Id+BQAA//+FlLca") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 230.766514ms ago: executing program 0 (id=1074): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000003640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000a80)={r2, &(0x7f0000000440)=']\x00', 0x20000, &(0x7f0000000b00)={@_ha_fsid={[0x66, 0xfffff251]}, {0x3, 0x6, 0x40000007, 0x4793}}, 0xd7a, &(0x7f0000000ac0), &(0x7f0000000a40)}) sendmmsg$unix(r0, &(0x7f00000036c0)=[{{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000035c0)=[{&(0x7f00000006c0)="836b8696c9a887ff537863bab71bba3b15cd401af7f96ff415e22ecfc930f762cdf2a3ba5cbc7418435b35770f5bad127c2921a688f473242abd0264341208a9776d23a1b7b4676d05a4020b7235fb5e46b39ef5e9b0ce7eff1bd477c835a9e422a906347d8d157a432d6f4ee4368f7dc42dc77b896faaaafc5ff31a4fb64969", 0x80}, {&(0x7f0000000780)="105cb118c09f94a3852a7e78c28c3ae0eee013b1c85afdf143ab1a56b3d9dc992c65673bdef2086bd3654025bd6d9703ff5f392af37d8878fff1d2cd153313b438e87e8aa180cbe506c743b011098bd55e3cd88bec4ff3e4b534fc8e328b2ae02b12a80863c55bb217bd5e708dd442c4ec6e78a3ce1b4a5f7105c6040641d64bc82ffcf80a8e0efa40f78d580e4d200b57dacbc3fc376ac8d04188cfc2b685", 0x9f}, {&(0x7f0000000840)="6cca6c14bfe57920ac2c2d357934305d6b9b5736bf7872e3d5d97ad2ae6054bc675b850ae9e8187653bfe75e4316b81cf696f51ef0f13954c36ecd10f66ea9a0aea9c31b979bc0b9c39b4c2347bb2e327923d2cca05563a5be42f425dc9c01afa2fdcdca1efa2ba42955c794a76d057add3bbfc23f5b29761cfa6b62c1b7d7214c7e", 0x82}, {&(0x7f0000000900)="18c900cc402bdbafd703862acecb8c6be04c59e3c61f08319f3adf1e8e5a1727a7ffba687a3b781569770817214bbfe57c58687acc6112e8076f3b24fb7b30d21cef270e89ddac1398532950e82b686e9f2406269567d7e17f5bee803f014f86b08204fcbfd26034c92c1195b7793d465181701492a1807d405b81abc8b4c6f25498452f48c533e6451ad58812228f4e", 0x90}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f00000033c0)="c2aa327500c34de6a4842d468479afdae3fbc60346812677d613bec7b52ce028cb773338aca91fd258344bcea600d7445af83af411071d2d5bc28a859225873f59eac0a028a0b86cdb4488b37d7766c92ff66c7f221cfc9cf416459ba26edd74584b0fc9a75ec458424f5280aaa26db35bec4146211a7aaa1e4827d20429712fc832597dd7fb5e1b395a3fed3a475dd8ae98557a28004317dd6042400e7c112856bbd53f13ec57a9e8eae0cdddf6720b04eeda2c7bbe0240745cc1ee2e088b7ba16cb5b8", 0xc4}, {&(0x7f00000034c0)="020491451679f6729f4c6261c92b170518753ff7c82e107bfba84404c80200aaa4947ec614c314764bd982c67708cf1bc14c21f874837f42b59fa0c07d9b84eaf3b7bb3197349a307ecfcbefb0a224940d55b1445f7b2b4c1934c5a92fa7e8feadaf5004fd8d189a5ba64f7903011cc7f1c0942aa70c734266b6732b94498efc0d9469c0fe6f935ee6b6784f45945f5ded9a1d0d9774ac113f198048177733c79b5b9f1b05e825a0918834fcbc5d91a72f9ee9246d4ce0502c27a083a12d7a321f7c37b62772dc3a2ad01446c6cccc42dd02e740877ea637abc0e4393a49b9f416b209f6b0393d1cfd2c", 0xea}], 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000a6052cdbaae0d30d64d50000000000010000000100000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x4011}}], 0x1, 0x2000c010) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x14e, 0x0, &(0x7f0000000540)="b9ff030f6044238cb89e14f088a81bff803500004000638877fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4016caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000882f2cec16385d535955c96ef33a0a4e72f5ffa39c263328783bf712184cb47dccc683b913e08b7a20d78035f28b37be2cdec2861e311943d012cdee5b24a3e6a77f5eaa4a74880e18f1ebf51662d9ae", 0x0, 0xfe, 0x60000000, 0x59, 0x6a, &(0x7f0000000000), &(0x7f0000000380)="0943b0800044bcfa973eec0a46a734266b2fc093239e33da53e6be06d91c5d607986925f873b3f427ba3f43308c2944bea87c8f8b3ed863b71dac56306d9bcdfcd41da6c88f97d5423c4bfa3aacfca1e9e59f6f9b00589ac67360d57e4f06c98a16ae7623d2dcf6a3de8"}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000003c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r4, 0x7}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r9, &(0x7f0000000c00)=ANY=[@ANYBLOB="6c08aa24619494a94ba88ee207bd484cfa1c941590e18af829b31ed4229bbdfee56f66a22d635c574556e82df8a5981f16b275483c1884a814a40fa2960e8ccd8e70ee29625ebc34c49d4fca97228a2634adfe5af662aedf8fa0f43db3e62df923925509c771d127a11cb009ef2714033fadea2cd7a36ce6b81089024bcee71fa210b409af63536f8ae65fdd5ecc233d78893dfb56be13f9afefa7946012f51f22d7d199e2d5a450f064837ecdbbb645887322e9daa352adf8ddc193e922c6c6a7d5ee3cf0fea6468c8b0901819ffa1dd2e265c0057ef14af6e55df5cc3070dd380127ec809890749cef9bb3b627dfbd5c3fbb"], 0x78) connect$inet(r10, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r11, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) sendto$inet6(r11, &(0x7f0000000040)='l', 0x1, 0x20000010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r11, &(0x7f0000000300)="96", 0x1, 0x20044084, 0x0, 0x0) splice(r8, 0x0, r10, 0x0, 0x8000, 0x0) 149.036407ms ago: executing program 0 (id=1075): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f0000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCXONC(r1, 0x540a, 0xfdfdffff) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r2, 0x400c4d02, &(0x7f0000000a00)) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f00000001c0)=ANY=[@ANYBLOB="513ad0e46a2d2bbe"]) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@mcast2}, &(0x7f0000000180)=0x14) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$inet6_icmp(0xa, 0x2, 0x3a) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0x4) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061188e000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) 148.811847ms ago: executing program 3 (id=1076): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x188, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x0, 0x1}, {0x5, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x15c, 0x2, [@TCA_BPF_ACT={0x158, 0x1, [@m_bpf={0xb0, 0x11, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x6, 0x4, 0x0, 0x8}]}, @TCA_ACT_BPF_FD={0x8}]}, {0x60, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x58, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0x4}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x4c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 120.467077ms ago: executing program 0 (id=1077): socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x4, 0x4, 0x3a8, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xffffff00, 0x0, 0xff000000], [0x100000001, 0x0, 0x0, 0xffffffff], 'dvmrp0\x00', 'ip6gre0\x00', {}, {}, 0x3b, 0xa2, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0xa14}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0xfc}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe3, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x3, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x38}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000000)={0x1, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x92, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x6, 0x3}, @sack_perm, @mss, @timestamp, @mss={0x2, 0x6}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x6}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) r7 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x40, 0x0, 0x29}, {0x80000, 0x2e, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0xef, 0xc5e}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, {0xa, 0x4e23, 0x981, @local, 0x5}, r6, 0x10}}, 0x48) sendto$inet(r5, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 94.833147ms ago: executing program 4 (id=1078): mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x1077415, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1000, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x4, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd70000000004a717d58a44d8c5392140002006e657464657673696d30000000000000050019"], 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a00000800000500"], 0x50}}, 0x4000850) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1e, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x400c841) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) connect$tipc(0xffffffffffffffff, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@auto_da_alloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a0805020000002abd7000fddbdf2557f444db7a6197702740f17e992dd75cc6a3f40ff4c465393bd555c24556b9c1ee712b9846be4381c19462acae90"], 0x10}}, 0x4080) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="120000000100000004"], 0x50) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) migrate_pages(r3, 0x3e, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x185042, 0x1fb) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = openat(r4, &(0x7f0000000040)='./file2\x00', 0x109842, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfe63, 0xe7c) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r1, &(0x7f0000000240)=""/19, 0x13) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) 79.834318ms ago: executing program 3 (id=1079): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=@newtclass={0x2c, 0x28, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x9}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x24}}]}, 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$usbfs(0x0, 0xf, 0x240000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x7, 0x4, 0x2, 0x7, 0x0, 0x4, 0x22022, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2f, 0x7}, 0x8, 0x7, 0x3a1c00, 0x4, 0x9, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001}, 0xffffffffffffffff, 0xa, r3, 0x1) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, r4, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) fsmount(r5, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0xc55, &(0x7f00000003c0)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c00a7ab9c5924"], 0xf5, 0x2e5, &(0x7f0000000540)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000380)={0x0, 0xf1e}, 0x8) 0s ago: executing program 3 (id=1080): r0 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000180)=0x4, 0x4) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x9, 0x40180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffe3, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x2004) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000040000000000000000ffff000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xfffffffffffffe78, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0xc41, 0x20) acct(&(0x7f00000001c0)='./file0\x00') syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x7, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x201001e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000802, 0x0, &(0x7f0000000340)={0x1000, 0x8, 0xfffffffffffffffe, 0x0, 0xfffffffffffff738, 0x3, 0x6, 0x4, 0x7}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00aaed2e6322e12ca43d55f4e47d9fb6f319fab9c81cd7b9b508d5df5619dad30ed85701f46d5bb2b85a6aecd28cb992054878a859b15b1598ee0b05192ff4df579d2dd32fb9a6a092bb22740cfe0636a3d8ff4e975e21fc6d6e2d6ece2beac2098361fe652ea69917e6d47463ceb0b35bc7a2f8799debe5e7b6e82c84ab25d06157c08f006d90e62a8026a845835dbf4ac25eec51c3ec73c82014eee15eaaa123b343cec1f74e52bc1f21eb18053a9b98d3a304fba3751bd0121940bc9d276f1e5352b9f4e674bb80ffeaaff6843ef1c8a7a7e0d592893a77ae91e025a35840e7ff4fdb3571d1986ed6f5a23d9ee6bf1cec94fb17af0627c04bf47586ce288a466c039a1ead7fd99feacc51d9f3a2e67f46a0b86b45e5d7cb4affc1c539a764f5000000000000000000000074e65d7272a2adf7c8dbaf9af4a81a10c194d4c8e61e76f88431dfe54bdc50d06cc2ffdb960c72cf768598531c677230d3089c2fb4a2dd8ffc6f5a199f3109575577300bc2cf8e8d44be62687e7275fda28be7a4f867cfd0988ef496197ffffab6d955b720d5a90e5e9d8c9a8c164e2eb439b50e463744e84ca585a15c68d801c223b925277a8a1a3e693551e5a5103b6ed052529592bad177b5da5c5c4527be1e6306caec167f549fe6da157e1eb203d7e2941250eaae3ddb05be9eee9066216d1f", @ANYBLOB="7e75a9347f1e769aaefe088bf83d7bd932d0a0ff67278fd4a47a92def19ebdacc21a490b2a3f66ff8593c7fd5c244e86057639d7c9a9470054b98f5bbaf50e2c63c715b44f0355ed819d4256e8a5c1463faf093d89fb89cb6417a135853ace855b2d721706", @ANYRES64=r0], 0x1, 0x319, &(0x7f0000000b80)="$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") r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x40842}, 0x8000) kernel console output (not intermixed with test programs): 30.912947][ T3300] team0: Port device team_slave_0 added [ 30.914665][ T3300] team0: Port device team_slave_1 added [ 30.932882][ T3305] hsr_slave_0: entered promiscuous mode [ 30.933339][ T3305] hsr_slave_1: entered promiscuous mode [ 30.938833][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.938845][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.938872][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.939116][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.939144][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.939240][ T3307] bridge_slave_0: entered allmulticast mode [ 30.939644][ T3307] bridge_slave_0: entered promiscuous mode [ 30.941918][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.950228][ T3299] hsr_slave_0: entered promiscuous mode [ 30.950610][ T3299] hsr_slave_1: entered promiscuous mode [ 30.950891][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 30.950902][ T3299] Cannot create hsr debugfs directory [ 30.957746][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.963387][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.963399][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.963426][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.963554][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.963581][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.963664][ T3307] bridge_slave_1: entered allmulticast mode [ 30.964088][ T3307] bridge_slave_1: entered promiscuous mode [ 31.002091][ T3306] team0: Port device team_slave_0 added [ 31.003295][ T3306] team0: Port device team_slave_1 added [ 31.019518][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.024527][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.024540][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.024575][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.028341][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.050434][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.050447][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.050475][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.068489][ T3300] hsr_slave_0: entered promiscuous mode [ 31.068885][ T3300] hsr_slave_1: entered promiscuous mode [ 31.069102][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 31.069114][ T3300] Cannot create hsr debugfs directory [ 31.070420][ T3307] team0: Port device team_slave_0 added [ 31.086795][ T3307] team0: Port device team_slave_1 added [ 31.124525][ T3306] hsr_slave_0: entered promiscuous mode [ 31.124830][ T3306] hsr_slave_1: entered promiscuous mode [ 31.125050][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 31.125063][ T3306] Cannot create hsr debugfs directory [ 31.127983][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.127995][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.128022][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.128722][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.128733][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.128761][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.180539][ T3307] hsr_slave_0: entered promiscuous mode [ 31.180911][ T3307] hsr_slave_1: entered promiscuous mode [ 31.181154][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 31.181166][ T3307] Cannot create hsr debugfs directory [ 31.237457][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.243374][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.257845][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.261112][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.261792][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.269648][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.287064][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.291710][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.346449][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.351484][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.367395][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.369866][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.371362][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.371393][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.371499][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.371535][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.390323][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.396956][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.406607][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.423415][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.450596][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.475597][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.482657][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.486508][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.491090][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.491122][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.491187][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.491280][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.506482][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.514331][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.518446][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.526157][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.530548][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.537498][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.538153][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.542989][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.546950][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.549825][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.552975][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.559112][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.575861][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.617459][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.628085][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.644997][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.650420][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.797015][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.804737][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.808385][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.814349][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.817777][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.823547][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.832274][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.927244][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.927281][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.927951][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.935201][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.941868][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.941899][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.982099][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.007827][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.019502][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.019534][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.026160][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.026190][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.055547][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.063767][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.066976][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.090398][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.091516][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.104548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.104581][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.105818][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.105874][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.114208][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.117735][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.117768][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.119815][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.119937][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.145557][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.162586][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.162653][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.186813][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.186861][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.396921][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.401400][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.427087][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.483770][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.496389][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.571348][ T3299] veth0_vlan: entered promiscuous mode [ 32.584188][ T3305] veth0_vlan: entered promiscuous mode [ 32.589797][ T3299] veth1_vlan: entered promiscuous mode [ 32.595088][ T3305] veth1_vlan: entered promiscuous mode [ 32.617700][ T3300] veth0_vlan: entered promiscuous mode [ 32.628693][ T3299] veth0_macvtap: entered promiscuous mode [ 32.637000][ T3300] veth1_vlan: entered promiscuous mode [ 32.639083][ T3299] veth1_macvtap: entered promiscuous mode [ 32.643890][ T3306] veth0_vlan: entered promiscuous mode [ 32.646148][ T3306] veth1_vlan: entered promiscuous mode [ 32.657038][ T3306] veth0_macvtap: entered promiscuous mode [ 32.658419][ T3306] veth1_macvtap: entered promiscuous mode [ 32.663319][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.664771][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.699509][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.715243][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.720824][ T3305] veth0_macvtap: entered promiscuous mode [ 32.740784][ T3300] veth0_macvtap: entered promiscuous mode [ 32.742422][ T3300] veth1_macvtap: entered promiscuous mode [ 32.756340][ T3305] veth1_macvtap: entered promiscuous mode [ 32.772509][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.781301][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.807281][ T3299] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.809630][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.819075][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.839315][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839425][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839478][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.839563][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843451][ T379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843588][ T379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843766][ T379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843802][ T379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843840][ T379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843874][ T379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.843908][ T379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844016][ T379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844052][ T379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844173][ T379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844284][ T379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844318][ T379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.910994][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 32.911010][ T29] audit: type=1400 audit(1791070641.826:158): avc: denied { map_create } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.911051][ T29] audit: type=1400 audit(1791070641.826:159): avc: denied { map_read map_write } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.927587][ T29] audit: type=1400 audit(1791070641.846:160): avc: denied { name_bind } for pid=3504 comm="syz.3.4" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.927632][ T29] audit: type=1400 audit(1791070641.846:161): avc: denied { node_bind } for pid=3504 comm="syz.3.4" saddr=::ffff:0.0.0.0 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.937271][ T29] audit: type=1400 audit(1791070641.856:162): avc: denied { create } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.959744][ T29] audit: type=1400 audit(1791070641.876:163): avc: denied { perfmon } for pid=3504 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.964620][ T3307] veth0_vlan: entered promiscuous mode [ 32.972074][ T29] audit: type=1400 audit(1791070641.886:164): avc: denied { prog_load } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.972149][ T29] audit: type=1400 audit(1791070641.886:165): avc: denied { bpf } for pid=3504 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.977382][ T29] audit: type=1400 audit(1791070641.896:166): avc: denied { prog_run } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.980761][ T3307] veth1_vlan: entered promiscuous mode [ 32.994860][ T29] audit: type=1400 audit(1791070641.916:167): avc: denied { create } for pid=3504 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.021460][ T3307] veth0_macvtap: entered promiscuous mode [ 33.026555][ T3307] veth1_macvtap: entered promiscuous mode [ 33.035177][ T3512] ip6t_hbh: too many supported opts specified [ 33.044854][ T3512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 33.050484][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.066505][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.172081][ T3519] loop0: detected capacity change from 0 to 512 [ 33.236497][ T3519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.236667][ T3519] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.273021][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.292999][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.293536][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.294286][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.347581][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.432088][ T3533] ip6t_hbh: too many supported opts specified [ 33.432332][ T3533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.459585][ T3530] syz.0.8 (3530) used greatest stack depth: 10528 bytes left [ 33.487650][ T3539] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 33.673358][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.801906][ T379] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.839998][ T3557] MTRR 1 not used [ 33.841652][ T3557] tmpfs: Unknown parameter 'Q:Ðäj-+¾' [ 33.906861][ T379] Bluetooth: hci2: Frame reassembly failed (-84) [ 34.001032][ T3566] loop4: detected capacity change from 0 to 128 [ 34.001792][ T3566] ======================================================= [ 34.001792][ T3566] WARNING: The mand mount option has been deprecated and [ 34.001792][ T3566] and is ignored by this kernel. Remove the mand [ 34.001792][ T3566] option from the mount to silence this warning. [ 34.001792][ T3566] ======================================================= [ 34.047462][ T3566] FAT-fs (loop4): bogus number of FAT structure [ 34.047575][ T3566] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 34.047623][ T3566] FAT-fs (loop4): Can't find a valid FAT filesystem [ 34.176863][ T3525] syz.1.7 (3525) used greatest stack depth: 10016 bytes left [ 34.280350][ T3566] syz.4.20 (3566) used greatest stack depth: 9744 bytes left [ 34.300559][ T31] Bluetooth: hci3: Frame reassembly failed (-84) [ 34.310157][ T3572] loop1: detected capacity change from 0 to 512 [ 34.332354][ T3572] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.23: bg 0: block 385: padding at end of block bitmap is not set [ 34.332384][ T3572] loop1: lost filesystem error report for type 5 error -117 [ 34.332556][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 34.332596][ C0] EXT4-fs (loop1): initial error at time 1791070643: ext4_validate_block_bitmap:445 [ 34.332713][ C0] EXT4-fs (loop1): last error at time 1791070643: ext4_validate_block_bitmap:445 [ 34.338571][ T3572] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 34.338647][ T3572] loop1: lost filesystem error report for type 5 error -117 [ 34.340605][ T3572] EXT4-fs (loop1): 2 truncates cleaned up [ 34.346773][ T3572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.437415][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.547856][ T31] Bluetooth: hci4: Frame reassembly failed (-84) [ 35.672568][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.842575][ T3549] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.912673][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 35.912778][ T3555] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 36.188790][ T3587] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27'. [ 36.189331][ T3587] Zero length message leads to an empty skb [ 36.312712][ T3565] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 36.347615][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 36.417229][ T379] IPVS: starting estimator thread 0... [ 36.484041][ T3605] loop3: detected capacity change from 0 to 512 [ 36.498658][ T3605] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.35: bg 0: block 385: padding at end of block bitmap is not set [ 36.498768][ T3605] loop3: lost filesystem error report for type 5 error -117 [ 36.499287][ T3605] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 36.499313][ T3605] loop3: lost filesystem error report for type 5 error -117 [ 36.500869][ T3605] EXT4-fs (loop3): 2 truncates cleaned up [ 36.506352][ T3605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.523429][ T3601] IPVS: using max 2304 ests per chain, 115200 per kthread [ 36.557279][ T3565] Bluetooth: hci4: command 0x1003 tx timeout [ 36.557312][ T3575] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 36.611081][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.639994][ T3615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.38'. [ 36.681729][ T3620] batadv_slave_0: entered promiscuous mode [ 36.691021][ T3619] tipc: Enabling of bearer rejected, failed to enable media [ 36.721788][ T3622] loop0: detected capacity change from 0 to 512 [ 36.736361][ T3622] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.41: bg 0: block 385: padding at end of block bitmap is not set [ 36.736452][ T3622] loop0: lost filesystem error report for type 5 error -117 [ 36.736945][ T3622] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 36.737034][ T3622] loop0: lost filesystem error report for type 5 error -117 [ 36.738449][ T3622] EXT4-fs (loop0): 2 truncates cleaned up [ 36.744744][ T3622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.806538][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.865801][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 36.922081][ T3630] loop0: detected capacity change from 0 to 128 [ 36.932107][ T3630] FAT-fs (loop0): bogus number of FAT structure [ 36.932178][ T3630] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 36.932251][ T3630] FAT-fs (loop0): Can't find a valid FAT filesystem [ 37.214628][ T3638] loop0: detected capacity change from 0 to 512 [ 37.245703][ T3638] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.45: bg 0: block 385: padding at end of block bitmap is not set [ 37.245746][ T3638] loop0: lost filesystem error report for type 5 error -117 [ 37.246081][ T3638] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 37.246100][ T3638] loop0: lost filesystem error report for type 5 error -117 [ 37.246900][ T3638] EXT4-fs (loop0): 2 truncates cleaned up [ 37.247788][ T3638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.331805][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.460016][ T3612] batadv_slave_0: left promiscuous mode [ 37.471695][ T3645] loop0: detected capacity change from 0 to 512 [ 37.510478][ T3645] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.46: bg 0: block 385: padding at end of block bitmap is not set [ 37.510770][ T3645] loop0: lost filesystem error report for type 5 error -117 [ 37.511491][ T3645] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 37.511602][ T3645] loop0: lost filesystem error report for type 5 error -117 [ 37.526707][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 37.526745][ C1] EXT4-fs (loop0): initial error at time 1791070646: ext4_validate_block_bitmap:445 [ 37.526798][ C1] EXT4-fs (loop0): last error at time 1791070646: ext4_mb_clear_bb:6680 [ 37.587480][ T3645] EXT4-fs (loop0): 2 truncates cleaned up [ 37.627006][ T3645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.714148][ T3648] loop3: detected capacity change from 0 to 1024 [ 37.715223][ T3648] EXT4-fs: Ignoring removed i_version option [ 37.716287][ T3648] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.718041][ T3648] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.719122][ T3648] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.719195][ T3648] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.719325][ T3648] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.47: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.720073][ T3648] EXT4-fs (loop3): Remounting filesystem read-only [ 37.720102][ T3648] EXT4-fs (loop3): 1 orphan inode deleted [ 37.720499][ T3648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.826268][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.880732][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.899211][ T3653] loop3: detected capacity change from 0 to 1024 [ 37.899928][ T3653] EXT4-fs: Ignoring removed i_version option [ 37.900770][ T3653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.900816][ T3653] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.901776][ T3653] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.901949][ T3653] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.902254][ T3653] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.49: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.902582][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 37.902598][ C0] EXT4-fs (loop3): initial error at time 1791070646: ext4_free_blocks:6719 [ 37.902618][ C0] EXT4-fs (loop3): last error at time 1791070646: ext4_free_blocks:6719 [ 37.902694][ T3653] EXT4-fs (loop3): Remounting filesystem read-only [ 37.902720][ T3653] EXT4-fs (loop3): 1 orphan inode deleted [ 37.909675][ T3653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.918844][ T3653] ip_tables: iptables: counters copy to user failed while replacing table [ 38.003732][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 38.003744][ T29] audit: type=1400 audit(1791070646.916:335): avc: denied { mount } for pid=3655 comm="syz.0.50" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 38.051451][ T54] IPVS: starting estimator thread 0... [ 38.091492][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.135135][ T3660] IPVS: using max 2160 ests per chain, 108000 per kthread [ 38.149565][ T3662] EXT4-fs: Ignoring removed i_version option [ 38.151426][ T3662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.151516][ T3662] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.155354][ T3662] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 38.155419][ T3662] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.155627][ T3662] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.52: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.155809][ T3662] EXT4-fs (loop3): Remounting filesystem read-only [ 38.155831][ T3662] EXT4-fs (loop3): 1 orphan inode deleted [ 38.156187][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.168210][ T3662] ip_tables: iptables: counters copy to user failed while replacing table [ 38.220307][ T29] audit: type=1400 audit(1791070647.136:336): avc: denied { mount } for pid=3664 comm="syz.1.53" name="/" dev="hugetlbfs" ino=5342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 38.302728][ T3665] set_capacity_and_notify: 2 callbacks suppressed [ 38.302747][ T3665] loop1: detected capacity change from 0 to 512 [ 38.321992][ T29] audit: type=1400 audit(1791070647.236:337): avc: denied { mounton } for pid=3664 comm="syz.1.53" path="/bus" dev="hugetlbfs" ino=5343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.365162][ T3665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.365250][ T3665] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.367243][ T3665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.376266][ T29] audit: type=1400 audit(1791070647.286:338): avc: denied { append } for pid=3661 comm="syz.3.52" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.376311][ T29] audit: type=1400 audit(1791070647.286:339): avc: denied { ioctl } for pid=3661 comm="syz.3.52" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 38.395175][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 38.497785][ T3665] loop1: detected capacity change from 0 to 128 [ 38.518229][ T29] audit: type=1400 audit(1791070647.436:340): avc: denied { mounton } for pid=3664 comm="syz.1.53" path="/file0" dev="hugetlbfs" ino=5351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 38.520903][ T3665] FAT-fs (loop1): bogus logical sector size 0 [ 38.521044][ T3665] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 38.521101][ T3665] FAT-fs (loop1): Can't find a valid FAT filesystem [ 38.528545][ T3672] rock: directory entry would overflow storage [ 38.528555][ T3672] rock: sig=0x4f50, size=4, remaining=3 [ 38.528568][ T3672] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 38.589461][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.619389][ T29] audit: type=1400 audit(1791070647.536:341): avc: denied { create } for pid=3664 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 38.624907][ T29] audit: type=1400 audit(1791070647.546:342): avc: denied { write } for pid=3664 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 38.657958][ T29] audit: type=1400 audit(1791070647.566:343): avc: denied { setopt } for pid=3673 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.666896][ T3674] netlink: 68 bytes leftover after parsing attributes in process `syz.3.54'. [ 38.701884][ T3674] syz.3.54 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.702426][ T3672] netlink: 'syz.0.50': attribute type 16 has an invalid length. [ 38.727141][ T29] audit: type=1400 audit(1791070647.646:344): avc: denied { bind } for pid=3673 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.881056][ T3565] Bluetooth: hci1: command 0x1003 tx timeout [ 38.881156][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 39.123837][ T3684] loop3: detected capacity change from 0 to 512 [ 39.148509][ T3686] loop2: detected capacity change from 0 to 512 [ 39.149998][ T3684] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 39.206921][ T3686] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.57: bg 0: block 385: padding at end of block bitmap is not set [ 39.207487][ T3686] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 39.209658][ T3686] EXT4-fs (loop2): 2 truncates cleaned up [ 39.247685][ T94] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.261916][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.455466][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.482079][ T3703] ip6t_hbh: too many supported opts specified [ 39.483644][ T3703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'. [ 39.539447][ T3699] loop0: detected capacity change from 0 to 512 [ 39.626934][ T3699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.627593][ T3699] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.821045][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.872407][ T3721] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 39.896826][ T3723] loop2: detected capacity change from 0 to 1024 [ 39.898706][ T3723] EXT4-fs: Ignoring removed i_version option [ 39.901884][ T3723] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 39.902026][ T3723] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.903579][ T3723] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.903715][ T3723] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.903977][ T3723] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.70: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.904065][ T3723] fserror_report: 5 callbacks suppressed [ 39.904076][ T3723] loop2: lost filesystem error report for type 5 error -117 [ 39.904256][ T3723] EXT4-fs (loop2): Remounting filesystem read-only [ 39.904280][ T3723] EXT4-fs (loop2): 1 orphan inode deleted [ 39.904674][ T3723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.006121][ T3723] ip_tables: iptables: counters copy to user failed while replacing table [ 40.042839][ T3729] loop4: detected capacity change from 0 to 512 [ 40.079882][ T3729] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.72: bg 0: block 385: padding at end of block bitmap is not set [ 40.080072][ T3729] loop4: lost filesystem error report for type 5 error -117 [ 40.081577][ T3729] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.081746][ T3729] loop4: lost filesystem error report for type 5 error -117 [ 40.082609][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 40.082639][ C0] EXT4-fs (loop4): initial error at time 1791070648: ext4_validate_block_bitmap:445 [ 40.082936][ C0] EXT4-fs (loop4): last error at time 1791070648: ext4_mb_clear_bb:6680 [ 40.086371][ T3729] EXT4-fs (loop4): 2 truncates cleaned up [ 40.093931][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.188342][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.261195][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.363600][ T3741] loop3: detected capacity change from 0 to 512 [ 40.427103][ T3741] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.74: bg 0: block 385: padding at end of block bitmap is not set [ 40.427492][ T3741] loop3: lost filesystem error report for type 5 error -117 [ 40.430933][ T3741] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.431093][ T3741] loop3: lost filesystem error report for type 5 error -117 [ 40.432722][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 40.432791][ C1] EXT4-fs (loop3): initial error at time 1791070649: ext4_validate_block_bitmap:445 [ 40.432842][ C1] EXT4-fs (loop3): last error at time 1791070649: ext4_mb_clear_bb:6680 [ 40.449914][ T3745] loop4: detected capacity change from 0 to 512 [ 40.459237][ T3745] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 40.519161][ T3741] EXT4-fs (loop3): 2 truncates cleaned up [ 40.535538][ T3741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.593093][ T3743] loop2: detected capacity change from 0 to 512 [ 40.630506][ T3743] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.76: bg 0: block 385: padding at end of block bitmap is not set [ 40.630637][ T3743] loop2: lost filesystem error report for type 5 error -117 [ 40.632643][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 40.632734][ C1] EXT4-fs (loop2): initial error at time 1791070649: ext4_validate_block_bitmap:445 [ 40.632853][ C1] EXT4-fs (loop2): last error at time 1791070649: ext4_validate_block_bitmap:445 [ 40.676993][ T3743] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.677423][ T3743] loop2: lost filesystem error report for type 5 error -117 [ 40.679693][ T3743] EXT4-fs (loop2): 2 truncates cleaned up [ 40.694716][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.698448][ T3743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.758724][ T379] Bluetooth: hci1: Frame reassembly failed (-84) [ 40.951678][ T3752] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.78: bg 0: block 385: padding at end of block bitmap is not set [ 40.951737][ T3752] loop3: lost filesystem error report for type 5 error -117 [ 40.955869][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 40.955897][ C0] EXT4-fs (loop3): initial error at time 1791070649: ext4_validate_block_bitmap:445 [ 40.956019][ C0] EXT4-fs (loop3): last error at time 1791070649: ext4_validate_block_bitmap:445 [ 40.957765][ T3752] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.957864][ T3752] loop3: lost filesystem error report for type 5 error -117 [ 40.959992][ T3752] EXT4-fs (loop3): 2 truncates cleaned up [ 40.971783][ T3752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.986262][ T3757] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.80: bg 0: block 385: padding at end of block bitmap is not set [ 40.986381][ T3757] loop4: lost filesystem error report for type 5 error -117 [ 40.987217][ T3757] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 40.989290][ T3757] EXT4-fs (loop4): 2 truncates cleaned up [ 41.010358][ T3757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.105882][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.178949][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.272544][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 41.272573][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.275111][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.300940][ T3773] EXT4-fs: Ignoring removed i_version option [ 41.301286][ T3773] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.301374][ T3773] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.302964][ T3773] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 41.303040][ T3773] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.304331][ T3773] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.85: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.304515][ T3773] EXT4-fs (loop3): Remounting filesystem read-only [ 41.304538][ T3773] EXT4-fs (loop3): 1 orphan inode deleted [ 41.304915][ T3773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.313458][ T3775] EXT4-fs: Ignoring removed i_version option [ 41.315942][ T3775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.316028][ T3775] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.344481][ T3775] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.344568][ T3775] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.344720][ T3775] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.84: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.344942][ T3775] EXT4-fs (loop4): Remounting filesystem read-only [ 41.344966][ T3775] EXT4-fs (loop4): 1 orphan inode deleted [ 41.345453][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.347305][ T3775] ip_tables: iptables: counters copy to user failed while replacing table [ 41.449524][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.498317][ T3779] EXT4-fs: Ignoring removed i_version option [ 41.499663][ T3779] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.499881][ T3779] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.501387][ T3779] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.501476][ T3779] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.501659][ T3779] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.86: Freeing blocks not in datazone - block = 0, count = 4096 [ 41.501945][ T3779] EXT4-fs (loop2): Remounting filesystem read-only [ 41.501976][ T3779] EXT4-fs (loop2): 1 orphan inode deleted [ 41.507783][ T3779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.512805][ T3779] ip_tables: iptables: counters copy to user failed while replacing table [ 41.604825][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.604905][ T3784] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.644489][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.674369][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.704851][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.723012][ T3794] ip6t_hbh: too many supported opts specified [ 41.723819][ T3794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 41.757218][ T3792] MTRR 1 not used [ 41.760028][ T3792] tmpfs: Unknown parameter 'Q:Ðäj-+¾' [ 42.158123][ T3804] EXT4-fs: Ignoring removed bh option [ 42.158793][ T3804] EXT4-fs: quotafile must be on filesystem root [ 42.454496][ T3806] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.498430][ T3806] EXT4-fs (loop1): too many log groups per flexible block group [ 42.501598][ T3806] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 42.503258][ T3806] EXT4-fs (loop1): mount failed [ 42.658985][ T3817] EXT4-fs: Ignoring removed i_version option [ 42.665397][ T3817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.668889][ T3817] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.669868][ T3817] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.669944][ T3817] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.703875][ T3817] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.97: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.717095][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.717115][ C1] EXT4-fs (loop3): initial error at time 1791070651: ext4_free_blocks:6719 [ 42.717133][ C1] EXT4-fs (loop3): last error at time 1791070651: ext4_free_blocks:6719 [ 42.740953][ T3817] EXT4-fs (loop3): Remounting filesystem read-only [ 42.741001][ T3817] EXT4-fs (loop3): 1 orphan inode deleted [ 42.741510][ T3817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.781789][ T3819] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 42.793920][ T3565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 42.996695][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.031332][ T3827] EXT4-fs: Ignoring removed i_version option [ 43.031657][ T3827] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.031787][ T3827] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.032446][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.042182][ T3827] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.042287][ T3827] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.042457][ T3827] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.100: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.042954][ T3827] EXT4-fs (loop3): Remounting filesystem read-only [ 43.042995][ T3827] EXT4-fs (loop3): 1 orphan inode deleted [ 43.043380][ T3827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.058799][ T3827] ip_tables: iptables: counters copy to user failed while replacing table [ 43.069870][ T3823] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.085017][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 43.085107][ T29] audit: type=1400 audit(1791070652.006:435): avc: denied { write } for pid=3822 comm="syz.4.99" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.175323][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.199176][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.310767][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.340461][ T3849] ip6t_hbh: too many supported opts specified [ 43.340761][ T3849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 43.369433][ T3853] ip_tables: iptables: counters copy to user failed while replacing table [ 44.013665][ T3863] set_capacity_and_notify: 12 callbacks suppressed [ 44.013753][ T3863] loop2: detected capacity change from 0 to 512 [ 44.017302][ T3863] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 44.070595][ T3865] loop2: detected capacity change from 0 to 512 [ 44.088448][ T3865] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.113: bg 0: block 385: padding at end of block bitmap is not set [ 44.088680][ T3865] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 44.089544][ T3865] EXT4-fs (loop2): 2 truncates cleaned up [ 44.090163][ T3865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.140112][ T29] audit: type=1400 audit(1791070653.056:436): avc: denied { write } for pid=3864 comm="syz.2.113" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.166766][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.277942][ T29] audit: type=1400 audit(1791070653.196:437): avc: denied { perfmon } for pid=3877 comm="syz.1.118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.331765][ T29] audit: type=1400 audit(1791070653.246:438): avc: denied { bpf } for pid=3881 comm="syz.2.119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.338690][ T3886] loop3: detected capacity change from 0 to 1024 [ 44.343550][ T3886] EXT4-fs: Ignoring removed i_version option [ 44.343793][ T3886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.343898][ T3886] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.354702][ T3886] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.354839][ T3886] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.355004][ T3886] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.120: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.355205][ T3886] EXT4-fs (loop3): Remounting filesystem read-only [ 44.355229][ T3886] EXT4-fs (loop3): 1 orphan inode deleted [ 44.357127][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.358739][ T3886] ip_tables: iptables: counters copy to user failed while replacing table [ 44.492308][ T29] audit: type=1400 audit(1791070653.406:439): avc: denied { write } for pid=3876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.516098][ T29] audit: type=1400 audit(1791070653.416:440): avc: denied { write } for pid=3895 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.544652][ T3878] loop1: detected capacity change from 0 to 512 [ 44.617673][ T29] audit: type=1400 audit(1791070653.536:441): avc: denied { write } for pid=3898 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.649008][ T3878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.118: bg 0: block 385: padding at end of block bitmap is not set [ 44.649447][ T3878] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 44.651183][ T3878] EXT4-fs (loop1): 2 truncates cleaned up [ 44.685074][ T29] audit: type=1400 audit(1791070653.606:442): avc: denied { write } for pid=3913 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.699377][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.785252][ T3878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.860609][ T3916] loop0: detected capacity change from 0 to 512 [ 44.887269][ T3916] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.123: bg 0: block 385: padding at end of block bitmap is not set [ 44.888603][ T3916] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 44.892592][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 44.892687][ C0] EXT4-fs (loop0): initial error at time 1791070653: ext4_validate_block_bitmap:445 [ 44.892754][ C0] EXT4-fs (loop0): last error at time 1791070653: ext4_mb_clear_bb:6680 [ 44.947668][ T3916] EXT4-fs (loop0): 2 truncates cleaned up [ 44.950915][ T379] Bluetooth: hci1: Frame reassembly failed (-84) [ 45.000277][ T3916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.100552][ T29] audit: type=1400 audit(1791070654.016:443): avc: denied { write } for pid=3915 comm="syz.0.123" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.143575][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.191856][ T29] audit: type=1400 audit(1791070654.106:444): avc: denied { module_request } for pid=3877 comm="syz.1.118" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.237544][ T3924] loop0: detected capacity change from 0 to 512 [ 45.256689][ T3924] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.124: bg 0: block 385: padding at end of block bitmap is not set [ 45.256811][ T3924] fserror_report: 13 callbacks suppressed [ 45.256898][ T3924] loop0: lost filesystem error report for type 5 error -117 [ 45.258509][ T3924] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.258569][ T3924] loop0: lost filesystem error report for type 5 error -117 [ 45.261243][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.265843][ T3924] EXT4-fs (loop0): 2 truncates cleaned up [ 45.276510][ T3924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.276823][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 45.276843][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.453145][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.475712][ T3932] loop1: detected capacity change from 0 to 512 [ 45.538257][ T3932] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.125: bg 0: block 385: padding at end of block bitmap is not set [ 45.538346][ T3932] loop1: lost filesystem error report for type 5 error -117 [ 45.541157][ T3932] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.541344][ T3932] loop1: lost filesystem error report for type 5 error -117 [ 45.542520][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 45.542624][ C0] EXT4-fs (loop1): initial error at time 1791070654: ext4_validate_block_bitmap:445 [ 45.542687][ C0] EXT4-fs (loop1): last error at time 1791070654: ext4_mb_clear_bb:6680 [ 45.561652][ T3936] loop0: detected capacity change from 0 to 512 [ 45.625237][ T3932] EXT4-fs (loop1): 2 truncates cleaned up [ 45.666332][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.667578][ T3935] loop2: detected capacity change from 0 to 512 [ 45.694968][ T3936] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.126: bg 0: block 385: padding at end of block bitmap is not set [ 45.695303][ T3936] loop0: lost filesystem error report for type 5 error -117 [ 45.696336][ T3936] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.696727][ T3936] loop0: lost filesystem error report for type 5 error -117 [ 45.702804][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 45.702970][ C0] EXT4-fs (loop0): initial error at time 1791070654: ext4_validate_block_bitmap:445 [ 45.703101][ C0] EXT4-fs (loop0): last error at time 1791070654: ext4_mb_clear_bb:6680 [ 45.705044][ T3935] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.127: bg 0: block 385: padding at end of block bitmap is not set [ 45.705106][ T3935] loop2: lost filesystem error report for type 5 error -117 [ 45.705679][ T3935] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 45.705709][ T3935] loop2: lost filesystem error report for type 5 error -117 [ 45.707932][ T3935] EXT4-fs (loop2): 2 truncates cleaned up [ 45.713505][ T3935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.803092][ T3936] EXT4-fs (loop0): 2 truncates cleaned up [ 45.828220][ T3936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.946907][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.011260][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.096352][ T3949] loop4: detected capacity change from 0 to 512 [ 46.162837][ T3949] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.129: bg 0: block 385: padding at end of block bitmap is not set [ 46.162973][ T3949] loop4: lost filesystem error report for type 5 error -117 [ 46.164671][ T3949] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 46.164732][ T3949] loop4: lost filesystem error report for type 5 error -117 [ 46.168073][ T3949] EXT4-fs (loop4): 2 truncates cleaned up [ 46.180238][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.206029][ T3949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.306230][ T3953] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 46.399253][ T3956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.132: bg 0: block 385: padding at end of block bitmap is not set [ 46.401255][ T3956] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 46.402702][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 46.402732][ C1] EXT4-fs (loop1): initial error at time 1791070655: ext4_validate_block_bitmap:445 [ 46.402862][ C1] EXT4-fs (loop1): last error at time 1791070655: ext4_mb_clear_bb:6680 [ 46.407495][ T3956] EXT4-fs (loop1): 2 truncates cleaned up [ 46.413564][ T3956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.504989][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.563295][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.667126][ T3974] batadv_slave_0: entered promiscuous mode [ 46.844342][ T3969] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.135: bg 0: block 385: padding at end of block bitmap is not set [ 46.844805][ T3969] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 46.845941][ T3969] EXT4-fs (loop2): 2 truncates cleaned up [ 46.849202][ T3969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.953936][ T3565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 47.040677][ T94] Bluetooth: hci1: Frame reassembly failed (-84) [ 47.059074][ T3986] IPVS: Scheduler module ip_vs_mh not found [ 47.084404][ T3990] ip6t_hbh: too many supported opts specified [ 47.084668][ T3990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.142'. [ 47.204166][ T4004] netlink: 'syz.1.148': attribute type 16 has an invalid length. [ 47.309256][ T4017] ip6t_hbh: too many supported opts specified [ 47.309530][ T4017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 47.398063][ T4028] netlink: 'syz.1.159': attribute type 16 has an invalid length. [ 47.434345][ T3971] batadv_slave_0: left promiscuous mode [ 47.566519][ T4056] ip6t_hbh: too many supported opts specified [ 47.566885][ T4056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.172'. [ 47.567408][ T4053] netlink: 'syz.3.170': attribute type 16 has an invalid length. [ 48.027917][ T4152] IPVS: Scheduler module ip_vs_mh not found [ 48.095273][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 48.095299][ T29] audit: type=1400 audit(1791070657.016:1015): avc: denied { read } for pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.095663][ T29] audit: type=1400 audit(1791070657.016:1016): avc: denied { read write } for pid=4164 comm="syz.3.221" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.097037][ T29] audit: type=1400 audit(1791070657.016:1017): avc: denied { mounton } for pid=4164 comm="syz.3.221" path="/46/tracing" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 48.101964][ T29] audit: type=1400 audit(1791070657.016:1018): avc: denied { open } for pid=4166 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 48.101999][ T29] audit: type=1400 audit(1791070657.016:1019): avc: denied { execmem } for pid=4166 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 48.102022][ T29] audit: type=1400 audit(1791070657.016:1020): avc: denied { create } for pid=4166 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 48.132527][ T29] audit: type=1400 audit(1791070657.026:1021): avc: denied { read write } for pid=4166 comm="syz.1.222" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 48.132562][ T29] audit: type=1400 audit(1791070657.026:1022): avc: denied { create } for pid=4166 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 48.132641][ T29] audit: type=1400 audit(1791070657.026:1023): avc: denied { create } for pid=4166 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 48.132665][ T29] audit: type=1400 audit(1791070657.026:1024): avc: denied { module_request } for pid=4166 comm="syz.1.222" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 48.238942][ T3565] Bluetooth: hci0: command 0x1003 tx timeout [ 48.238976][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.860040][ T379] IPVS: starting estimator thread 0... [ 48.942728][ T4272] IPVS: using max 2016 ests per chain, 100800 per kthread [ 48.992680][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.113127][ T3555] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 49.762651][ T94] Bluetooth: hci1: Frame reassembly failed (-84) [ 51.032725][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 51.032763][ T3575] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.061903][ T54] IPVS: starting estimator thread 0... [ 51.077298][ T4496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.361'. [ 51.142689][ T4497] IPVS: using max 2064 ests per chain, 103200 per kthread [ 51.345757][ T94] IPVS: starting estimator thread 0... [ 51.373676][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 51.432954][ T4526] IPVS: using max 2352 ests per chain, 117600 per kthread [ 51.708196][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 51.832589][ T3575] Bluetooth: hci1: command 0x1003 tx timeout [ 51.832642][ T3565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 51.991097][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 52.273555][ T94] Bluetooth: hci0: Frame reassembly failed (-84) [ 52.354096][ T94] Bluetooth: hci1: Frame reassembly failed (-84) [ 52.434950][ T94] Bluetooth: hci2: Frame reassembly failed (-84) [ 52.824522][ T4630] ip6t_hbh: too many supported opts specified [ 52.824913][ T4630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 52.915711][ T379] Bluetooth: hci3: Frame reassembly failed (-84) [ 53.102563][ T29] kauditd_printk_skb: 25054 callbacks suppressed [ 53.102589][ T29] audit: type=1400 audit(1791070662.016:26079): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.102726][ T29] audit: type=1400 audit(1791070662.026:26080): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.102855][ T29] audit: type=1400 audit(1791070662.026:26081): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.102977][ T29] audit: type=1400 audit(1791070662.026:26082): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.103111][ T29] audit: type=1400 audit(1791070662.026:26083): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.103221][ T29] audit: type=1400 audit(1791070662.026:26084): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.103246][ T29] audit: type=1400 audit(1791070662.026:26085): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.103360][ T29] audit: type=1400 audit(1791070662.026:26086): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.103385][ T29] audit: type=1400 audit(1791070662.026:26087): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 53.103406][ T29] audit: type=1400 audit(1791070662.026:26088): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 54.312685][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.312696][ T3549] Bluetooth: hci0: command 0x1003 tx timeout [ 54.392642][ T3575] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 54.472543][ T3555] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 54.786082][ T4658] ip6t_hbh: too many supported opts specified [ 54.786393][ T4658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 54.886021][ T4667] ip6t_hbh: too many supported opts specified [ 54.889604][ T4667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 54.952770][ T44] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 55.048146][ T4684] ip6t_hbh: too many supported opts specified [ 55.048428][ T4684] netlink: 20 bytes leftover after parsing attributes in process `syz.0.446'. [ 55.120452][ T4690] netlink: 'syz.0.449': attribute type 16 has an invalid length. [ 55.151767][ T4695] ip6t_hbh: too many supported opts specified [ 55.154480][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.164469][ T4695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.451'. [ 55.318345][ T4713] ip6t_hbh: too many supported opts specified [ 55.319101][ T4713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 55.418356][ T4722] netlink: 'syz.2.463': attribute type 16 has an invalid length. [ 55.446351][ T4728] ip6t_hbh: too many supported opts specified [ 55.446694][ T4728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 55.610629][ T4742] ip6t_hbh: too many supported opts specified [ 55.611837][ T4742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.472'. [ 55.698770][ T4749] ip6t_hbh: too many supported opts specified [ 55.699197][ T4749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 55.786796][ T4753] netlink: 'syz.3.477': attribute type 16 has an invalid length. [ 55.807180][ T4757] ip6t_hbh: too many supported opts specified [ 55.809762][ T4757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.479'. [ 56.167520][ T4785] netlink: 'syz.2.489': attribute type 16 has an invalid length. [ 56.482865][ T4817] netlink: 'syz.4.507': attribute type 16 has an invalid length. [ 56.748305][ T4844] netlink: 'syz.2.520': attribute type 16 has an invalid length. [ 57.202873][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.256068][ T4876] netlink: 'syz.0.533': attribute type 16 has an invalid length. [ 57.672318][ T4899] netlink: 'syz.4.543': attribute type 16 has an invalid length. [ 58.112722][ T29] kauditd_printk_skb: 41667 callbacks suppressed [ 58.112752][ T29] audit: type=1400 audit(1791070667.026:66670): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.112909][ T29] audit: type=1400 audit(1791070667.036:66671): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.113046][ T29] audit: type=1400 audit(1791070667.036:66672): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.113132][ T29] audit: type=1400 audit(1791070667.036:66673): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.113238][ T29] audit: type=1400 audit(1791070667.036:66674): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.113343][ T29] audit: type=1400 audit(1791070667.036:66675): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.113554][ T29] audit: type=1400 audit(1791070667.036:66676): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.113760][ T29] audit: type=1400 audit(1791070667.036:66677): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.114021][ T29] audit: type=1400 audit(1791070667.036:66678): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.114213][ T29] audit: type=1400 audit(1791070667.036:66679): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 58.378016][ T4939] netlink: 'syz.0.561': attribute type 16 has an invalid length. [ 58.415727][ T4944] hbh_mt6_check: 6 callbacks suppressed [ 58.415751][ T4944] ip6t_hbh: too many supported opts specified [ 58.416461][ T4944] __nla_validate_parse: 6 callbacks suppressed [ 58.416514][ T4944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.563'. [ 58.417180][ T4942] ip6t_hbh: too many supported opts specified [ 58.417496][ T4942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 58.551011][ T4953] netlink: 'syz.4.567': attribute type 16 has an invalid length. [ 58.552791][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 58.774374][ T4973] ip6t_hbh: too many supported opts specified [ 58.775769][ T4973] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 58.908440][ T54] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.226967][ T5006] ip6t_hbh: too many supported opts specified [ 59.228799][ T5006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.588'. [ 59.325282][ T5015] ip6t_hbh: too many supported opts specified [ 59.325811][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.2.589'. [ 59.450271][ T5025] FAULT_INJECTION: forcing a failure. [ 59.450271][ T5025] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.450381][ T5025] CPU: 1 UID: 0 PID: 5025 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.450409][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.450428][ T5025] Call Trace: [ 59.450449][ T5025] [ 59.450457][ T5025] __dump_stack+0x1d/0x30 [ 59.450504][ T5025] dump_stack_lvl+0x95/0xd0 [ 59.450604][ T5025] dump_stack+0x15/0x1b [ 59.450626][ T5025] should_fail_ex+0x262/0x280 [ 59.450685][ T5025] should_fail+0xb/0x20 [ 59.450710][ T5025] should_fail_usercopy+0x1a/0x20 [ 59.450740][ T5025] _copy_from_user+0x1c/0xb0 [ 59.450770][ T5025] kstrtouint_from_user+0x69/0xf0 [ 59.450799][ T5025] ? 0xffffffff81000000 [ 59.450830][ T5025] ? avc_policy_seqno+0x15/0x30 [ 59.450887][ T5025] proc_fail_nth_write+0x50/0x160 [ 59.450925][ T5025] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.450973][ T5025] vfs_write+0x254/0x9a0 [ 59.451014][ T5025] ? __fget_files+0x184/0x1c0 [ 59.451051][ T5025] ? mutex_lock+0x57/0x90 [ 59.451117][ T5025] ksys_write+0xdc/0x1a0 [ 59.451216][ T5025] __x64_sys_write+0x40/0x50 [ 59.451307][ T5025] x64_sys_call+0x154e/0x2550 [ 59.451384][ T5025] do_syscall_64+0x112/0x360 [ 59.451411][ T5025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.451446][ T5025] RIP: 0033:0x7fac9c1ae98e [ 59.451463][ T5025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.451552][ T5025] RSP: 002b:00007fac9ac46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 59.451576][ T5025] RAX: ffffffffffffffda RBX: 00007fac9ac476c0 RCX: 00007fac9c1ae98e [ 59.451650][ T5025] RDX: 0000000000000001 RSI: 00007fac9ac470a0 RDI: 0000000000000003 [ 59.451663][ T5025] RBP: 00007fac9ac47090 R08: 0000000000000000 R09: 0000000000000000 [ 59.451674][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.451687][ T5025] R13: 00007fac9c476038 R14: 00007fac9c475fa0 R15: 00007ffdab6d21c8 [ 59.451708][ T5025] [ 59.529863][ T5034] ip6t_hbh: too many supported opts specified [ 59.531908][ T5034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 59.810717][ T5049] ip6t_hbh: too many supported opts specified [ 59.811371][ T5049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.607'. [ 60.077350][ T5083] FAULT_INJECTION: forcing a failure. [ 60.077350][ T5083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.077430][ T5083] CPU: 0 UID: 0 PID: 5083 Comm: syz.0.622 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.077455][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.077505][ T5083] Call Trace: [ 60.077555][ T5083] [ 60.077573][ T5083] __dump_stack+0x1d/0x30 [ 60.077601][ T5083] dump_stack_lvl+0x95/0xd0 [ 60.077625][ T5083] dump_stack+0x15/0x1b [ 60.077647][ T5083] should_fail_ex+0x262/0x280 [ 60.077741][ T5083] should_fail+0xb/0x20 [ 60.077825][ T5083] should_fail_usercopy+0x1a/0x20 [ 60.077856][ T5083] _copy_from_iter+0xcc/0xe70 [ 60.077893][ T5083] ? alloc_pages_mpol+0xdf/0x1d0 [ 60.077930][ T5083] copy_page_from_iter+0x15d/0x1f0 [ 60.077988][ T5083] tun_get_user+0x612/0x2870 [ 60.078027][ T5083] ? ref_tracker_alloc+0x1eb/0x2f0 [ 60.078067][ T5083] tun_chr_write_iter+0x15a/0x210 [ 60.078151][ T5083] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 60.078187][ T5083] vfs_write+0x57f/0x9a0 [ 60.078285][ T5083] ksys_write+0xdc/0x1a0 [ 60.078314][ T5083] __x64_sys_write+0x40/0x50 [ 60.078418][ T5083] x64_sys_call+0x154e/0x2550 [ 60.078441][ T5083] do_syscall_64+0x112/0x360 [ 60.078468][ T5083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.078547][ T5083] RIP: 0033:0x7ff2df4ee98e [ 60.078573][ T5083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.078592][ T5083] RSP: 002b:00007ff2ddf86fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 60.078616][ T5083] RAX: ffffffffffffffda RBX: 00007ff2ddf876c0 RCX: 00007ff2df4ee98e [ 60.078632][ T5083] RDX: 000000000000007a RSI: 0000200000000640 RDI: 00000000000000c8 [ 60.078725][ T5083] RBP: 00007ff2ddf87090 R08: 0000000000000000 R09: 0000000000000000 [ 60.078739][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.078753][ T5083] R13: 00007ff2df7b6038 R14: 00007ff2df7b5fa0 R15: 00007ffd2f60f248 [ 60.078841][ T5083] [ 60.129704][ T5085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.623'. [ 60.129757][ T5085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 60.965747][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 60.965785][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.100045][ T5109] validate_nla: 3 callbacks suppressed [ 61.100067][ T5109] netlink: 'syz.1.632': attribute type 16 has an invalid length. [ 61.396983][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.430039][ T379] Bluetooth: hci1: Frame reassembly failed (-84) [ 61.607116][ T5138] netlink: 'syz.2.644': attribute type 16 has an invalid length. [ 62.139844][ T5170] netlink: 'syz.1.656': attribute type 16 has an invalid length. [ 62.361411][ T5194] netlink: 'syz.1.669': attribute type 16 has an invalid length. [ 63.122536][ T29] kauditd_printk_skb: 24013 callbacks suppressed [ 63.122558][ T29] audit: type=1400 audit(1791070672.036:90447): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.122583][ T29] audit: type=1400 audit(1791070672.046:90448): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.122661][ T29] audit: type=1400 audit(1791070672.046:90449): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.122721][ T29] audit: type=1400 audit(1791070672.046:90450): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.122859][ T29] audit: type=1400 audit(1791070672.046:90451): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.122932][ T29] audit: type=1400 audit(1791070672.046:90452): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.122971][ T29] audit: type=1400 audit(1791070672.046:90453): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.123003][ T29] audit: type=1400 audit(1791070672.046:90454): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.123058][ T29] audit: type=1400 audit(1791070672.046:90455): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.123137][ T29] audit: type=1400 audit(1791070672.046:90456): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 63.432704][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.432789][ T3555] Bluetooth: hci1: command 0x1003 tx timeout [ 63.432808][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 63.737792][ T94] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.042089][ T5288] ip6t_hbh: too many supported opts specified [ 64.048899][ T5288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.708'. [ 64.203137][ T5299] FAULT_INJECTION: forcing a failure. [ 64.203137][ T5299] name failslab, interval 1, probability 0, space 0, times 1 [ 64.203170][ T5299] CPU: 0 UID: 0 PID: 5299 Comm: syz.3.712 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.203248][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.203262][ T5299] Call Trace: [ 64.203271][ T5299] [ 64.203280][ T5299] __dump_stack+0x1d/0x30 [ 64.203359][ T5299] dump_stack_lvl+0x95/0xd0 [ 64.203385][ T5299] dump_stack+0x15/0x1b [ 64.203408][ T5299] should_fail_ex+0x262/0x280 [ 64.203465][ T5299] should_failslab+0x8c/0xb0 [ 64.203504][ T5299] __kvmalloc_node_noprof+0x168/0x5c0 [ 64.203525][ T5299] ? __se_sys_add_key+0x1f8/0x360 [ 64.203554][ T5299] ? __se_sys_add_key+0x1f8/0x360 [ 64.203574][ T5299] __se_sys_add_key+0x1f8/0x360 [ 64.203657][ T5299] __x64_sys_add_key+0x67/0x80 [ 64.203677][ T5299] x64_sys_call+0x1fa9/0x2550 [ 64.203700][ T5299] do_syscall_64+0x112/0x360 [ 64.203734][ T5299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.203756][ T5299] RIP: 0033:0x7efd939ae159 [ 64.203771][ T5299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.203787][ T5299] RSP: 002b:00007efd923e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 64.203830][ T5299] RAX: ffffffffffffffda RBX: 00007efd93c36090 RCX: 00007efd939ae159 [ 64.203851][ T5299] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000040 [ 64.203863][ T5299] RBP: 00007efd923e6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.203875][ T5299] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000001 [ 64.203886][ T5299] R13: 00007efd93c36128 R14: 00007efd93c36090 R15: 00007ffc596de7e8 [ 64.203961][ T5299] [ 64.338905][ T5310] kernel profiling enabled (shift: 1) [ 64.348707][ T379] Bluetooth: hci1: Frame reassembly failed (-84) [ 64.734565][ T5317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.718'. [ 65.763748][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 65.763787][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 66.061845][ T5359] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 66.080890][ T5359] capability: warning: `syz.1.736' uses deprecated v2 capabilities in a way that may be insecure [ 66.201531][ T5372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.742'. [ 66.201555][ T5372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.742'. [ 66.392564][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 66.396036][ T5391] ip6t_hbh: too many supported opts specified [ 66.397279][ T5391] netlink: 20 bytes leftover after parsing attributes in process `syz.3.750'. [ 66.469664][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 66.471335][ T5398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 67.027966][ T5425] ip6t_hbh: too many supported opts specified [ 67.028733][ T5425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 67.032897][ T5427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=97 sclass=netlink_route_socket pid=5427 comm=syz.2.765 [ 67.392186][ T5435] ip6gre1: entered promiscuous mode [ 67.392213][ T5435] ip6gre1: entered allmulticast mode [ 67.404876][ T94] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.405045][ T94] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.433653][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.448877][ T5444] FAULT_INJECTION: forcing a failure. [ 67.448877][ T5444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.448907][ T5444] CPU: 1 UID: 0 PID: 5444 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.448942][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.448955][ T5444] Call Trace: [ 67.449043][ T5444] [ 67.449057][ T5444] __dump_stack+0x1d/0x30 [ 67.449161][ T5444] dump_stack_lvl+0x95/0xd0 [ 67.449181][ T5444] dump_stack+0x15/0x1b [ 67.449201][ T5444] should_fail_ex+0x262/0x280 [ 67.449259][ T5444] should_fail+0xb/0x20 [ 67.449293][ T5444] should_fail_usercopy+0x1a/0x20 [ 67.449371][ T5444] _copy_from_user+0x1c/0xb0 [ 67.449401][ T5444] kstrtouint_from_user+0x69/0xf0 [ 67.449426][ T5444] ? 0xffffffff81000000 [ 67.449441][ T5444] ? avc_policy_seqno+0x15/0x30 [ 67.449472][ T5444] proc_fail_nth_write+0x50/0x160 [ 67.449534][ T5444] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.449561][ T5444] vfs_write+0x254/0x9a0 [ 67.449694][ T5444] ? __fget_files+0x184/0x1c0 [ 67.449778][ T5444] ? mutex_lock+0x57/0x90 [ 67.449823][ T5444] ksys_write+0xdc/0x1a0 [ 67.449881][ T5444] __x64_sys_write+0x40/0x50 [ 67.449996][ T5444] x64_sys_call+0x154e/0x2550 [ 67.450029][ T5444] do_syscall_64+0x112/0x360 [ 67.450068][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.450189][ T5444] RIP: 0033:0x7efd9396e98e [ 67.450295][ T5444] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.450314][ T5444] RSP: 002b:00007efd92406fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.450335][ T5444] RAX: ffffffffffffffda RBX: 00007efd924076c0 RCX: 00007efd9396e98e [ 67.450407][ T5444] RDX: 0000000000000001 RSI: 00007efd924070a0 RDI: 0000000000000003 [ 67.450421][ T5444] RBP: 00007efd92407090 R08: 0000000000000000 R09: 0000000000000000 [ 67.450434][ T5444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.450469][ T5444] R13: 00007efd93c36038 R14: 00007efd93c35fa0 R15: 00007ffc596de7e8 [ 67.450524][ T5444] [ 67.534401][ T3082] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.592760][ T3082] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.132534][ T29] kauditd_printk_skb: 29573 callbacks suppressed [ 68.132601][ T29] audit: type=1400 audit(1791070677.046:119508): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.132628][ T29] audit: type=1400 audit(1791070677.046:119509): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.132682][ T29] audit: type=1400 audit(1791070677.056:119510): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.133433][ T29] audit: type=1400 audit(1791070677.056:119511): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.133460][ T29] audit: type=1400 audit(1791070677.056:119512): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.134031][ T29] audit: type=1400 audit(1791070677.056:119513): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.134622][ T29] audit: type=1400 audit(1791070677.056:119514): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.134909][ T29] audit: type=1400 audit(1791070677.056:119515): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.142602][ T29] audit: type=1400 audit(1791070677.056:119516): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.142697][ T29] audit: type=1400 audit(1791070677.056:119517): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 68.173386][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.285502][ T5473] FAULT_INJECTION: forcing a failure. [ 68.285502][ T5473] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.285562][ T5473] CPU: 1 UID: 0 PID: 5473 Comm: syz.4.781 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.285661][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.285676][ T5473] Call Trace: [ 68.285699][ T5473] [ 68.285709][ T5473] __dump_stack+0x1d/0x30 [ 68.285762][ T5473] dump_stack_lvl+0x95/0xd0 [ 68.285785][ T5473] dump_stack+0x15/0x1b [ 68.285806][ T5473] should_fail_ex+0x262/0x280 [ 68.285886][ T5473] should_fail_alloc_page+0xf2/0x100 [ 68.285930][ T5473] __alloc_frozen_pages_noprof+0x157/0x400 [ 68.285961][ T5473] alloc_pages_mpol+0xaf/0x1d0 [ 68.285994][ T5473] folio_alloc_mpol_noprof+0x39/0x80 [ 68.286093][ T5473] shmem_get_folio_gfp+0x3ff/0xd90 [ 68.286139][ T5473] shmem_fallocate+0x631/0x8d0 [ 68.286171][ T5473] vfs_fallocate+0x3ac/0x400 [ 68.286272][ T5473] __x64_sys_fallocate+0x7a/0xd0 [ 68.286342][ T5473] x64_sys_call+0x1e1d/0x2550 [ 68.286369][ T5473] do_syscall_64+0x112/0x360 [ 68.286399][ T5473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.286424][ T5473] RIP: 0033:0x7f487a5ee159 [ 68.286449][ T5473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.286473][ T5473] RSP: 002b:00007f4879047028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 68.286500][ T5473] RAX: ffffffffffffffda RBX: 00007f487a875fa0 RCX: 00007f487a5ee159 [ 68.286515][ T5473] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 68.286528][ T5473] RBP: 00007f4879047090 R08: 0000000000000000 R09: 0000000000000000 [ 68.286610][ T5473] R10: 00000000040000b7 R11: 0000000000000246 R12: 0000000000000001 [ 68.286623][ T5473] R13: 00007f487a876038 R14: 00007f487a875fa0 R15: 00007fff5d1e0e48 [ 68.286643][ T5473] [ 68.857111][ T5502] ip6t_hbh: too many supported opts specified [ 68.857305][ T94] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.857794][ T5502] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 69.169155][ T5526] FAULT_INJECTION: forcing a failure. [ 69.169155][ T5526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.169199][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.3.803 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.169229][ T5526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.169243][ T5526] Call Trace: [ 69.169250][ T5526] [ 69.169334][ T5526] __dump_stack+0x1d/0x30 [ 69.169373][ T5526] dump_stack_lvl+0x95/0xd0 [ 69.169402][ T5526] dump_stack+0x15/0x1b [ 69.169424][ T5526] should_fail_ex+0x262/0x280 [ 69.169521][ T5526] should_fail+0xb/0x20 [ 69.169548][ T5526] should_fail_usercopy+0x1a/0x20 [ 69.169580][ T5526] _copy_from_user+0x1c/0xb0 [ 69.169646][ T5526] ___sys_sendmsg+0xc1/0x1e0 [ 69.169699][ T5526] __x64_sys_sendmsg+0xd4/0x160 [ 69.169801][ T5526] x64_sys_call+0x22ab/0x2550 [ 69.169902][ T5526] do_syscall_64+0x112/0x360 [ 69.170031][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.170053][ T5526] RIP: 0033:0x7efd939ae159 [ 69.170069][ T5526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.170085][ T5526] RSP: 002b:00007efd92407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.170182][ T5526] RAX: ffffffffffffffda RBX: 00007efd93c35fa0 RCX: 00007efd939ae159 [ 69.170201][ T5526] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 69.170215][ T5526] RBP: 00007efd92407090 R08: 0000000000000000 R09: 0000000000000000 [ 69.170230][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.170244][ T5526] R13: 00007efd93c36038 R14: 00007efd93c35fa0 R15: 00007ffc596de7e8 [ 69.170265][ T5526] [ 69.367048][ T5532] netlink: 'syz.3.806': attribute type 16 has an invalid length. [ 69.672602][ T5560] netlink: 'syz.3.818': attribute type 16 has an invalid length. [ 69.758969][ T54] Bluetooth: hci1: Frame reassembly failed (-84) [ 69.916678][ T5587] netlink: 'syz.4.829': attribute type 16 has an invalid length. [ 69.973467][ T5592] FAULT_INJECTION: forcing a failure. [ 69.973467][ T5592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.973507][ T5592] CPU: 1 UID: 0 PID: 5592 Comm: syz.4.831 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.973568][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.973581][ T5592] Call Trace: [ 69.973587][ T5592] [ 69.973596][ T5592] __dump_stack+0x1d/0x30 [ 69.973674][ T5592] dump_stack_lvl+0x95/0xd0 [ 69.973697][ T5592] dump_stack+0x15/0x1b [ 69.973716][ T5592] should_fail_ex+0x262/0x280 [ 69.973744][ T5592] should_fail+0xb/0x20 [ 69.973768][ T5592] should_fail_usercopy+0x1a/0x20 [ 69.973923][ T5592] _copy_from_iter+0xcc/0xe70 [ 69.974120][ T5592] ? alloc_pages_mpol+0xdf/0x1d0 [ 69.974153][ T5592] copy_page_from_iter+0x15d/0x1f0 [ 69.974183][ T5592] tun_get_user+0x612/0x2870 [ 69.974284][ T5592] ? ref_tracker_alloc+0x1eb/0x2f0 [ 69.974312][ T5592] tun_chr_write_iter+0x15a/0x210 [ 69.974351][ T5592] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 69.974452][ T5592] vfs_write+0x57f/0x9a0 [ 69.974488][ T5592] ksys_write+0xdc/0x1a0 [ 69.974521][ T5592] __x64_sys_write+0x40/0x50 [ 69.974552][ T5592] x64_sys_call+0x154e/0x2550 [ 69.974626][ T5592] do_syscall_64+0x112/0x360 [ 69.974723][ T5592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.974807][ T5592] RIP: 0033:0x7f487a5ae98e [ 69.974822][ T5592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 69.974840][ T5592] RSP: 002b:00007f4879046fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.974899][ T5592] RAX: ffffffffffffffda RBX: 00007f48790476c0 RCX: 00007f487a5ae98e [ 69.974915][ T5592] RDX: 0000000000000036 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 69.974970][ T5592] RBP: 00007f4879047090 R08: 0000000000000000 R09: 0000000000000000 [ 69.974985][ T5592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.974999][ T5592] R13: 00007f487a876038 R14: 00007f487a875fa0 R15: 00007fff5d1e0e48 [ 69.975019][ T5592] [ 70.003409][ T5595] ip6t_hbh: too many supported opts specified [ 70.872584][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.982644][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'. [ 71.058164][ T5617] netlink: 'syz.1.840': attribute type 16 has an invalid length. [ 71.075528][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'. [ 71.095792][ T5626] ip6t_hbh: too many supported opts specified [ 71.160676][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.167850][ T5630] ip6t_hbh: too many supported opts specified [ 71.170116][ T5630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.846'. [ 71.191162][ T5632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.847'. [ 71.299667][ T5646] netlink: 'syz.1.851': attribute type 7 has an invalid length. [ 71.410697][ T5658] netlink: 'syz.0.854': attribute type 16 has an invalid length. [ 71.842613][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 71.845952][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 71.845992][ T3565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 71.984975][ T5668] ip6t_hbh: too many supported opts specified [ 71.985290][ T5668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'. [ 72.416450][ T5687] netlink: 'syz.1.865': attribute type 16 has an invalid length. [ 72.431460][ T5694] FAULT_INJECTION: forcing a failure. [ 72.431460][ T5694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.431494][ T5694] CPU: 0 UID: 0 PID: 5694 Comm: syz.0.869 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.431537][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.431564][ T5694] Call Trace: [ 72.431632][ T5694] [ 72.431640][ T5694] __dump_stack+0x1d/0x30 [ 72.431742][ T5694] dump_stack_lvl+0x95/0xd0 [ 72.431763][ T5694] dump_stack+0x15/0x1b [ 72.431784][ T5694] should_fail_ex+0x262/0x280 [ 72.431810][ T5694] should_fail+0xb/0x20 [ 72.431905][ T5694] should_fail_usercopy+0x1a/0x20 [ 72.431952][ T5694] strncpy_from_user+0x27/0x250 [ 72.432017][ T5694] do_getname+0x59/0x1c0 [ 72.432075][ T5694] getname_flags+0x1d/0x30 [ 72.432146][ T5694] do_sys_openat2+0x6c/0x130 [ 72.432174][ T5694] __x64_sys_openat+0xf2/0x120 [ 72.432201][ T5694] x64_sys_call+0x1f72/0x2550 [ 72.432225][ T5694] do_syscall_64+0x112/0x360 [ 72.432306][ T5694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.432332][ T5694] RIP: 0033:0x7ff2df52e159 [ 72.432350][ T5694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.432367][ T5694] RSP: 002b:00007ff2ddf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.432386][ T5694] RAX: ffffffffffffffda RBX: 00007ff2df7b5fa0 RCX: 00007ff2df52e159 [ 72.432399][ T5694] RDX: 0000000000000382 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 72.432486][ T5694] RBP: 00007ff2ddf87090 R08: 0000000000000000 R09: 0000000000000000 [ 72.432498][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.432509][ T5694] R13: 00007ff2df7b6038 R14: 00007ff2df7b5fa0 R15: 00007ffd2f60f248 [ 72.432526][ T5694] [ 72.622195][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 72.634670][ T5705] FAULT_INJECTION: forcing a failure. [ 72.634670][ T5705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.634703][ T5705] CPU: 1 UID: 0 PID: 5705 Comm: syz.0.875 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.634776][ T5705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.634790][ T5705] Call Trace: [ 72.634797][ T5705] [ 72.634805][ T5705] __dump_stack+0x1d/0x30 [ 72.634868][ T5705] dump_stack_lvl+0x95/0xd0 [ 72.634918][ T5705] dump_stack+0x15/0x1b [ 72.634938][ T5705] should_fail_ex+0x262/0x280 [ 72.634963][ T5705] should_fail+0xb/0x20 [ 72.635064][ T5705] should_fail_usercopy+0x1a/0x20 [ 72.635092][ T5705] _copy_to_user+0x20/0xa0 [ 72.635127][ T5705] simple_read_from_buffer+0xb5/0x130 [ 72.635198][ T5705] proc_fail_nth_read+0x10e/0x150 [ 72.635229][ T5705] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.635255][ T5705] vfs_read+0x18e/0x7c0 [ 72.635286][ T5705] ? __rcu_read_unlock+0x4e/0x70 [ 72.635362][ T5705] ? __fget_files+0x184/0x1c0 [ 72.635437][ T5705] ? mutex_lock+0x57/0x90 [ 72.635528][ T5705] ksys_read+0xdc/0x1a0 [ 72.635561][ T5705] __x64_sys_read+0x40/0x50 [ 72.635589][ T5705] x64_sys_call+0x2135/0x2550 [ 72.635617][ T5705] do_syscall_64+0x112/0x360 [ 72.635703][ T5705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.635728][ T5705] RIP: 0033:0x7ff2df4ee98e [ 72.635746][ T5705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.635856][ T5705] RSP: 002b:00007ff2ddf86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.635876][ T5705] RAX: ffffffffffffffda RBX: 00007ff2ddf876c0 RCX: 00007ff2df4ee98e [ 72.635892][ T5705] RDX: 000000000000000f RSI: 00007ff2ddf870a0 RDI: 0000000000000003 [ 72.635907][ T5705] RBP: 00007ff2ddf87090 R08: 0000000000000000 R09: 0000000000000000 [ 72.635922][ T5705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.635940][ T5705] R13: 00007ff2df7b6038 R14: 00007ff2df7b5fa0 R15: 00007ffd2f60f248 [ 72.636039][ T5705] [ 72.901244][ T54] Bluetooth: hci1: Frame reassembly failed (-84) [ 72.921899][ T5717] netlink: 'syz.4.880': attribute type 16 has an invalid length. [ 72.967155][ T5721] netlink: 'syz.4.881': attribute type 22 has an invalid length. [ 72.967175][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 72.991207][ T5721] netlink: 'syz.4.881': attribute type 22 has an invalid length. [ 72.991227][ T5721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 72.992636][ T54] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.993152][ T54] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.993217][ T54] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.993251][ T54] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.142730][ T29] kauditd_printk_skb: 26897 callbacks suppressed [ 73.142750][ T29] audit: type=1400 audit(2000000004.570:143887): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.142778][ T29] audit: type=1400 audit(2000000004.570:143888): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.142803][ T29] audit: type=1400 audit(2000000004.570:143889): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.142836][ T29] audit: type=1400 audit(2000000004.570:143890): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.142861][ T29] audit: type=1400 audit(2000000004.570:143891): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.142967][ T29] audit: type=1400 audit(2000000004.570:143892): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.142993][ T29] audit: type=1400 audit(2000000004.570:143893): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.143017][ T29] audit: type=1400 audit(2000000004.570:143894): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.143096][ T29] audit: type=1400 audit(2000000004.570:143895): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.143120][ T29] audit: type=1400 audit(2000000004.570:143896): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 73.203811][ T3555] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.356268][ T94] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.962584][ T3555] Bluetooth: hci1: command 0x1003 tx timeout [ 74.962702][ T3565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 75.632230][ T5822] FAULT_INJECTION: forcing a failure. [ 75.632230][ T5822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.632272][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.0.920 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.632349][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.632360][ T5822] Call Trace: [ 75.632367][ T5822] [ 75.632374][ T5822] __dump_stack+0x1d/0x30 [ 75.632398][ T5822] dump_stack_lvl+0x95/0xd0 [ 75.632422][ T5822] dump_stack+0x15/0x1b [ 75.632459][ T5822] should_fail_ex+0x262/0x280 [ 75.632487][ T5822] should_fail+0xb/0x20 [ 75.632507][ T5822] should_fail_usercopy+0x1a/0x20 [ 75.632613][ T5822] _copy_from_user+0x1c/0xb0 [ 75.632643][ T5822] ___sys_sendmsg+0xc1/0x1e0 [ 75.632675][ T5822] __x64_sys_sendmsg+0xd4/0x160 [ 75.632736][ T5822] x64_sys_call+0x22ab/0x2550 [ 75.632760][ T5822] do_syscall_64+0x112/0x360 [ 75.632784][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.632849][ T5822] RIP: 0033:0x7ff2df52e159 [ 75.632864][ T5822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.632880][ T5822] RSP: 002b:00007ff2ddf87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.633061][ T5822] RAX: ffffffffffffffda RBX: 00007ff2df7b5fa0 RCX: 00007ff2df52e159 [ 75.633077][ T5822] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 75.633092][ T5822] RBP: 00007ff2ddf87090 R08: 0000000000000000 R09: 0000000000000000 [ 75.633107][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.633121][ T5822] R13: 00007ff2df7b6038 R14: 00007ff2df7b5fa0 R15: 00007ffd2f60f248 [ 75.633139][ T5822] [ 75.986095][ T5840] ip6t_hbh: too many supported opts specified [ 75.987454][ T5840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.925'. [ 76.059314][ T379] Bluetooth: hci1: Frame reassembly failed (-84) [ 76.402975][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 76.403087][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.354354][ T5872] ip6t_hbh: too many supported opts specified [ 77.358097][ T5872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.936'. [ 78.072711][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 78.072738][ T3565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 78.153829][ T29] kauditd_printk_skb: 24708 callbacks suppressed [ 78.153847][ T29] audit: type=1400 audit(2000000009.580:168354): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.153869][ T29] audit: type=1400 audit(2000000009.590:168355): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.153893][ T29] audit: type=1400 audit(2000000009.590:168356): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.153993][ T29] audit: type=1400 audit(2000000009.590:168357): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.154017][ T29] audit: type=1400 audit(2000000009.590:168358): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.154041][ T29] audit: type=1400 audit(2000000009.590:168359): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.154123][ T29] audit: type=1400 audit(2000000009.590:168360): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.154147][ T29] audit: type=1400 audit(2000000009.590:168361): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.154205][ T29] audit: type=1400 audit(2000000009.590:168362): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.154227][ T29] audit: type=1400 audit(2000000009.590:168363): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 78.192841][ T94] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.231786][ T379] Bluetooth: hci1: Frame reassembly failed (-84) [ 78.758898][ T5928] veth0_vlan: left promiscuous mode [ 79.722977][ T54] Bluetooth: hci2: Frame reassembly failed (-84) [ 80.232549][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.232641][ T3565] Bluetooth: hci1: command 0x1003 tx timeout [ 80.234915][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 80.792564][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 81.060900][ T5992] ip6t_hbh: too many supported opts specified [ 81.061337][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.985'. [ 81.116430][ T54] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.752625][ T3555] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 81.834451][ T6016] FAULT_INJECTION: forcing a failure. [ 81.834451][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.834483][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.0.994 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.834506][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.834518][ T6016] Call Trace: [ 81.834525][ T6016] [ 81.834588][ T6016] __dump_stack+0x1d/0x30 [ 81.834626][ T6016] dump_stack_lvl+0x95/0xd0 [ 81.834646][ T6016] dump_stack+0x15/0x1b [ 81.834678][ T6016] should_fail_ex+0x262/0x280 [ 81.834739][ T6016] should_fail+0xb/0x20 [ 81.834765][ T6016] should_fail_usercopy+0x1a/0x20 [ 81.834796][ T6016] strncpy_from_user+0x27/0x250 [ 81.834870][ T6016] __se_sys_memfd_create+0x20f/0x3b0 [ 81.834900][ T6016] __x64_sys_memfd_create+0x31/0x40 [ 81.834926][ T6016] x64_sys_call+0x1955/0x2550 [ 81.834951][ T6016] do_syscall_64+0x112/0x360 [ 81.835053][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.835077][ T6016] RIP: 0033:0x7ff2df52e159 [ 81.835093][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.835117][ T6016] RSP: 002b:00007ff2ddf86e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 81.835139][ T6016] RAX: ffffffffffffffda RBX: 0000000000000524 RCX: 00007ff2df52e159 [ 81.835224][ T6016] RDX: 00007ff2ddf86ee0 RSI: 0000000000000000 RDI: 00007ff2df5c524b [ 81.835239][ T6016] RBP: 0000200000001900 R08: 00000000ffffffff R09: 0000000000000000 [ 81.835254][ T6016] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000200 [ 81.835269][ T6016] R13: 00007ff2ddf86ee0 R14: 00007ff2ddf86ea0 R15: 0000200000000600 [ 81.835286][ T6016] [ 81.879367][ T6019] syz.0.995 uses obsolete (PF_INET,SOCK_PACKET) [ 81.984196][ T6024] FAULT_INJECTION: forcing a failure. [ 81.984196][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.984227][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.0.997 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.984301][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.984314][ T6024] Call Trace: [ 81.984322][ T6024] [ 81.984331][ T6024] __dump_stack+0x1d/0x30 [ 81.984370][ T6024] dump_stack_lvl+0x95/0xd0 [ 81.984393][ T6024] dump_stack+0x15/0x1b [ 81.984413][ T6024] should_fail_ex+0x262/0x280 [ 81.984452][ T6024] should_fail+0xb/0x20 [ 81.984627][ T6024] should_fail_usercopy+0x1a/0x20 [ 81.984656][ T6024] _copy_to_user+0x20/0xa0 [ 81.984687][ T6024] simple_read_from_buffer+0xb5/0x130 [ 81.984714][ T6024] proc_fail_nth_read+0x10e/0x150 [ 81.984810][ T6024] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.984912][ T6024] vfs_read+0x18e/0x7c0 [ 81.984954][ T6024] ? __rcu_read_unlock+0x4e/0x70 [ 81.984988][ T6024] ? __fget_files+0x184/0x1c0 [ 81.985012][ T6024] ? mutex_lock+0x57/0x90 [ 81.985119][ T6024] ksys_read+0xdc/0x1a0 [ 81.985175][ T6024] __x64_sys_read+0x40/0x50 [ 81.985206][ T6024] x64_sys_call+0x2135/0x2550 [ 81.985303][ T6024] do_syscall_64+0x112/0x360 [ 81.985330][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.985355][ T6024] RIP: 0033:0x7ff2df4ee98e [ 81.985372][ T6024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.985391][ T6024] RSP: 002b:00007ff2ddf86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.985413][ T6024] RAX: ffffffffffffffda RBX: 00007ff2ddf876c0 RCX: 00007ff2df4ee98e [ 81.985475][ T6024] RDX: 000000000000000f RSI: 00007ff2ddf870a0 RDI: 0000000000000004 [ 81.985489][ T6024] RBP: 00007ff2ddf87090 R08: 0000000000000000 R09: 0000000000000000 [ 81.985503][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.985516][ T6024] R13: 00007ff2df7b6038 R14: 00007ff2df7b5fa0 R15: 00007ffd2f60f248 [ 81.985560][ T6024] [ 82.408440][ T6042] ip6t_hbh: too many supported opts specified [ 82.408854][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1005'. [ 82.536997][ T6055] ip6t_hbh: too many supported opts specified [ 82.538124][ T6055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1009'. [ 82.623021][ T6068] FAULT_INJECTION: forcing a failure. [ 82.623021][ T6068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.623060][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.4.1015 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.623157][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.623168][ T6068] Call Trace: [ 82.623174][ T6068] [ 82.623181][ T6068] __dump_stack+0x1d/0x30 [ 82.623256][ T6068] dump_stack_lvl+0x95/0xd0 [ 82.623280][ T6068] dump_stack+0x15/0x1b [ 82.623301][ T6068] should_fail_ex+0x262/0x280 [ 82.623340][ T6068] should_fail+0xb/0x20 [ 82.623366][ T6068] should_fail_usercopy+0x1a/0x20 [ 82.623403][ T6068] _copy_to_user+0x20/0xa0 [ 82.623431][ T6068] simple_read_from_buffer+0xb5/0x130 [ 82.623459][ T6068] proc_fail_nth_read+0x10e/0x150 [ 82.623516][ T6068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.623575][ T6068] vfs_read+0x18e/0x7c0 [ 82.623602][ T6068] ? __rcu_read_unlock+0x4e/0x70 [ 82.623634][ T6068] ? __fget_files+0x184/0x1c0 [ 82.623719][ T6068] ? mutex_lock+0x57/0x90 [ 82.623753][ T6068] ksys_read+0xdc/0x1a0 [ 82.623787][ T6068] __x64_sys_read+0x40/0x50 [ 82.623856][ T6068] x64_sys_call+0x2135/0x2550 [ 82.623886][ T6068] do_syscall_64+0x112/0x360 [ 82.623976][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.623998][ T6068] RIP: 0033:0x7f487a5ae98e [ 82.624013][ T6068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 82.624029][ T6068] RSP: 002b:00007f4879046fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.624101][ T6068] RAX: ffffffffffffffda RBX: 00007f48790476c0 RCX: 00007f487a5ae98e [ 82.624117][ T6068] RDX: 000000000000000f RSI: 00007f48790470a0 RDI: 0000000000000003 [ 82.624131][ T6068] RBP: 00007f4879047090 R08: 0000000000000000 R09: 0000000000000000 [ 82.624145][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.624158][ T6068] R13: 00007f487a876038 R14: 00007f487a875fa0 R15: 00007fff5d1e0e48 [ 82.624179][ T6068] [ 82.850062][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1020'. [ 83.081887][ T6091] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.162793][ T29] kauditd_printk_skb: 38568 callbacks suppressed [ 83.162944][ T29] audit: type=1400 audit(2000000014.590:206932): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.162974][ T29] audit: type=1400 audit(2000000014.600:206933): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163063][ T29] audit: type=1400 audit(2000000014.600:206934): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163086][ T29] audit: type=1400 audit(2000000014.600:206935): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163106][ T29] audit: type=1400 audit(2000000014.600:206936): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163126][ T29] audit: type=1400 audit(2000000014.600:206937): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163229][ T29] audit: type=1400 audit(2000000014.600:206938): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163276][ T29] audit: type=1400 audit(2000000014.600:206939): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163329][ T29] audit: type=1400 audit(2000000014.600:206940): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.163504][ T29] audit: type=1400 audit(2000000014.600:206941): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 83.202597][ T3555] Bluetooth: hci0: command 0x1003 tx timeout [ 83.202620][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.594563][ T6106] FAULT_INJECTION: forcing a failure. [ 83.594563][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 83.594625][ T6106] CPU: 1 UID: 0 PID: 6106 Comm: syz.0.1029 Not tainted syzkaller #0 PREEMPT(lazy) [ 83.594680][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.594745][ T6106] Call Trace: [ 83.594752][ T6106] [ 83.594761][ T6106] __dump_stack+0x1d/0x30 [ 83.594787][ T6106] dump_stack_lvl+0x95/0xd0 [ 83.594806][ T6106] dump_stack+0x15/0x1b [ 83.594902][ T6106] should_fail_ex+0x262/0x280 [ 83.594940][ T6106] ? dup_fd+0x3a/0x530 [ 83.594961][ T6106] should_failslab+0x8c/0xb0 [ 83.594997][ T6106] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 83.595078][ T6106] ? dup_fd+0x3a/0x530 [ 83.595156][ T6106] dup_fd+0x3a/0x530 [ 83.595187][ T6106] ? _raw_spin_unlock+0x9/0x30 [ 83.595217][ T6106] ksys_unshare+0x36c/0x710 [ 83.595244][ T6106] ? ksys_write+0x194/0x1a0 [ 83.595323][ T6106] __x64_sys_unshare+0x1f/0x30 [ 83.595378][ T6106] x64_sys_call+0x1e33/0x2550 [ 83.595402][ T6106] do_syscall_64+0x112/0x360 [ 83.595492][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.595585][ T6106] RIP: 0033:0x7ff2df52e159 [ 83.595603][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.595631][ T6106] RSP: 002b:00007ff2ddf45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 83.595649][ T6106] RAX: ffffffffffffffda RBX: 00007ff2df7b6180 RCX: 00007ff2df52e159 [ 83.595662][ T6106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 83.595690][ T6106] RBP: 00007ff2ddf45090 R08: 0000000000000000 R09: 0000000000000000 [ 83.595704][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.595717][ T6106] R13: 00007ff2df7b6218 R14: 00007ff2df7b6180 R15: 00007ffd2f60f248 [ 83.595738][ T6106] [ 83.817435][ T6117] validate_nla: 1 callbacks suppressed [ 83.817453][ T6117] netlink: 'syz.4.1034': attribute type 16 has an invalid length. [ 83.817466][ T6117] netlink: 'syz.4.1034': attribute type 17 has an invalid length. [ 84.185981][ T6127] FAULT_INJECTION: forcing a failure. [ 84.185981][ T6127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.186014][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.2.1038 Not tainted syzkaller #0 PREEMPT(lazy) [ 84.186120][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.186143][ T6127] Call Trace: [ 84.186149][ T6127] [ 84.186157][ T6127] __dump_stack+0x1d/0x30 [ 84.186253][ T6127] dump_stack_lvl+0x95/0xd0 [ 84.186273][ T6127] dump_stack+0x15/0x1b [ 84.186294][ T6127] should_fail_ex+0x262/0x280 [ 84.186377][ T6127] should_fail+0xb/0x20 [ 84.186401][ T6127] should_fail_usercopy+0x1a/0x20 [ 84.186427][ T6127] _copy_to_user+0x20/0xa0 [ 84.186458][ T6127] simple_read_from_buffer+0xb5/0x130 [ 84.186482][ T6127] proc_fail_nth_read+0x10e/0x150 [ 84.186505][ T6127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.186530][ T6127] vfs_read+0x18e/0x7c0 [ 84.186642][ T6127] ? __rcu_read_unlock+0x4e/0x70 [ 84.186756][ T6127] ? __fget_files+0x184/0x1c0 [ 84.186782][ T6127] ? fput+0x91/0xc0 [ 84.186805][ T6127] ? mutex_lock+0x57/0x90 [ 84.186917][ T6127] ksys_read+0xdc/0x1a0 [ 84.186972][ T6127] __x64_sys_read+0x40/0x50 [ 84.187013][ T6127] x64_sys_call+0x2135/0x2550 [ 84.187038][ T6127] do_syscall_64+0x112/0x360 [ 84.187061][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.187091][ T6127] RIP: 0033:0x7fc280cae98e [ 84.187108][ T6127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.187128][ T6127] RSP: 002b:00007fc27f746fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.187173][ T6127] RAX: ffffffffffffffda RBX: 00007fc27f7476c0 RCX: 00007fc280cae98e [ 84.187189][ T6127] RDX: 000000000000000f RSI: 00007fc27f7470a0 RDI: 0000000000000004 [ 84.187202][ T6127] RBP: 00007fc27f747090 R08: 0000000000000000 R09: 0000000000000000 [ 84.187216][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.187233][ T6127] R13: 00007fc280f76038 R14: 00007fc280f75fa0 R15: 00007fffc68998e8 [ 84.187250][ T6127] [ 84.632865][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 84.632946][ T3565] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 84.633242][ T6151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=6151 comm=syz.0.1049 [ 84.703226][ T6160] ip6t_hbh: too many supported opts specified [ 84.703551][ T6160] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 85.087033][ T379] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.171224][ T6196] ip6t_hbh: too many supported opts specified [ 85.171586][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'. [ 85.809565][ T6222] ip6t_hbh: too many supported opts specified [ 85.811303][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1077'. [ 85.829312][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1078'. [ 85.845843][ T6225] ================================================================== [ 85.845872][ T6225] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 85.845899][ T6225] [ 85.845905][ T6225] write to 0xffffea00047a4898 of 8 bytes by task 6224 on cpu 0: [ 85.845925][ T6225] __filemap_remove_folio+0x201/0x2e0 [ 85.845947][ T6225] filemap_remove_folio+0x6d/0x1d0 [ 85.845965][ T6225] truncate_inode_folio+0x42/0x50 [ 85.845992][ T6225] shmem_undo_range+0x27f/0xb60 [ 85.846017][ T6225] shmem_evict_inode+0x12d/0x580 [ 85.846034][ T6225] evict+0x2a5/0x510 [ 85.846059][ T6225] iput+0x430/0x5a0 [ 85.846078][ T6225] dentry_unlink_inode+0x24a/0x260 [ 85.846104][ T6225] dentry_kill+0x184/0x500 [ 85.846119][ T6225] finish_dput+0x16/0x1d0 [ 85.846138][ T6225] dput+0x48/0x50 [ 85.846163][ T6225] __fput+0x43e/0x630 [ 85.846182][ T6225] fput_close_sync+0xad/0x190 [ 85.846203][ T6225] __x64_sys_close+0x55/0xf0 [ 85.846225][ T6225] x64_sys_call+0x812/0x2550 [ 85.846248][ T6225] do_syscall_64+0x112/0x360 [ 85.846268][ T6225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.846287][ T6225] [ 85.846292][ T6225] read to 0xffffea00047a4898 of 8 bytes by task 6225 on cpu 1: [ 85.846306][ T6225] folio_mapping+0xa1/0xe0 [ 85.846328][ T6225] lru_add+0x80/0x420 [ 85.846349][ T6225] folio_batch_move_lru+0x2d6/0x3d0 [ 85.846373][ T6225] folio_add_lru+0x14a/0x250 [ 85.846394][ T6225] folio_add_lru_vma+0x49/0x70 [ 85.846416][ T6225] do_wp_page+0x12c1/0x1ed0 [ 85.846436][ T6225] handle_mm_fault+0xe29/0x3bb0 [ 85.846456][ T6225] do_user_addr_fault+0x636/0x1060 [ 85.846484][ T6225] exc_page_fault+0x62/0xa0 [ 85.846511][ T6225] asm_exc_page_fault+0x26/0x30 [ 85.846528][ T6225] [ 85.846532][ T6225] value changed: 0xffff88811b55fb00 -> 0x0000000000000000 [ 85.846546][ T6225] [ 85.846550][ T6225] Reported by Kernel Concurrency Sanitizer on: [ 85.846560][ T6225] CPU: 1 UID: 0 PID: 6225 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 85.846582][ T6225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.846596][ T6225] ================================================================== [ 87.112609][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 87.112655][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.172542][ T29] kauditd_printk_skb: 38636 callbacks suppressed [ 88.172558][ T29] audit: type=1400 audit(2000000019.600:245266): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.172670][ T29] audit: type=1400 audit(2000000019.610:245267): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.172730][ T29] audit: type=1400 audit(2000000019.610:245268): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.172816][ T29] audit: type=1400 audit(2000000019.610:245269): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.172884][ T29] audit: type=1400 audit(2000000019.610:245270): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.172998][ T29] audit: type=1400 audit(2000000019.610:245271): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.173162][ T29] audit: type=1400 audit(2000000019.610:245272): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.173283][ T29] audit: type=1400 audit(2000000019.610:245273): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.173343][ T29] audit: type=1400 audit(2000000019.610:245274): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 88.173431][ T29] audit: type=1400 audit(2000000019.610:245275): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.182724][ T29] kauditd_printk_skb: 54036 callbacks suppressed [ 93.182742][ T29] audit: type=1400 audit(2000000024.610:299312): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.182768][ T29] audit: type=1400 audit(2000000024.620:299313): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.182803][ T29] audit: type=1400 audit(2000000024.620:299314): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.182891][ T29] audit: type=1400 audit(2000000024.620:299315): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.182916][ T29] audit: type=1400 audit(2000000024.620:299316): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.182939][ T29] audit: type=1400 audit(2000000024.620:299317): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.182964][ T29] audit: type=1400 audit(2000000024.620:299318): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.183058][ T29] audit: type=1400 audit(2000000024.620:299319): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.183079][ T29] audit: type=1400 audit(2000000024.620:299320): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 93.183174][ T29] audit: type=1400 audit(2000000024.620:299321): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0