last executing test programs: 11.549057424s ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x204041, 0x101) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (rerun: 32) dup2(r2, r0) (async) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') 10.879048103s ago: executing program 1 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0x20000001}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0x20c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4a845}, 0x48848) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'caif0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x78, r2}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000100), 0xfd, 0x4a5, &(0x7f0000000e00)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShYBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdCkV5aPa1MZmbdJLtJk02yafbzgWnm2X1mnuc7zzwzz8zsNIC21Zf+k0TsiIjfI6InIkq1GbZmU5rv9s3pkb9vTo8kUam8+VeSLha3bk6PFFmT/O/2LFFOV1S6ksTxOuVOXrx0Znh8fOx8nh6YOvv+wOTFS0+fPjt8auzU2LmhY8eOHhl87tmhZ1YlzrROt/Z9OLF/76tvX3t95MS1d3/+LonYVnxfG0eTnu+pzk5Xt8l8j61SYRvFzpr5pNzCirAs3RGRNlfnbP/viY4ru6rf9cQrH7e0csCaqlQqlaHGX89UgE0siVbXAGiN4kSfXv8W0zoNPTaEGy9lF0Bp3LfzKfumnN0H6c6ujXauUfl9EXFi5p8v0ymWfR+ic41qBQBsZj+k45+n6oz/yhH31uTblT8b6o2I/0XE7oj4f0TsiYh7Ist7X0TcX7+YvncalN83L71w/FO63kR4S0rHfy/kz7bmjv+qT8F6O/LUztn4O5OTp8fHDufb5FB0dqfpwbprTyJm0r+/fdao/NrxXzql5Rdjwbwe18vdc5cZHZ4abjrw3I2PIvaV68WfRPm/KGJvROxbYRmnn/hm/9xPOqpzS8e/iFV4zlT5KuLxrP1nYl78hWTx55MDW2J87PBAsVcs9MuvV99oVH4WfykWj39r84E2kLb/tnr7/4vV+HuT2ue1kwtW0bVUGVf/+KThNc1K9/+u5K05hV8Ynpo6PxjRlby28POaG9xF+sLot7P50/gPHazf/3fny6TxPxAR6U78YEQ8FBEH8ro/HBGPRMTBReL/6eVH32sY/4Em9v9VkMY/Wvf416j9lzGzJV/DmR+/b1R+tf2LBqvb/keLxGylZo9/S3SJO63pyrYaAAAA3F1KEbEjklJ/db5U6u/Pfi+/J7aVxicmp548OfHBudHsHYHe6CwVd7p6au6HDub3hov0UJ6+nKeP5PeNv+jYOpvuH5kYH2118NDmtkccjzr9P/VnR6trB6y5Bc/RKj2tqQiw7ryvCe1r5f3fkQPudkv04tJ61QNYf87i0L7q9f/LtYkksl/JA5uO8z+0r2r///wOMte87jX/5U3g7rPY+d9PAWBzM/6HtrSi9/o30kx8HbF4nmSjVHVZM582s3h5HWoYpRZun66WNMpQR0QLd4nynf6vFnGxcrnpQlt9ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wYAAP//+OPdbA==") ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 10.281697228s ago: executing program 1 (id=19): r0 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, @in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x60}, @in6={0xa, 0x4e20, 0x800, @local, 0x80000000}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6={0xa, 0x4e20, 0xb928, @mcast1, 0xfffffe00}], 0x8c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x206d}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000002580)={[0x1]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, @value=r4}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb080046000024000000000073907800000000000000008100000000000000000c907801000000"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff3, 0xe}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) 9.886177071s ago: executing program 1 (id=22): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x110, 0xb}], 0x20}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0xa, &(0x7f0000000400)=0x0) r2 = eventfd(0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000180)="f35949b9", 0x4}], 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1b) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x11) r5 = fcntl$dupfd(r2, 0x0, r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x7, 0x2, 0x0, 0x7fff0000}]}) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f00000001c0), 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpid() move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x145) io_submit(r1, 0x2, &(0x7f0000000680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r5, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) syz_clone(0xa4848480, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000080)={0xa, 0x0, 0x1000097, @loopback, 0x4, 0x6}, 0x20) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xe0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x25}, 0x94) 9.452448837s ago: executing program 1 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bd, &(0x7f0000000000)="$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") (async) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async, rerun: 64) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'broute\x00', 0x0, 0x3, 0x80, [0x8000000000000001, 0x8, 0x4e, 0x3, 0x2, 0x3], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/128}, &(0x7f0000000180)=0x78) 8.236844067s ago: executing program 1 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) write$binfmt_aout(r1, &(0x7f0000000940)=ANY=[], 0xff2e) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2004c800) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x8002, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESOCT=r2], 0xfe, 0x2d6, &(0x7f0000000340)="$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") 8.186915191s ago: executing program 32 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) (async) write$binfmt_aout(r1, &(0x7f0000000940)=ANY=[], 0xff2e) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2004c800) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x8002, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESOCT=r2], 0xfe, 0x2d6, &(0x7f0000000340)="$eJzs3cFrHFUYAPBvkt3ZxBySgycRnEMPXgxNrx5MkQhiTsoiWkGLTaFkl0ICC1Vx7Un8AxQ8+Ld4F7z4D3jxD/BmkcKTtzPZnTTJJqZuKu3vd0ge3/e+ne9l3mYhw0w+e3W4f+f+4d2HX6WUxpFtx6MiNmIpjqRGAADPhUcpxZ+X+nzvLC2qJwBgsVqf/90zpvROht5adFsAwAJ98NHH793c3d15v6pWIobfjvpF1N/r/M27cS8GsRfXYz0e19cCyqj/WpC/vvPu7k50qmwjrg3Ho36uHH766/SyQRmT+q1Yj43ZtYR2/VZVa9WPR/1uvNTbK4qIe9u5kRuxHi+fqM/5nRun1Ee/jNdXmkXm42/Gevz2edyPQdyZXNOYHf/rMqq30/d/fXkrT871xXjU703mzaTlqz43AAAAAAAAAAAAAAAAAAAAAAA8vzarqY24Nsyh5vk7y48n+c1j+cnzdZYm+bq+iCgng9bzgbJxip+Onq9zvaqqVNTzp8/3We3EK53oPLOFAwAAAAAAAAAAAAAAAAAAwP/I4YMv9m8PBnsH/8mgucl/elv/ZV9nuxV5LeZP7h071lo0qd7pVbHcTM+9tlLfpMFgb+uXT4bTSF7EZZofdauIeT1386DbjqzmfqYHjbPK/04ppaKImNfG7x+e12E3nvZ0rx6snbWuOpKX8POPa2/s3y7O+xmuHG2SH75rpco4OHzwxP6J4uId3mpO80XXVc6ZUzY75kKvs/aUb6I3/zi2AYpz3kTdVqTbDM7cPyv/aj9fxW8fAAAAAAAAAAAAAAAAAACgbXbT7ynJh3NLlxbWFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcsdn//58N4kTkicG4KT59TkppPI2UcXD4jJcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC+CfAAAA///OEmY4") 3.878280382s ago: executing program 5 (id=96): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9fb0fd08324a94f58e4dc876dcd380d209d1a1c9fde80ee76eaca77b4f5e79f30a9ce179d01bdb0cff496cc0058371e88086beb97143ae12d316090680c58dd3098b59f4fc32c52f04610934541632aab3f1a3d800000000000000", @ANYRES16=r2, @ANYBLOB="0106000000000000000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{0x4, 0x5}, {&(0x7f0000000380)=""/162, 0xa2}, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000480)=""/140, 0x8c}], 0x4, 0x7d, 0x955a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1}, {&(0x7f00000006c0)=""/87, 0x57}, &(0x7f0000000840)=[{&(0x7f0000000800)=""/21, 0x15}, {&(0x7f0000000a00)=""/239, 0xef}, {&(0x7f0000000b00)=""/153, 0x99}], 0x3, 0x40, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x28}, &(0x7f0000000bc0)=0x73, &(0x7f0000000c00)=0xad08, 0x1, 0x1, 0x0, 0x800, 0x40}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}], 0x118, 0x4004}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=ANY=[@ANYBLOB="800100001000010000000000fddbdf25ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x0) sendmsg$rds(r5, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = getpid() r8 = socket(0x10, 0x803, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000180)={0xa26, 0x3, 0xfffffffd, 0xff, 0x1}, 0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x4004801) sendmsg$nl_route_sched(r8, 0x0, 0x20048850) connect$can_j1939(r4, 0x0, 0x0) r9 = syz_pidfd_open(r7, 0x0) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x183, 0x6}, 0x2025, 0x4005, 0xb, 0x0, 0x1, 0x4, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r9, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 3.690261504s ago: executing program 2 (id=97): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000330], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0xfffff9, 0xfffffffffffffffe}]}, 0x108) 3.625984677s ago: executing program 2 (id=98): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ff}, 0x48) (async) openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000006, 0x1, @perf_config_ext={0x80, 0x7fff}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x1}, 0x67) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x2) (async) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x16, 0x1b, &(0x7f0000000600)=ANY=[], 0x0, 0x8a, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) (async) listen(r4, 0x5) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x4000000, @empty}, 0x1c) fcntl$dupfd(r5, 0x406, r4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x1f958325}, &(0x7f0000000480)=0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="246c167fcb8b8b93c7575e2078736120ae3b1fa3328e613e0cf6146713720b0bf2ecdd74e9ea8dfb58351e2dfa2e447769b2131fce0cd126fab7e6e4aa424ecb114c86efd331fdae34038c582e46e204f38879", 0x53}, {&(0x7f0000000100)="9646c32070437082cdbd218fd930d461e8936ed38dc1de212925f1a980d2c7de206e06f25324d7cae75654839859a26863b99bac40a2774e76494221c430f0c612d2620bd36ba88c879fd2cda15b67155c5e3496c91947b5aee9484b5a433ea1", 0x60}, {&(0x7f0000000180)="824b964d52201e89b48d5ce5318fa7d20951fb9c65c0ba985421a8e00d79a2d4b3958a8e2299ff2ca33e033bfdfc2e1da415892f79f55881823761eb2d133f92d242bbde15938f01cf168183614014666b06a14757c2", 0x56}, {&(0x7f00000002c0)="732d75f723d7cef9f25c34ffb5e08344474409ecaea34896e6f20a43392c5eef4d1fa688dc28874355c8a545bf38874ddafea3265937321112643a0d82b54dbf8f430be5d070fafbadf4df07f6fd4b344a0a8b05e8904e02cae0afb1a73a86abb1a5d19e73e138c50b01163754ed0cdf", 0x70}, {&(0x7f0000000380)="853ab60893efc48d4a1e1e25a9090de5d4ad86e0c0a64e1019a6eae24d061924", 0x20}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="3000000e0000000084000000010000000600030000800000fbffffff0100000000000080b10f000000000000", @ANYRES32=r6, @ANYBLOB="1800000000000000840000000500000020000000010000001800000000000000840000000000000099000b0003000900180000000000000084000000060000000d00000000000000"], 0x78, 0x4000000}, 0x0) 3.435188088s ago: executing program 2 (id=101): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcc33}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c810}, 0x4008884) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x400042) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000002c0)={{0x7, 0x4}, 0x1, 0x800, 0x6, {0x8, 0x81}, 0x3, 0x50d4}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000340)={0x4, 0x0, {0x0, 0x1, 0x4, 0x1, 0x1}, 0x7fffffff}) r2 = getpid() tkill(r2, 0x25) (async) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000003c0)={{0x7a, 0xcf}, {0x4, 0x80}, 0x0, 0x1, 0xcd}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r1, 0x33, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sched_getattr(r2, &(0x7f0000000580)={0x38}, 0x38, 0x0) (async) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r4, &(0x7f00000005c0)={{0x10b, 0x3, 0x6, 0x362, 0x49, 0xfffffffd, 0x1ff, 0x10000}, "27ab3043e7977279b08b345ed3e3a7e137afe07d1fc9808c0fd3bd7c321f39aca3d85b03fac1d5c2e1622ec218b217359cce15e774ffa7379cbf3a117e0f197fe82ce41c7eac5cccfaa195547da536bcc660420369ab4bd384885bce300f53b55a03cd309bd05acd41c5205c55ad868f6df14cc27aeac91e458968aef60d78900fea", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x5a2) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000b80)=0x4) (async, rerun: 64) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x24000010) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'syztnl1\x00', 0x0, 0x4, 0x81, 0x9, 0xe, 0x0, @loopback, @loopback, 0x8000, 0x700, 0x3, 0x100}}) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0xfc, 0x13, 0x400, 0x70bd27, 0x25dfdbfe, {0x22, 0xe6, 0x6, 0x8, {0x4e21, 0x4e20, [0x2, 0x10001, 0x0, 0xb], [0x5, 0xfffffffb, 0x9], r6, [0x9, 0x5]}, 0x8, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "364f97150c49066b3197bda367c394947d3f2cb39954aa2e4d746e42218dd3b48d3b227238413687dfeafc250d782c3bae467385b1c63c0ec246d7a6965e9dfa6f3e1db023c122094d09cfe806dc97c2490b51d72f2dbb0371254b72646bec48171ae44b4e490bb1f1cd207110672548c56857e07dff2645c564164ecc8e37900247c3d93ee2b8877630d8c8208de1814703b7ced4354f60229a7918f9eeaff13d1d2a4beffea1ea7f5bc4"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004002) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_xfrm(r3, &(0x7f0000001300)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0xf45ab5ee88975ea4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001040)=@getpolicy={0x244, 0x15, 0x800, 0x70bd28, 0x25dfdbfd, {{@in6=@loopback, @in6=@private1, 0x4e20, 0x4, 0x4e21, 0xae0f, 0xa, 0x20, 0x20, 0x73, r6, r7}, 0x6e6bb9}, [@tmpl={0x84, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x32}, 0x2, @in6=@loopback, 0x3505, 0x0, 0x2, 0xd4, 0x200, 0x8, 0x6}, {{@in6=@private0, 0x4d4, 0x6c}, 0xa, @in6=@mcast2, 0x3502, 0x1, 0x2, 0xf, 0xc00, 0x9513, 0x7}]}, @algo_comp={0x119, 0x3, {{'lzjh\x00'}, 0x688, "7f77104f54c2242734269ec1b26beace883922ad6844aa0ad0695083f1a7b925558a82a1f5ea4b21bea5ebb9bb9b770da7d2cedc7f1748b7f788b61ce10cf90c00fd06499369c57498bba8ade5901a01f17ea072a08bbdf3132edbed5973cb5eea352a1db2279b43fa169d22305a58b3d8d47aea2b634a0f9821efb82b712bd605f568de0270f4c2a3875119ceb61b7cc9b1a895e9976b5a665d15d6ccb7e32f0418eb00b54be247224410ed71a8fbd0472189f4d2ca884dc816eef617683428aaf216cf7c3e8e12ad6c54cfc19614621c"}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2a, 0x9}}, @tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d6, 0x32}, 0x2, @in6=@mcast1, 0x3501, 0x0, 0x0, 0x6, 0x88f, 0x42, 0x10000}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x20008800}, 0x40805) (async) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, &(0x7f0000001340)=[0xffff, 0x8, 0x2, 0x7, 0x13, 0x0, 0xbe5, 0x4]) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x64, 0x0, 0x5ef16f6194b485b3, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x151}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44005}, 0x48001) (async) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4084) (async) sched_getattr(r2, &(0x7f00000015c0)={0x38}, 0x38, 0x0) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001600), &(0x7f0000001640)=0xc) (async) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000001680)=r2) (async) sched_setattr(r2, &(0x7f00000016c0)={0x38, 0x3, 0x70, 0x7, 0xf16b, 0xf, 0x1, 0x3ff, 0xfffffffd, 0x8}, 0x0) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000001700)) (async, rerun: 32) close(r4) (rerun: 32) 3.328520535s ago: executing program 2 (id=103): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) (async) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @mcast1, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) (async) r4 = socket$inet6(0xa, 0x3, 0x10001) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001240)={0x8}, &(0x7f0000000080)=0xfffffdb6) (async) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0x3ce, &(0x7f00000004c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[], 0x32600) write$binfmt_elf32(r6, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) (async) close(r6) r8 = getpgid(0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001280)={'\x00', 0x80, 0x46cd, 0xffff, 0xde, 0x3a33, r8}) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f00000010c0)) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240), 0x210884, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001140)={0x0, @in6={{0xa, 0x4e20, 0xff, @remote, 0x6}}, 0x4, 0xa3c4}, &(0x7f0000000040)=0x90) (rerun: 64) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001080)={r9, 0x4, 0x3, [0xfffd, 0x8dbf, 0x0]}, 0xe) 2.996086204s ago: executing program 5 (id=109): r0 = socket(0x10, 0x3, 0x0) open(0x0, 0x2000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x434, 0x12, 0x8, 0x301, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x4}, [@typed={0x8, 0xf7, 0x0, 0x0, @pid}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0xa5}, @generic="41e55a6e833be99a714a53dc36964587d53297e6d227b4467f7c8b56bd36cba37de7b32bb1dc1d1926b80b7a9d7938b2b103ec536465d2854e8cf84950ee0ffd1ce6e608a7f875f67d78769fdefa386080ab6284b14a88263ae94ccfc5554bacdb76fca1c19db4bf68361ac22fe32dd5b39951aa2b910b3e90451331b9", @generic="d669cb212ce2f536b4918a96946ebc65671b8acabee494ca0f8972c070988a7fda183681ed61866e339e96724bc2abc8381c3952185a6b291d6e19856f3edf2f5010108f2efce0cdfb31ac9f3d63d38f10bbc2d627a143181fb290d26496ddabacbb8817e4657f7d22bae1d72f4150ef772f4d762f32ac4488d3ee7859827206dc85bbedc7fbf69157d2fb75aa10802cd4879b33167c793a47877ce6e32947876e81845d9debace9d284429071a5e34c702277428743f9b3ba", @generic="077b772a637294abf6390b1881cb6923cc0dab8fb3e66782dd18142e4197acfae5b7dbe790f42c6763912cb27424f4d65cffc208882cfe5a23639a763e5388fafc6896a85af8c5622ce04d616d4c15960e547bfb3364f5f397f9b7fcfeb864eee4fc4480a24e98378563ec5062d789bf08953e35f8a73aa5ce696ab4793d2751d56214c6f5c7de53d506c40846359dbd5b72", @generic="ddff5dc22e4c556050635dc77383d9780fb0326abb3cb926e447d3bf0880ba23c5cf78c500998348a828ec41957ed08fa0889e35a744c4085d0693a5a94acf70b3cc23a07a6249325b0af40cee1556adf36f4f9a29b729f50172799b22d113a9024b571dc400a0ca362e684abbfa4d945b241692c48c", @generic="6f9c12e893703b1f86e0ff8aed740d54eabec7b386799573e3902b3eb01927dbfe8e18d8ab2f007bb10c27a240ef3b58b037407dc12e49cd2674341a48ab464b2ac7fe659bed669666841e5298e2196d9dec0df03575755742e81d5c", @generic="216fc48aae2534e55047b8672a3552be6312908af6a19ad6c952c4684bfee063f04fbb18f8343364d1bc18a1a207f1235a47fc4f1a38d9393c1a82382c848ec61b064f17d1f7ca203bdcf33dd254a4027e95516273fe8b3dec5a6631b46dec2eea4c691a47f3", @generic="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", @typed={0x4, 0x13f}, @typed={0x8, 0x5a, 0x0, 0x0, @pid}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x7}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000}, 0x24040090) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x2000000, 0x40000}, 0x44080) 2.833771254s ago: executing program 2 (id=113): r0 = memfd_secret(0x80000) readahead(r0, 0x7, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180800008f000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000c6000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100, 0xc, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 2.832811754s ago: executing program 5 (id=114): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000080) set_mempolicy(0x8006, &(0x7f0000000000)=0xfff, 0x5) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [0x0, 0x0, 0xff, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@frag={{}, {[0x10, 0x5], 0x7, 0x18, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff, 0xffffff00, 0xff], [], 'dvmrp1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xffffffffffffff0f) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0xe, 0x8, 0x80, 0x50, @mcast2, @local, 0x7800, 0x7, 0x7, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xf, 0x10001, {{0x30, 0x4, 0x3, 0x3a, 0xc0, 0x67, 0x0, 0x10, 0x29, 0x0, @private=0xa010100, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa7, 0x1, 0xa, [{@broadcast, 0x1000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x2b, 0x2, [{0x0, 0x7, "130890cf1a"}, {0x2, 0x10, "c5ca8c39e058efc36968245a65fd"}, {0x1, 0xe, "a30cef340befad439ff0ccb9"}]}, @rr={0x7, 0x27, 0xa9, [@broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x2, [{@empty, 0x5}, {@loopback, 0x3}, {@local, 0x7}]}, @lsrr={0x83, 0x27, 0x7a, [@local, @broadcast, @multicast2, @broadcast, @empty, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}, @multicast2]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000340)={@local, 0x0}, &(0x7f0000000380)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r9}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00d8fc37e1ee0a91f7015dfdba1a9bcb61ab121d9415c1feca0ae51bfbb8786f462ae2756ab973b4dd17c171c0fb828be66dfe5890907ce3666578024def9bd393dae8303c6c32f42d2a9d9ac06e4afc4a9e0d8fa371869f30df015731a6b172b060d529c9a1a893d365098e05dc65bee2ee92f7db8df6ed328f08573a1e9ba55be4966b29b282d57c756e234f8bb47b8be8917b3f68789b6b06811d7ddde2b370c9f331ab3e", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={@empty, @broadcast, 0x0}, &(0x7f0000000a40)=0xc) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r15 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r15) getsockname$packet(r15, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d80)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r16, {}, {0x9, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004050}, 0x4010) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fddbdf251100000014000180080003000000000008000300000000004800018008000100", @ANYRES32=r1, @ANYBLOB="0800030001000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="0800030002000000140002007369743000000000000000000000000008000300010000001400018008000300030000000800030002000000540001801400020062617461647630000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030000000000140002006970766c616e310000000000000000003c00018008000100", @ANYRES32=r4, @ANYBLOB="0800030001000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="07a90a2b049aff711a000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="30000180080003000200000008000100", @ANYRES32=r11, @ANYBLOB="140002006e723000000000000000000000000000080003000000000004000180"], 0x148}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040) 2.346091382s ago: executing program 3 (id=118): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x4, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x9, 0x1, 0x2}, {0xa4, 0x5, 0x90, 0x400}, {0x6, 0x5f, 0x6, 0xfffffffa}]}) unshare(0x400) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) accept$unix(r1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="f39f738fa1b5d0abcb5430f7a8d32446cae21cde72c873a1032d4f33e8507078d4389900"/50], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000dc0)=0x1c, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2.201278511s ago: executing program 5 (id=120): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r6, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x40006) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x75}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xe}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r3], 0x448}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x4888, r8, 0x3d}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001080)="03", 0x1}], 0x1}, 0x4) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYRES8=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40100) 1.961305675s ago: executing program 4 (id=123): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'nq\x00', 0x2c, 0xfffffff8, 0x17}, 0x2c) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) shmctl$IPC_RMID(r2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x49801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x48}}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @multicast}, 0x14) 1.838316002s ago: executing program 4 (id=125): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace(0x10, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) clock_nanosleep(0x1, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4040) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000f7dbdf25010000000800010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) 1.535756469s ago: executing program 0 (id=129): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) (async, rerun: 32) r3 = accept(r0, &(0x7f0000000140)=@isdn, &(0x7f00000001c0)=0x80) (rerun: 32) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x1, 0x9, 0x201, 0x0, 0x0, {0x3}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1d}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, 0x74}}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r0, 0x7f, 0x6c41, 0x1}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000002940)={0x8, 0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/192, 0xc0}, {&(0x7f00000024c0)=""/209, 0xd1}, {&(0x7f00000025c0)=""/118, 0x76}, {&(0x7f0000002640)=""/247, 0xf7}, {&(0x7f0000002740)=""/249, 0xf9}], &(0x7f00000028c0)=[0x5, 0x9, 0x8, 0x4, 0x3d3, 0x42290ae6, 0x7fff, 0x8, 0xe30, 0xa7]}, 0x20) (async) r5 = creat(&(0x7f0000002980)='./file0\x00', 0x22) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, r2, &(0x7f00000029c0)={0xffffffffffffffff, 0xf, 0x14, 0x4, 0x6, 0x8001, 0x66d, 0xfffffffffffffde0, 0x1}) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002a80), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0xb0, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb461}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8d0}, {0x8, 0xb, 0x1ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x691}, {0x6}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x2}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x80) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004094}, 0x4000000) (async, rerun: 32) perf_event_open(&(0x7f0000002d40)={0x4, 0x80, 0xd, 0x0, 0x6, 0xf5, 0x0, 0x3, 0x20020, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x36a, 0x0, @perf_config_ext={0xb, 0x3}, 0xe46d44ae6398bb07, 0x9, 0x3, 0x2, 0x6, 0xfff, 0x7c9, 0x0, 0x0, 0x0, 0x9d}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000002dc0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002e40), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x240488d0) r9 = signalfd4(r0, &(0x7f0000002f40)={[0x5]}, 0x8, 0x80000) sendmsg$NL80211_CMD_SET_WDS_PEER(r9, &(0x7f0000003080)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003040)={&(0x7f0000002fc0)={0x44, r8, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="04a24c9ec44f"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d0e805ec735b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003100), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r10, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x68, r11, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8735, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003280), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000003400)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000033c0)={&(0x7f00000032c0)={0xcc, r12, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc72}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4f2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x24, 0x3, "9079216fa36dc61ed8f6faac5f5f2c8b7d86ffa1e1d1d977b77cef6b5eeb7d34"}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7e1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10000000}, 0x4040840) (async, rerun: 64) ioctl$RTC_EPOCH_SET(r9, 0x4008700e, 0x4) (async, rerun: 64) r13 = syz_open_procfs$pagemap(0x0, &(0x7f0000003440)) ioctl$PAGEMAP_SCAN(r13, 0xc0606610, &(0x7f00000034c0)={0x60, 0x1, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x80000001, &(0x7f0000003480), 0x0, 0x83eb, 0x899a8dad0940cb9b, 0x0, 0x69, 0x2}) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000003580), r4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000003600)={'gretap0\x00', &(0x7f00000035c0)={'syztnl0\x00', r1, 0x20, 0x10, 0x8, 0x7, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@noop]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r14, &(0x7f0000003700)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x54, r15, 0x528, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x62}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}]}, 0x54}, 0x1, 0x0, 0x0, 0x14001}, 0x8000) 1.453726745s ago: executing program 0 (id=130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = dup(r3) syz_clone(0x41080000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0), 0x0) timer_delete(r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x7, @empty}, @in6={0xa, 0x4e20, 0xc, @empty, 0x7fffffff}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffff53c}], 0x64) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r4, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) r7 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r7, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r8 = dup3(r1, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r8, &(0x7f0000000300)={0x200f}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) socket$netlink(0x10, 0x3, 0x1) 1.386268608s ago: executing program 3 (id=131): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) listen(r0, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @local, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x0, 0x3, 0x27, 0x7fff, 0x4, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x10, 0x3ff, 0xfffffffe}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 1.37092545s ago: executing program 3 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@jqfmt_vfsold}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r2, 0x0) fallocate(r2, 0x3, 0x0, 0x7fffffffffffffff) pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x1000) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") 1.18451138s ago: executing program 0 (id=133): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), 0x0) bind$can_j1939(r0, 0x0, 0x3f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)={0x8, 0x5, 0xfffffff7, 0x8001, 0x800}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) unshare(0x62040200) r2 = fsopen(&(0x7f0000000040)='efivarfs\x00', 0x1) mmap(&(0x7f00002de000/0x2000)=nil, 0x2000, 0x3, 0x50, r2, 0x0) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x361, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x10, @mcast1, 0x8}], 0x38) fchdir(r3) 1.120601634s ago: executing program 2 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ftruncate(0xffffffffffffffff, 0x8800000) socket$key(0xf, 0x3, 0x2) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, 0x0, &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 875.893229ms ago: executing program 0 (id=135): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x80032, 0x101, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x8810) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000300)=""/233, 0xe9}], 0x2, &(0x7f00000001c0)=""/64, 0x40}, 0x10060) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40408b7}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 855.971829ms ago: executing program 4 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000ac0)=""/43}, 0x20) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x1c020) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, &(0x7f0000000140)=0xfffffff7, 0x4) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000ac0)=""/43}, 0x20) (async) syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x1c020) (async) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x46, &(0x7f0000000140)=0xfffffff7, 0x4) (async) bind$inet6(r4, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) 706.412088ms ago: executing program 3 (id=137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x83}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000040) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) io_setup(0x4, &(0x7f0000000600)) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) setuid(0xee00) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x70, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x20000000, 0x40000008, 0x4}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 591.103615ms ago: executing program 4 (id=138): r0 = dup(0xffffffffffffffff) r1 = accept4$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7, 0x3, [0xffff, 0x2c6, 0x8]}, &(0x7f0000000140)=0xe) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e20, 0x6, @remote, 0x4}}}, &(0x7f0000000180)=0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r2], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040844) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmmsg$sock(r8, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="74b17a07", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x1, 0x20000000) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="40010000", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf250f0000000c0009800800010005000000040003803c00078008000100400000000c001a008100000000000000080002"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) clock_nanosleep(0x9, 0x0, 0x0, 0x0) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r9, @ANYRESHEX=r10], 0x15) 544.670128ms ago: executing program 4 (id=139): r0 = semget$private(0x0, 0x2, 0xa4) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x87}, {0x3, 0x7, 0x3000}, {0x4, 0xa47}], 0x3, &(0x7f0000000040)={0x77359400}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x8140, 0x2, 0x4}, 0x18) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x10102, 0x120) semop(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x4, 0x1800}, {0x3, 0x5, 0x800}, {0x4, 0x7, 0x1000}, {0x4, 0xffff, 0x1000}, {0x1, 0x2, 0x1000}], 0x5) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = mq_open(&(0x7f0000000180)='*\x00', 0x800, 0x200, &(0x7f00000001c0)={0xc9, 0xe7, 0x3, 0xfffffffffffffff8}) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000200)=""/4096, 0x1000, 0x343, &(0x7f0000001240)={r5, r6+10000000}) (async) r7 = mq_open(&(0x7f0000001280)='\x00', 0x40, 0x2, &(0x7f00000012c0)={0x7f, 0x2, 0xfffffffffffff000, 0x8}) mq_timedreceive(r7, &(0x7f0000001300)=""/212, 0xd4, 0x100, &(0x7f0000001400)) (async) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000001440)) (async) fcntl$addseals(r4, 0x409, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, r7, 0x6262c000) (async) r8 = open$dir(&(0x7f0000001480)='./file0\x00', 0x581040, 0x1) r9 = open_tree(r8, &(0x7f00000014c0)='./file0/file0\x00', 0x81801) mq_timedreceive(r9, &(0x7f0000001500)=""/147, 0x93, 0x8, &(0x7f00000015c0)={0x77359400}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001600)={'vcan0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001640)='\x00') (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000001680)='./file0/file1\x00', &(0x7f00000016c0)={0x101000, 0x80}, 0x18) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000001700)=0x9) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004) (async) msync(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x4) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x24004040) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f00000018c0)=@usbdevfs_driver={0x3, 0x7ff, &(0x7f0000001880)="6318ef402edecba1369a277e8a75ea09d858"}) (async) ioctl$TIOCNOTTY(r9, 0x5422) openat(0xffffffffffffff9c, 0x0, 0x200, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000001b40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001940)={0x1a0, 0x1403, 0x20, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000085}, 0x10) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r10, &(0x7f0000001c40)={&(0x7f0000001b80), 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x2c, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfc, {0xd, 0x7, './file0/file1', './file0'}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xa0) 494.202071ms ago: executing program 0 (id=140): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x13, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="6eaa0000000000007110bb000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0xe0a, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7c71013359651404064de0d3dc2b44336ccd69572e1edd920bf3e625f4336d23d8156d49c5f6bc2126c6af9dae0c7d5ab68cd2512aae587a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) 493.930861ms ago: executing program 4 (id=141): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x82, 0x4a2, &(0x7f0000000840)="$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") 373.132298ms ago: executing program 3 (id=142): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) nanosleep(&(0x7f0000000040), &(0x7f0000000080)) (async) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c460007ff84ff7f0000000000000300060003000000a400000038000000aa00000007000000a70b2000010026840400000000000000030000000700020000000000ff070000c300"], 0x58) (async) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 180.130839ms ago: executing program 5 (id=143): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20b01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x24000090) 42.279807ms ago: executing program 0 (id=144): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x2000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x2d, 0x9, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d2, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0xb83, 0x0, 0x0, 0x8000, 0x0, 0x6, 0xd398, 0x0, 0x8, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) 31.936748ms ago: executing program 5 (id=145): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64) listen(r0, 0xfffffffc) (rerun: 64) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r1, 0x2, 0xb, 0x11}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180010008001b0000000000"], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="f2", 0x1}], 0x1}}], 0x1, 0x80) dup2(r0, r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=146): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b09000200"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x2, {0x0, 0x1}, {0x1, 0xfe}, 0x2}, {0x0, 0x1, {0x1, 0x1, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x20000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x14786ad4e285a1a0}, {0xfff2, 0x8}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): [ 20.606995][ T29] audit: type=1400 audit(1769132315.904:62): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.629070][ T29] audit: type=1400 audit(1769132315.904:63): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.651682][ T29] audit: type=1400 audit(1769132315.904:64): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.674587][ T29] audit: type=1400 audit(1769132315.904:65): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.697556][ T29] audit: type=1400 audit(1769132315.904:66): avc: denied { read open } for pid=3201 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 26.244409][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.244423][ T29] audit: type=1400 audit(1769132321.534:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.273478][ T29] audit: type=1400 audit(1769132321.564:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.275318][ T3304] cgroup: Unknown subsys name 'net' [ 26.301132][ T29] audit: type=1400 audit(1769132321.594:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.456883][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.463054][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.574386][ T29] audit: type=1400 audit(1769132321.864:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.609187][ T29] audit: type=1400 audit(1769132321.864:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.629835][ T29] audit: type=1400 audit(1769132321.864:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.643963][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.650522][ T29] audit: type=1400 audit(1769132321.864:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.650544][ T29] audit: type=1400 audit(1769132321.864:77): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.678029][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.679651][ T29] audit: type=1400 audit(1769132321.864:78): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.736023][ T29] audit: type=1400 audit(1769132321.894:79): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.737197][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.781156][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.902430][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.909548][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.916851][ T3319] bridge_slave_0: entered allmulticast mode [ 27.923168][ T3319] bridge_slave_0: entered promiscuous mode [ 27.929691][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.936828][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.943910][ T3318] bridge_slave_0: entered allmulticast mode [ 27.950454][ T3318] bridge_slave_0: entered promiscuous mode [ 27.961114][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.968266][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.975588][ T3319] bridge_slave_1: entered allmulticast mode [ 27.981997][ T3319] bridge_slave_1: entered promiscuous mode [ 27.988293][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.995532][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.002941][ T3318] bridge_slave_1: entered allmulticast mode [ 28.009341][ T3318] bridge_slave_1: entered promiscuous mode [ 28.039135][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.053315][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.065824][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.087974][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.099927][ T3318] team0: Port device team_slave_0 added [ 28.117530][ T3318] team0: Port device team_slave_1 added [ 28.128622][ T3319] team0: Port device team_slave_0 added [ 28.143917][ T3319] team0: Port device team_slave_1 added [ 28.165670][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.172705][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.198692][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.213387][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.220384][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.246374][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.257527][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.264549][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.290594][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.312597][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.319661][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.345675][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.361963][ T3336] chnl_net:caif_netlink_parms(): no params data found [ 28.421446][ T3319] hsr_slave_0: entered promiscuous mode [ 28.427651][ T3319] hsr_slave_1: entered promiscuous mode [ 28.433650][ T3340] chnl_net:caif_netlink_parms(): no params data found [ 28.462825][ T3338] chnl_net:caif_netlink_parms(): no params data found [ 28.473423][ T3318] hsr_slave_0: entered promiscuous mode [ 28.479643][ T3318] hsr_slave_1: entered promiscuous mode [ 28.485396][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 28.491151][ T3318] Cannot create hsr debugfs directory [ 28.516021][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.523154][ T3336] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.530358][ T3336] bridge_slave_0: entered allmulticast mode [ 28.536871][ T3336] bridge_slave_0: entered promiscuous mode [ 28.554770][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.561880][ T3336] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.569170][ T3336] bridge_slave_1: entered allmulticast mode [ 28.575803][ T3336] bridge_slave_1: entered promiscuous mode [ 28.629636][ T3336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.641148][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.648276][ T3340] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.655384][ T3340] bridge_slave_0: entered allmulticast mode [ 28.662042][ T3340] bridge_slave_0: entered promiscuous mode [ 28.674715][ T3336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.688557][ T3340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.695638][ T3340] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.703008][ T3340] bridge_slave_1: entered allmulticast mode [ 28.709496][ T3340] bridge_slave_1: entered promiscuous mode [ 28.754799][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.761934][ T3338] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.769192][ T3338] bridge_slave_0: entered allmulticast mode [ 28.775673][ T3338] bridge_slave_0: entered promiscuous mode [ 28.789744][ T3336] team0: Port device team_slave_0 added [ 28.798963][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.806137][ T3338] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.813244][ T3338] bridge_slave_1: entered allmulticast mode [ 28.820178][ T3338] bridge_slave_1: entered promiscuous mode [ 28.828020][ T3340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.840389][ T3340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.850484][ T3336] team0: Port device team_slave_1 added [ 28.898724][ T3338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.911121][ T3340] team0: Port device team_slave_0 added [ 28.917000][ T3336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.924003][ T3336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.949957][ T3336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.961578][ T3338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.976432][ T3340] team0: Port device team_slave_1 added [ 28.982428][ T3336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.989398][ T3336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.015351][ T3336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.054311][ T3338] team0: Port device team_slave_0 added [ 29.062650][ T3340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.069632][ T3340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.095657][ T3340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.107776][ T3338] team0: Port device team_slave_1 added [ 29.114170][ T3340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.121352][ T3340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.147355][ T3340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.183205][ T3336] hsr_slave_0: entered promiscuous mode [ 29.189431][ T3336] hsr_slave_1: entered promiscuous mode [ 29.195325][ T3336] debugfs: 'hsr0' already exists in 'hsr' [ 29.201117][ T3336] Cannot create hsr debugfs directory [ 29.206847][ T3338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.213829][ T3338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.239812][ T3338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.258970][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.268536][ T3338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.275555][ T3338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.301531][ T3338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.317347][ T3340] hsr_slave_0: entered promiscuous mode [ 29.323362][ T3340] hsr_slave_1: entered promiscuous mode [ 29.329289][ T3340] debugfs: 'hsr0' already exists in 'hsr' [ 29.335023][ T3340] Cannot create hsr debugfs directory [ 29.340605][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.352682][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.368564][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.408652][ T3338] hsr_slave_0: entered promiscuous mode [ 29.414842][ T3338] hsr_slave_1: entered promiscuous mode [ 29.420796][ T3338] debugfs: 'hsr0' already exists in 'hsr' [ 29.426554][ T3338] Cannot create hsr debugfs directory [ 29.456965][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.475627][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.494495][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.514556][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.607153][ T3336] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.618212][ T3336] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.628293][ T3336] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.645511][ T3336] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.668928][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.680732][ T3340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.695461][ T3340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.704084][ T3340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.718335][ T3340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.743587][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.764097][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.771341][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.781542][ T3338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.790436][ T3338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.804137][ T3338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.814150][ T2167] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.821216][ T2167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.830145][ T3338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.845240][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.873702][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.884037][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.906755][ T2167] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.913857][ T2167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.922678][ T2167] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.929801][ T2167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.976823][ T3336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.005703][ T3340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.014141][ T3336] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.032655][ T3338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.040800][ T1629] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.047848][ T1629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.058556][ T3340] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.067129][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.081878][ T1629] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.088958][ T1629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.110693][ T3338] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.120449][ T2167] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.127704][ T2167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.142407][ T2167] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.149498][ T2167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.167323][ T2167] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.174533][ T2167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.190214][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.197606][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.262674][ T3319] veth0_vlan: entered promiscuous mode [ 30.275712][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.304773][ T3319] veth1_vlan: entered promiscuous mode [ 30.341144][ T3319] veth0_macvtap: entered promiscuous mode [ 30.360058][ T3319] veth1_macvtap: entered promiscuous mode [ 30.389067][ T3338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.407420][ T3340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.422874][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.441474][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.456676][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476157][ T3336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.498754][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.518880][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.529837][ T3318] veth0_vlan: entered promiscuous mode [ 30.538965][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.564036][ T3318] veth1_vlan: entered promiscuous mode [ 30.598683][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.614687][ T3318] veth0_macvtap: entered promiscuous mode [ 30.629797][ T3340] veth0_vlan: entered promiscuous mode [ 30.667203][ T3340] veth1_vlan: entered promiscuous mode [ 30.674288][ T3318] veth1_macvtap: entered promiscuous mode [ 30.717164][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.724992][ T3338] veth0_vlan: entered promiscuous mode [ 30.735240][ T3336] veth0_vlan: entered promiscuous mode [ 30.747485][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.760335][ T3338] veth1_vlan: entered promiscuous mode [ 30.781241][ T1629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.791034][ T3336] veth1_vlan: entered promiscuous mode [ 30.799864][ T3340] veth0_macvtap: entered promiscuous mode [ 30.811492][ T1629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.817142][ T3491] capability: warning: `syz.0.6' uses 32-bit capabilities (legacy support in use) [ 30.829707][ T1629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.839488][ T1629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.851984][ T3340] veth1_macvtap: entered promiscuous mode [ 30.878094][ T3338] veth0_macvtap: entered promiscuous mode [ 30.889952][ T3336] veth0_macvtap: entered promiscuous mode [ 30.914838][ T3336] veth1_macvtap: entered promiscuous mode [ 30.924383][ T3340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.943089][ T3338] veth1_macvtap: entered promiscuous mode [ 30.968324][ T3340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.989871][ T3492] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.993732][ T3338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.009974][ T3336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.020202][ T3492] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 31.021228][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.053750][ T3338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.062698][ T3336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.073743][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.138546][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.179416][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.222086][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.238770][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.248362][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257953][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 31.257969][ T29] audit: type=1400 audit(1769132326.554:122): avc: denied { view } for pid=3509 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.291280][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.309360][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.339804][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.363549][ T29] audit: type=1400 audit(1769132326.574:123): avc: denied { tracepoint } for pid=3506 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.383147][ T29] audit: type=1400 audit(1769132326.644:124): avc: denied { create } for pid=3513 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.402224][ T29] audit: type=1400 audit(1769132326.644:125): avc: denied { listen } for pid=3513 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.402905][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.470719][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.540891][ T3529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 31.573338][ T29] audit: type=1400 audit(1769132326.744:126): avc: denied { create } for pid=3517 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.593898][ T29] audit: type=1400 audit(1769132326.744:127): avc: denied { write } for pid=3517 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.614196][ T29] audit: type=1400 audit(1769132326.744:128): avc: denied { bind } for pid=3517 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.634220][ T29] audit: type=1400 audit(1769132326.764:129): avc: denied { create } for pid=3522 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.653647][ T29] audit: type=1400 audit(1769132326.764:130): avc: denied { write } for pid=3522 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 31.673120][ T29] audit: type=1400 audit(1769132326.764:131): avc: denied { write } for pid=3495 comm="syz.1.2" name="hidraw0" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.702227][ T3533] loop1: detected capacity change from 0 to 512 [ 31.709326][ T3533] ======================================================= [ 31.709326][ T3533] WARNING: The mand mount option has been deprecated and [ 31.709326][ T3533] and is ignored by this kernel. Remove the mand [ 31.709326][ T3533] option from the mount to silence this warning. [ 31.709326][ T3533] ======================================================= [ 31.757717][ T3533] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.1.13: corrupted xattr block 95: invalid header [ 31.788891][ T3533] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 31.802378][ T3533] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.13: bg 0: block 7: invalid block bitmap [ 31.841460][ T3533] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 31.851814][ T3533] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.13: corrupted xattr block 95: invalid header [ 31.872322][ T3533] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 31.883415][ T3533] EXT4-fs (loop1): 1 orphan inode deleted [ 31.892796][ T3543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3543 comm=syz.0.15 [ 31.944714][ T3533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.013466][ T3533] xt_ecn: cannot match TCP bits for non-tcp packets [ 32.220039][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.492383][ T3556] loop0: detected capacity change from 0 to 128 [ 32.518195][ T3558] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.19'. [ 32.524838][ T3556] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 32.560981][ T3556] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 32.568543][ T3556] FAT-fs (loop0): Filesystem has been set read-only [ 32.595843][ T3560] loop2: detected capacity change from 0 to 1024 [ 32.606658][ T3560] EXT4-fs: Ignoring removed nobh option [ 32.612297][ T3560] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.654146][ T3562] can0: slcan on ttyS3. [ 32.689074][ T3562] loop1: detected capacity change from 0 to 512 [ 32.713210][ T3560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.728328][ T3574] No such timeout policy "syz0" [ 32.741335][ T3562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 32.746730][ T3576] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23'. [ 32.756788][ T3562] System zones: 1-12 [ 32.763314][ T3560] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'. [ 32.763750][ T3574] xfrm1: entered allmulticast mode [ 32.784769][ T3571] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 32.805926][ T3562] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.22: corrupted in-inode xattr: e_value size too large [ 32.820548][ T3340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.830077][ T3562] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.22: couldn't read orphan inode 15 (err -117) [ 32.844790][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.849534][ T3581] 9p: Bad value for 'wfdno' [ 32.908097][ T3587] loop2: detected capacity change from 0 to 512 [ 32.923676][ T3587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.936860][ T3587] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.956557][ T3561] can0 (unregistered): slcan off ttyS3. [ 32.967186][ T3587] EXT4-fs (loop2): 1 truncate cleaned up [ 32.982429][ T3587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.039316][ T3318] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 33.061403][ T3340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.084681][ T3318] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 33.104262][ T3318] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 33.145929][ T3318] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 33.195638][ T3318] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 33.226289][ T3609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 33.257182][ T3318] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 33.306416][ T3318] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 33.371817][ T3318] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 33.427216][ T3318] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 33.447462][ T3318] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 33.533582][ T3625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=3625 comm=syz.0.31 [ 33.546554][ T3625] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 33.697335][ T3634] loop4: detected capacity change from 0 to 4096 [ 33.706447][ T3634] EXT4-fs: Ignoring removed oldalloc option [ 33.712467][ T3634] EXT4-fs: Ignoring removed orlov option [ 33.719521][ T3634] EXT4-fs: inline encryption not supported [ 33.726163][ T3634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.736673][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.952761][ T3656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 33.985910][ T3656] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.028364][ T3338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.060648][ T3667] loop2: detected capacity change from 0 to 512 [ 34.126635][ T3675] debugfs: Bad value for 'uid' [ 34.131698][ T3675] debugfs: Bad value for 'uid' [ 34.150730][ T3667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.184868][ T3667] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.189542][ T3687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=3687 comm=syz.4.42 [ 34.198595][ T3667] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #4: comm syz.2.40: corrupted inode contents [ 34.220745][ T3667] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #4: comm syz.2.40: mark_inode_dirty error [ 34.221486][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.233013][ T3667] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #4: comm syz.2.40: corrupted inode contents [ 34.255654][ T102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.287207][ T3688] sch_tbf: peakrate 5120 is lower than or equals to rate 67108864 ! [ 34.302821][ T3667] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #4: comm syz.2.40: mark_inode_dirty error [ 34.341885][ T102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.369507][ T3695] loop3: detected capacity change from 0 to 128 [ 34.376428][ T3695] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 34.386613][ T3667] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.40: Failed to acquire dquot type 1 [ 34.401927][ T102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.413425][ T3695] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 34.420996][ T3695] FAT-fs (loop3): Filesystem has been set read-only [ 34.449972][ T3667] EXT4-fs error (device loop2): ext4_empty_dir:3078: inode #12: comm syz.2.40: Directory hole found for htree leaf block 0 [ 34.485044][ T102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.516617][ T3667] syz.2.40 (3667) used greatest stack depth: 9552 bytes left [ 34.596840][ T3340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.630581][ T102] bridge_slave_1: left allmulticast mode [ 34.636294][ T102] bridge_slave_1: left promiscuous mode [ 34.641945][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.660699][ T102] bridge_slave_0: left allmulticast mode [ 34.666432][ T102] bridge_slave_0: left promiscuous mode [ 34.672128][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.732812][ T3727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=3727 comm=syz.4.55 [ 34.799272][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.814528][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.825929][ T102] bond0 (unregistering): Released all slaves [ 34.838324][ T3727] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.847905][ T3717] syzkaller0: entered allmulticast mode [ 34.854602][ T3717] syzkaller0: entered promiscuous mode [ 34.893991][ T102] hsr_slave_0: left promiscuous mode [ 34.907455][ T102] hsr_slave_1: left promiscuous mode [ 34.913218][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.920642][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.932601][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.940096][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.957738][ T102] veth1_macvtap: left promiscuous mode [ 35.006918][ T102] veth0_macvtap: left promiscuous mode [ 35.012954][ T102] veth1_vlan: left promiscuous mode [ 35.018706][ T102] veth0_vlan: left promiscuous mode [ 35.160481][ T102] team0 (unregistering): Port device team_slave_1 removed [ 35.171109][ T102] team0 (unregistering): Port device team_slave_0 removed [ 35.223354][ T3759] loop4: detected capacity change from 0 to 512 [ 35.251323][ T3759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.278320][ T3759] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.306928][ T3759] xt_HMARK: spi-set and port-set can't be combined [ 35.328023][ T3756] syzkaller0: entered promiscuous mode [ 35.333520][ T3756] syzkaller0: entered allmulticast mode [ 35.453456][ T3716] syzkaller0: left promiscuous mode [ 35.459107][ T3716] syzkaller0: left allmulticast mode [ 35.465386][ T3338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.482873][ T3701] chnl_net:caif_netlink_parms(): no params data found [ 35.568520][ T3777] netlink: 64 bytes leftover after parsing attributes in process `syz.4.59'. [ 35.613689][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.620823][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.656925][ T3701] bridge_slave_0: entered allmulticast mode [ 35.663547][ T3701] bridge_slave_0: entered promiscuous mode [ 35.670416][ T3790] netlink: 36 bytes leftover after parsing attributes in process `syz.2.61'. [ 35.679762][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.687065][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.702310][ T3701] bridge_slave_1: entered allmulticast mode [ 35.714520][ T3701] bridge_slave_1: entered promiscuous mode [ 35.816606][ T3802] loop4: detected capacity change from 0 to 1024 [ 35.837257][ T3802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.850800][ T3701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.871552][ T3802] EXT4-fs warning (device loop4): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 35.878244][ T3701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.909761][ T3793] infiniband syz2: set active [ 35.914494][ T3793] infiniband syz2: added bond_slave_1 [ 35.925891][ T3793] RDS/IB: syz2: added [ 35.932373][ T3793] smc: adding ib device syz2 with port count 1 [ 35.943850][ T3701] team0: Port device team_slave_0 added [ 35.946215][ T3793] smc: ib device syz2 port 1 has no pnetid [ 35.958067][ T3701] team0: Port device team_slave_1 added [ 35.980049][ T3338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.997050][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.004025][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.030031][ T3701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.041545][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.048541][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.074503][ T3701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.125949][ T3701] hsr_slave_0: entered promiscuous mode [ 36.181626][ T3701] hsr_slave_1: entered promiscuous mode [ 36.211269][ T3701] debugfs: 'hsr0' already exists in 'hsr' [ 36.217417][ T3701] Cannot create hsr debugfs directory [ 36.246691][ T3821] Zero length message leads to an empty skb [ 36.352690][ T3828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.370714][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 36.370728][ T29] audit: type=1400 audit(1769132331.664:247): avc: denied { setattr } for pid=3827 comm="syz.4.69" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.486370][ T29] audit: type=1400 audit(1769132331.764:248): avc: denied { append } for pid=3834 comm="syz.2.71" name="pfkey" dev="proc" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 36.518031][ T3338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.576562][ T29] audit: type=1400 audit(1769132331.804:249): avc: denied { create } for pid=3836 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.596008][ T29] audit: type=1400 audit(1769132331.804:250): avc: denied { connect } for pid=3836 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.615548][ T29] audit: type=1400 audit(1769132331.804:251): avc: denied { write } for pid=3836 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.617425][ T3844] netlink: 'syz.3.72': attribute type 1 has an invalid length. [ 36.636058][ T29] audit: type=1400 audit(1769132331.864:252): avc: denied { read write } for pid=3842 comm="syz.4.70" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.665319][ T29] audit: type=1400 audit(1769132331.864:253): avc: denied { open } for pid=3842 comm="syz.4.70" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.688259][ T29] audit: type=1400 audit(1769132331.864:254): avc: denied { ioctl } for pid=3842 comm="syz.4.70" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.713998][ T3837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.732129][ T29] audit: type=1400 audit(1769132331.984:255): avc: denied { append } for pid=3839 comm="syz.2.73" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.737753][ T3797] geneve0: entered promiscuous mode [ 36.754897][ T29] audit: type=1400 audit(1769132331.994:256): avc: denied { create } for pid=3839 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.759980][ T3797] geneve0: entered allmulticast mode [ 36.807003][ T3701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.820462][ T3701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.844444][ T3701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.858947][ T3701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.951901][ T3701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.970077][ T3880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 36.986500][ T3701] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.004577][ T3882] set_capacity_and_notify: 1 callbacks suppressed [ 37.004705][ T3882] loop4: detected capacity change from 0 to 512 [ 37.025082][ T3884] netlink: 96 bytes leftover after parsing attributes in process `syz.0.80'. [ 37.033981][ T3884] tipc: Enabling of bearer rejected, failed to enable media [ 37.045896][ T3882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.051603][ T3884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=534 sclass=netlink_route_socket pid=3884 comm=syz.0.80 [ 37.073466][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.080710][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.083143][ T3882] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.104704][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.111801][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.128354][ T3893] netlink: 'syz.0.81': attribute type 83 has an invalid length. [ 37.240943][ T3701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.278085][ T3338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.478987][ T3701] veth0_vlan: entered promiscuous mode [ 37.495344][ T3701] veth1_vlan: entered promiscuous mode [ 37.526667][ T3701] veth0_macvtap: entered promiscuous mode [ 37.550351][ T3701] veth1_macvtap: entered promiscuous mode [ 37.580946][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.598733][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.629697][ T3939] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 37.639772][ T910] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.656580][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 37.666346][ T910] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.677689][ T910] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.734271][ T3906] syz.0.83 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 37.740070][ T910] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.745129][ T3906] CPU: 1 UID: 0 PID: 3906 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.745259][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.745310][ T3906] Call Trace: [ 37.745364][ T3906] [ 37.745387][ T3906] __dump_stack+0x1d/0x30 [ 37.745504][ T3906] dump_stack_lvl+0x95/0xd0 [ 37.745646][ T3906] dump_stack+0x15/0x1b [ 37.745769][ T3906] dump_header+0x80/0x240 [ 37.745840][ T3906] oom_kill_process+0x295/0x350 [ 37.745961][ T3906] out_of_memory+0x97d/0xb80 [ 37.746071][ T3906] try_charge_memcg+0x62e/0xa10 [ 37.746205][ T3906] charge_memcg+0x51/0xc0 [ 37.746305][ T3906] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 37.746468][ T3906] __read_swap_cache_async+0x17b/0x2d0 [ 37.746571][ T3906] swap_cluster_readahead+0x262/0x3c0 [ 37.746755][ T3906] swapin_readahead+0xde/0x840 [ 37.746856][ T3906] ? __perf_event_task_sched_in+0xa65/0xad0 [ 37.746923][ T3906] ? __rcu_read_unlock+0x4e/0x70 [ 37.746985][ T3906] ? swap_cache_get_folio+0x26f/0x280 [ 37.747117][ T3906] do_swap_page+0x2f4/0x2140 [ 37.747212][ T3906] ? _raw_spin_unlock+0x9/0x30 [ 37.747382][ T3906] ? finish_task_switch+0x79/0x280 [ 37.747486][ T3906] ? __schedule+0x82d/0xc90 [ 37.747591][ T3906] ? __pfx_default_wake_function+0x10/0x10 [ 37.747746][ T3906] handle_mm_fault+0xb40/0x3030 [ 37.747867][ T3906] ? vma_start_read+0x1c7/0x2c0 [ 37.747951][ T3906] do_user_addr_fault+0x62f/0x1050 [ 37.748052][ T3906] exc_page_fault+0x62/0xa0 [ 37.748149][ T3906] asm_exc_page_fault+0x26/0x30 [ 37.748219][ T3906] RIP: 0033:0x7fe658fc5eb8 [ 37.748279][ T3906] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 37.748339][ T3906] RSP: 002b:00007ffc10fbca50 EFLAGS: 00010246 [ 37.748401][ T3906] RAX: 0000000000000000 RBX: 00005555832ba500 RCX: 00007fe658fcb58e [ 37.748445][ T3906] RDX: 00007ffc10fbcaa0 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.748544][ T3906] RBP: 00007fe659287da0 R08: 0000000000000000 R09: 0000000000000000 [ 37.748582][ T3906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000009474 [ 37.748619][ T3906] R13: 00007fe65928609c R14: 00000000000091ac R15: 00007fe659286090 [ 37.748736][ T3906] [ 37.749329][ T3906] memory: usage 307200kB, limit 307200kB, failcnt 9631 [ 37.983220][ T3906] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 37.991168][ T3906] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 37.998487][ T3906] Memory cgroup stats for /syz0: [ 38.003050][ T3906] cache 20480 [ 38.011374][ T3906] rss 4096 [ 38.014485][ T3906] shmem 0 [ 38.017468][ T3906] mapped_file 20480 [ 38.021353][ T3906] dirty 20480 [ 38.024650][ T3906] writeback 0 [ 38.027990][ T3906] workingset_refault_anon 1 [ 38.032581][ T3906] workingset_refault_file 0 [ 38.037197][ T3906] swap 200704 [ 38.040595][ T3906] swapcached 8192 [ 38.044398][ T3906] pgpgin 33471 [ 38.047826][ T3906] pgpgout 33464 [ 38.051319][ T3906] pgfault 10795 [ 38.054830][ T3906] pgmajfault 2 [ 38.058333][ T3906] inactive_anon 8192 [ 38.062523][ T3906] active_anon 0 [ 38.065993][ T3906] inactive_file 20480 [ 38.070023][ T3906] active_file 0 [ 38.073531][ T3906] unevictable 0 [ 38.077022][ T3906] hierarchical_memory_limit 314572800 [ 38.082480][ T3906] hierarchical_memsw_limit 9223372036854771712 [ 38.088736][ T3906] total_cache 20480 [ 38.092623][ T3906] total_rss 4096 [ 38.096257][ T3906] total_shmem 0 [ 38.099812][ T3906] total_mapped_file 20480 [ 38.104241][ T3906] total_dirty 20480 [ 38.108122][ T3906] total_writeback 0 [ 38.112020][ T3906] total_workingset_refault_anon 1 [ 38.117161][ T3906] total_workingset_refault_file 0 [ 38.122204][ T3906] total_swap 200704 [ 38.126059][ T3906] total_swapcached 8192 [ 38.130249][ T3906] total_pgpgin 33471 [ 38.134149][ T3906] total_pgpgout 33464 [ 38.138194][ T3906] total_pgfault 10795 [ 38.142245][ T3906] total_pgmajfault 2 [ 38.146206][ T3906] total_inactive_anon 8192 [ 38.150619][ T3906] total_active_anon 0 [ 38.154767][ T3906] total_inactive_file 20480 [ 38.159399][ T3906] total_active_file 0 [ 38.163439][ T3906] total_unevictable 0 [ 38.167491][ T3906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.83,pid=3906,uid=0 [ 38.167933][ T3948] syz.4.90 uses obsolete (PF_INET,SOCK_PACKET) [ 38.182301][ T3906] Memory cgroup out of memory: Killed process 3906 (syz.0.83) total-vm:90424kB, anon-rss:1312kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:0 [ 38.231184][ T3951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.263239][ T3948] loop4: detected capacity change from 0 to 512 [ 38.270608][ T3951] process 'syz.3.92' launched './file0' with NULL argv: empty string added [ 38.300454][ T3956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=3956 comm=syz.3.94 [ 38.348795][ T3956] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.357995][ T3948] ------------[ cut here ]------------ [ 38.363500][ T3948] EA inode 11 i_nlink=2 [ 38.363514][ T3948] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.90/3948 [ 38.378357][ T3948] Modules linked in: [ 38.382281][ T3948] CPU: 1 UID: 0 PID: 3948 Comm: syz.4.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.391902][ T3948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.402047][ T3948] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 38.408794][ T3948] Code: f4 cd 9b ff 4c 8d 2d 1d 96 3f 05 49 8d 7e 40 e8 f4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 28 7b b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f 4c c5 03 66 66 66 66 66 66 2e [ 38.428474][ T3948] RSP: 0018:ffffc9000184f778 EFLAGS: 00010246 [ 38.434581][ T3948] RAX: ffff888100bb8a90 RBX: ffff88811a979c18 RCX: ffffffff81bc66d8 [ 38.442703][ T3948] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fbfce0 [ 38.450716][ T3948] RBP: 000000000000000b R08: 000188811a979bcb R09: 0000000000000000 [ 38.458730][ T3948] R10: ffffc9000184f6a8 R11: 0001c9000184f6a8 R12: ffff88811a979bc8 [ 38.466745][ T3948] R13: ffffffff86fbfce0 R14: ffff88811a979b80 R15: 0000000000000001 [ 38.474739][ T3948] FS: 00007efe4f0166c0(0000) GS:ffff8882aec7e000(0000) knlGS:0000000000000000 [ 38.483722][ T3948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.490354][ T3948] CR2: 0000001b33f24220 CR3: 000000010443a000 CR4: 00000000003506f0 [ 38.498412][ T3948] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.506466][ T3948] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 38.514479][ T3948] Call Trace: [ 38.517786][ T3948] [ 38.520741][ T3948] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 38.526697][ T3948] ? errseq_check+0x2c/0x50 [ 38.531243][ T3948] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 38.536833][ T3948] ? ext4_truncate+0x92b/0xad0 [ 38.541637][ T3948] ext4_evict_inode+0xa1f/0xd40 [ 38.546547][ T3948] ? __pfx_ext4_evict_inode+0x10/0x10 [ 38.552083][ T3948] evict+0x2af/0x510 [ 38.556110][ T3948] ? __dquot_initialize+0x146/0x7c0 [ 38.561362][ T3948] iput+0x4b9/0x650 [ 38.565280][ T3948] ext4_process_orphan+0x1a9/0x1c0 [ 38.570446][ T3948] ext4_orphan_cleanup+0x6a8/0xa00 [ 38.575688][ T3948] ext4_fill_super+0x3476/0x3800 [ 38.580716][ T3948] ? set_blocksize+0x1a3/0x310 [ 38.585525][ T3948] ? setup_bdev_super+0x30e/0x370 [ 38.590652][ T3948] ? __pfx_ext4_fill_super+0x10/0x10 [ 38.595956][ T3948] get_tree_bdev_flags+0x291/0x300 [ 38.601136][ T3948] ? __pfx_ext4_fill_super+0x10/0x10 [ 38.606483][ T3948] get_tree_bdev+0x1f/0x30 [ 38.610950][ T3948] ext4_get_tree+0x1c/0x30 [ 38.615434][ T3948] vfs_get_tree+0x57/0x1d0 [ 38.620042][ T3948] do_new_mount+0x288/0x700 [ 38.624653][ T3948] path_mount+0x4c0/0xb90 [ 38.629118][ T3948] ? user_path_at+0xbf/0x130 [ 38.633786][ T3948] __se_sys_mount+0x28c/0x2e0 [ 38.638560][ T3948] __x64_sys_mount+0x67/0x80 [ 38.643254][ T3948] x64_sys_call+0x2cca/0x3000 [ 38.648042][ T3948] do_syscall_64+0xc0/0x2a0 [ 38.652632][ T3948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.658651][ T3948] RIP: 0033:0x7efe505dbf4a [ 38.663090][ T3948] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.682818][ T3948] RSP: 002b:00007efe4f015e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.691311][ T3948] RAX: ffffffffffffffda RBX: 00007efe4f015ee0 RCX: 00007efe505dbf4a [ 38.699388][ T3948] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007efe4f015ea0 [ 38.707411][ T3948] RBP: 0000200000000180 R08: 00007efe4f015ee0 R09: 0000000000800700 [ 38.715455][ T3948] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 38.723479][ T3948] R13: 00007efe4f015ea0 R14: 000000000000046f R15: 000000000000002c [ 38.731534][ T3948] [ 38.734592][ T3948] ---[ end trace 0000000000000000 ]--- [ 38.741512][ T3968] netlink: 144 bytes leftover after parsing attributes in process `syz.5.96'. [ 38.751044][ T3948] EXT4-fs (loop4): 1 orphan inode deleted [ 38.757736][ T3948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.830366][ T3947] netlink: 'syz.4.90': attribute type 46 has an invalid length. [ 38.993434][ T3338] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.277746][ T3992] loop2: detected capacity change from 0 to 2048 [ 39.308211][ T3992] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.329738][ T3992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.348841][ T4002] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.105'. [ 39.420633][ T3992] can0: slcan on ttyS3. [ 39.483747][ T4016] batadv_slave_0: entered promiscuous mode [ 39.490097][ T4013] batadv_slave_0: left promiscuous mode [ 39.528361][ T4018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=4018 comm=syz.5.109 [ 39.562549][ T3996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3996 comm=syz.3.104 [ 39.587297][ T4022] loop4: detected capacity change from 0 to 256 [ 39.595807][ T4022] delete_channel: no stack [ 39.600411][ T4022] delete_channel: no stack [ 39.609163][ T3992] can0 (unregistered): slcan off ttyS3. [ 39.650001][ T3996] IPVS: set_ctl: invalid protocol: 8 8.1.1.1:21 [ 39.664860][ T3340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.708463][ T4044] netlink: 'syz.5.114': attribute type 1 has an invalid length. [ 39.740862][ T4052] 9p: Bad value for 'rfdno' [ 39.909649][ T4065] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4065 comm=syz.5.114 [ 40.382252][ T4091] netlink: 'syz.4.121': attribute type 83 has an invalid length. [ 40.450196][ T4089] syzkaller0: entered promiscuous mode [ 40.455839][ T4089] syzkaller0: entered allmulticast mode [ 40.566929][ T10] IPVS: starting estimator thread 0... [ 40.603383][ T4101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=4101 comm=syz.0.124 [ 40.666270][ T4099] IPVS: using max 2208 ests per chain, 110400 per kthread [ 40.880500][ T4110] mmap: syz.4.125 (4110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.996231][ T4114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.187520][ C1] hrtimer: interrupt took 26850 ns [ 41.440171][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 41.440188][ T29] audit: type=1400 audit(1769132336.734:515): avc: denied { name_bind } for pid=4129 comm="syz.0.133" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.468058][ T29] audit: type=1400 audit(1769132336.734:516): avc: denied { node_bind } for pid=4129 comm="syz.0.133" saddr=fe88::101 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 41.668824][ T29] audit: type=1326 audit(1769132336.964:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.736299][ T29] audit: type=1326 audit(1769132336.984:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.759627][ T29] audit: type=1326 audit(1769132336.984:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.782915][ T29] audit: type=1326 audit(1769132336.984:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.806308][ T29] audit: type=1326 audit(1769132336.984:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.829655][ T29] audit: type=1326 audit(1769132336.984:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.853160][ T29] audit: type=1326 audit(1769132336.984:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.876496][ T29] audit: type=1326 audit(1769132336.984:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe65900acb9 code=0x7ffc0000 [ 41.901199][ T4140] tipc: Enabling of bearer rejected, failed to enable media [ 42.188463][ T4157] hub 2-0:1.0: USB hub found [ 42.193961][ T4157] hub 2-0:1.0: 8 ports detected [ 42.260760][ T4157] loop4: detected capacity change from 0 to 512 [ 42.441824][ T4157] EXT4-fs (loop4): unsupported inode size: 61867 [ 42.448390][ T4157] EXT4-fs (loop4): blocksize: 1024 [ 42.514438][ T3008] ================================================================== [ 42.522563][ T3008] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 42.529354][ T3008] [ 42.531698][ T3008] write to 0xffff888102156a18 of 8 bytes by task 4157 on cpu 0: [ 42.539360][ T3008] inc_diskseq+0x2d/0x40 [ 42.543622][ T3008] disk_force_media_change+0x9e/0xe0 [ 42.548929][ T3008] lo_release+0x2eb/0x420 [ 42.553281][ T3008] bdev_release+0x373/0x3d0 [ 42.557807][ T3008] blkdev_release+0x15/0x20 [ 42.562341][ T3008] __fput+0x29b/0x650 [ 42.566368][ T3008] fput_close_sync+0xad/0x190 [ 42.571077][ T3008] __x64_sys_close+0x55/0xf0 [ 42.575700][ T3008] x64_sys_call+0x2c25/0x3000 [ 42.580416][ T3008] do_syscall_64+0xc0/0x2a0 [ 42.584958][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.590880][ T3008] [ 42.593212][ T3008] read to 0xffff888102156a18 of 8 bytes by task 3008 on cpu 1: [ 42.600760][ T3008] block_uevent+0x31/0x50 [ 42.605104][ T3008] dev_uevent+0x375/0x400 [ 42.609463][ T3008] uevent_show+0x11a/0x200 [ 42.613897][ T3008] dev_attr_show+0x3f/0xa0 [ 42.618334][ T3008] sysfs_kf_seq_show+0x1a3/0x280 [ 42.623285][ T3008] kernfs_seq_show+0x82/0xa0 [ 42.627892][ T3008] seq_read_iter+0x31e/0x940 [ 42.632534][ T3008] kernfs_fop_read_iter+0xc1/0x330 [ 42.637670][ T3008] vfs_read+0x6c0/0x7f0 [ 42.641852][ T3008] ksys_read+0xdc/0x1a0 [ 42.646020][ T3008] __x64_sys_read+0x40/0x50 [ 42.650547][ T3008] x64_sys_call+0x2889/0x3000 [ 42.655245][ T3008] do_syscall_64+0xc0/0x2a0 [ 42.659769][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.665671][ T3008] [ 42.668003][ T3008] value changed: 0x000000000000003d -> 0x000000000000003e [ 42.675118][ T3008] [ 42.677458][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 42.683623][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 42.694476][ T3008] Tainted: [W]=WARN [ 42.698292][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.708350][ T3008] ================================================================== [ 42.723731][ T4169] ------------[ cut here ]------------ [ 42.729262][ T4169] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 42.745122][ T4169] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.0.144/4169 [ 42.756032][ T4169] Modules linked in: [ 42.759999][ T4169] CPU: 1 UID: 0 PID: 4169 Comm: syz.0.144 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 42.771296][ T4169] Tainted: [W]=WARN [ 42.775219][ T4169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.785379][ T4169] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 42.791692][ T4169] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 42.811441][ T4169] RSP: 0018:ffffc900011e73a0 EFLAGS: 00010246 [ 42.817546][ T4169] RAX: ffff88811bcd6d90 RBX: 0000000000000000 RCX: 0000000000000002 [ 42.825552][ T4169] RDX: ffffffff867f7987 RSI: ffffffff867cc509 RDI: ffffffff86fb5be0 [ 42.833590][ T4169] RBP: ffff8881048b3b50 R08: 0000000000000000 R09: 0000000000000002 [ 42.841640][ T4169] R10: ffffffff8912ba78 R11: 00000000000000f0 R12: ffff8881048b3b10 [ 42.849717][ T4169] R13: 0000000000000000 R14: ffff8881048b3b5c R15: ffff8881048b3b48 [ 42.857749][ T4169] FS: 00007fe657a676c0(0000) GS:ffff8882aec7e000(0000) knlGS:0000000000000000 [ 42.866800][ T4169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.871541][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 42.873419][ T4169] CR2: 0000200000001000 CR3: 000000015086e000 CR4: 00000000003506f0 [ 42.890215][ T4169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.898254][ T4169] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 42.906326][ T4169] Call Trace: [ 42.909695][ T4169] [ 42.912675][ T4169] reg_set_min_max+0x21c/0x260 [ 42.917587][ T4169] check_cond_jmp_op+0x1367/0x1a80 [ 42.922827][ T4169] do_check+0x3356/0x8250 [ 42.927236][ T4169] ? __account_obj_stock+0x211/0x350 [ 42.932558][ T4169] ? __pfx_verbose+0x10/0x10 [ 42.937300][ T4169] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 42.942806][ T4169] do_check_common+0xccf/0x1300 [ 42.947728][ T4169] bpf_check+0x2f85/0xc890 [ 42.948070][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 42.952199][ T4169] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 42.961147][ T4176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.146'. [ 42.967131][ T4169] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 42.981804][ T4169] ? try_charge_memcg+0x215/0xa10 [ 42.987055][ T4169] ? pcpu_block_refresh_hint+0x10b/0x170 [ 42.992738][ T4169] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 42.998972][ T4169] ? _find_next_zero_bit+0x29/0xa0 [ 43.004120][ T4169] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 43.010318][ T4169] ? css_rstat_updated+0xbb/0x280 [ 43.015414][ T4169] ? mod_memcg_state+0x182/0x260 [ 43.020470][ T4169] ? __rcu_read_unlock+0x4e/0x70 [ 43.025447][ T4169] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 43.031328][ T4169] ? pcpu_alloc_noprof+0xd18/0x1210 [ 43.036571][ T4169] ? should_fail_ex+0x30/0x280 [ 43.041386][ T4169] ? __kmalloc_noprof+0x2a3/0x580 [ 43.046496][ T4169] ? security_bpf_prog_load+0x60/0x140 [ 43.052022][ T4169] ? selinux_bpf_prog_load+0xac/0xd0 [ 43.057395][ T4169] ? security_bpf_prog_load+0x9e/0x140 [ 43.062955][ T4169] bpf_prog_load+0xf76/0x1140 [ 43.067760][ T4169] ? security_bpf+0x2b/0x90 [ 43.072376][ T4169] __sys_bpf+0x469/0x7b0 [ 43.076672][ T4169] __x64_sys_bpf+0x41/0x50 [ 43.081120][ T4169] x64_sys_call+0x28e1/0x3000 [ 43.085895][ T4169] do_syscall_64+0xc0/0x2a0 [ 43.090532][ T4169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.096461][ T4169] RIP: 0033:0x7fe65900acb9 [ 43.100895][ T4169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.120652][ T4169] RSP: 002b:00007fe657a67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.121186][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b8e6000: rx timeout, send abort [ 43.129111][ T4169] RAX: ffffffffffffffda RBX: 00007fe659285fa0 RCX: 00007fe65900acb9 [ 43.145302][ T4169] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 43.153353][ T4169] RBP: 00007fe659078bf7 R08: 0000000000000000 R09: 0000000000000000 [ 43.161423][ T4169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.169508][ T4169] R13: 00007fe659286038 R14: 00007fe659285fa0 R15: 00007ffc10fbc968 [ 43.178375][ T4169] [ 43.181433][ T4169] ---[ end trace 0000000000000000 ]--- [ 43.223470][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.230697][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.296845][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.309337][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.362383][ T52] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.371743][ T52] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.390236][ T52] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.400244][ T52] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.410267][ T52] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.419192][ T52] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.428118][ T52] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.437007][ T52] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0