last executing test programs: 9m52.332256784s ago: executing program 32 (id=23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000f20", @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf2501000000080001000100000004000480080002000100000010000c800c000b8008000a00e0a2000004000880"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48084) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@float={0x6, 0x0, 0x0, 0x10, 0x8}, @restrict={0x2, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000680)=""/234, 0x33, 0xea, 0x1, 0x3}, 0x28) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) copy_file_range(r8, 0x0, r8, &(0x7f00000000c0)=0x863, 0x863, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffcb}, @generic={0x95, 0x9, 0x4, 0xa, 0xd8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x30, '\x00', r6, @fallback=0x2, r7, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x8, 0xf, 0x3}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000480)=[0x1, r8], 0x0, 0x10, 0x80000000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) close(0x3) socket(0x10, 0x3, 0x9) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)=""/52, 0x0) unshare(0x42020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) connect$inet(0xffffffffffffffff, 0x0, 0x0) 9m36.91925038s ago: executing program 33 (id=90): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0xe}, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x32, &(0x7f0000000740)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket(0x10, 0x803, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x67) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) 9m36.45741209s ago: executing program 34 (id=94): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nolazytime}, {@lazytime}, {@sysvgroups}, {@norecovery}, {@usrjquota}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000001b40)="$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") r1 = open(0x0, 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80010000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x3c8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m29.406065005s ago: executing program 35 (id=161): unshare(0x2040400) prctl$PR_SET_MM_EXE_FILE(0x50, 0xd, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20, 0x3, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9m21.747800224s ago: executing program 36 (id=267): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x88) io_uring_enter(r1, 0x7dc2, 0x4c76, 0x2d, &(0x7f0000000440)={[0x6]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_setup(0xf09, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}) sendto$packet(r6, &(0x7f00000002c0)="05031682d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x80000000, 0x521, 0x10, r1, 0x1, '\x00', r7, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x9}, 0x50) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000500)=@req3={0x4, 0x2, 0x6b, 0xfffffedc, 0x9, 0x6, 0xffffffff}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x18002, &(0x7f0000000540)={[{@sb={'sb', 0x3d, 0x18}}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xff}}, {@norecovery}, {@journal_async_commit}, {@dax_always}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xa}}, {@dioread_nolock}]}, 0x0, 0x566, &(0x7f0000001b40)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f0000000000)) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB="5470000000840f76537e3b64c542401d0a37b9e01e2cf1995267a821ea2b4d35368f3e98ad3d6bbbb9de90719b5ec1577af1ddc94b45c6053cde55ab9ec1292fcacf8d03a4ceaa3586f3e698dbe3846dbc2e0576de12d9faa42dceb2b38e88af9e7669119495a0b41b298300abf72f85a6a87649a39e3f80c9090790e749f799f79994", @ANYRES32=0x0, @ANYBLOB="a400060040000000200012800c0001006d6163766c616e0010000280080003000300000004000580140035006d6163766c616e300000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000380)='*,$,\x00', 0x0, r2) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) 9m12.942635994s ago: executing program 37 (id=371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x20, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x80) 9m4.119853756s ago: executing program 38 (id=471): getgid() (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r3, r3, 0x2f}, 0x20) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xf, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000140), 0x1003, r4}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) 8m30.321688541s ago: executing program 39 (id=1004): r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0xa000400) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x2e) r4 = inotify_init1(0x800) r5 = fcntl$dupfd(r3, 0x406, r4) setsockopt$inet_mtu(r5, 0x111, 0xa, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) 7m41.35822099s ago: executing program 40 (id=1505): unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x6, 0x81, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@block_validity}, {@commit={'commit', 0x3d, 0xaeed}}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) open(0x0, 0x14507e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) io_setup(0x7d, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_submit(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 7m13.964259747s ago: executing program 41 (id=1722): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027"], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x2, 0x7, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x66, 0x0, 0x3, 0x2b, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0xe8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010101]}, @timestamp_addr={0x44, 0x34, 0x86, 0x1, 0x3, [{@remote, 0x80000000}, {@private=0xa010100, 0xe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@multicast1, 0x200000}, {@multicast2, 0x45}, {@private=0xa010101, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0x5, [{@empty, 0x1}, {@empty, 0x522}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x75, 0x3, 0x3, [{@broadcast, 0x3be333c2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x6}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x7800, 0x700, 0x0, 0xfdb, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x68, 0x0, 0x6, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0x12, "15667dc4463b187cb487a3663b3c8733"}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0x9, 0xff, 0x2, 0x40, @dev={0xfe, 0x80, '\x00', 0x23}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x8000, 0x400, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x4, 0x0, 0xa, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa8, 0x40, 0x3, 0xfffffff8}}) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r13}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000700)={&(0x7f0000000140), 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd4, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040000}, 0x2f784b387bc3ca6e) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/239, 0xef}], 0x1, 0xe, 0x79) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000012006bab9a1fe3d86e17aa0a076b876c1d0048007ea60864160afb650400bd1d38001d009580472760bc06000800a705251e6182949a36510a84c9fa896e0a374841e1028b8f0b01000100000000004509c5bb000011d600", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) 6m49.185640582s ago: executing program 42 (id=1927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc015}, 0x0) 6m28.380350286s ago: executing program 43 (id=2122): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 5m0.380484103s ago: executing program 44 (id=2854): unshare(0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m54.414379832s ago: executing program 45 (id=2903): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@delalloc}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000000)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4) 3m46.884912006s ago: executing program 46 (id=3594): syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x28, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x10, "9606053d0006ff003a0000b61af9"}]}, @lsrr={0x83, 0xb, 0x0, [@loopback, @loopback]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 3m46.641292338s ago: executing program 47 (id=3600): r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x85, &(0x7f0000001040)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xf9, 0x1213, &(0x7f0000000600)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000"], 0x0) 3m44.856767246s ago: executing program 48 (id=3616): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10004, 0x6, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, 0x0, 0x54, 0x1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) 3m33.181335251s ago: executing program 49 (id=3677): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xff000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 3m26.271162423s ago: executing program 50 (id=3743): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) capset(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a35f200140000fe50000000000007ffffff00000000bbfe8080000000000000000000000000aa00004e22", @ANYBLOB], 0x0) write$P9_RREAD(r0, 0x0, 0xb) 3m25.103134366s ago: executing program 1 (id=3748): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000340)={[{@journal_async_commit}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc616}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7c7, &(0x7f0000000480)="$eJzs3c9rXNUeAPDvnfxq077XPHjw2rdpVu8VSidtX16rIJjiQgQLBV1rw2QaaiaZkklKE7JoEUEQUYsLRTeu/VF3bkXX/g1uRKSlalqsuCgjd34kk5l0mqSZjG0+H7jJOXPPnXO/99c5M/cwN4Bdazj9k4k4FBHvJhEHaq8nEdFXSfVGjFXL3VteyqVTEuXyS78klTJ3l5dy0bBMal8tczAivnkj4mimtd7SwuLUeKGQn63lR+amL42UFhaPXZwen8xP5mdOnRgdPXn6/6dPbV+sv323uP/We8//94uxP17/1423v01iLPbX5jXGsV2GY7i2TfrSTbjGc9tdWZcl3V4BtiQ9NXuqZ3kcigPRU0kBAE+ytP0vAwC7TKL9B4Bdpv49wN3lpVx96u43Ejvr9pmIJKnGX7+/WZ3TW7tnt6dyH3TwbhK9tTuisY33u4Yj4uOvXvksnaJD9yEB1nP1WkScHxpuvf4nLWMWNuv4BsoMN+Vd/2DnfH0mIp5ar/+XWen/xEr/Z9XAOufuVgxH9DfmW8//zM11F3x2Gyqv9f+eqY5tSwNt6P+tDFob6qnl/pZmDkfExUI+vbb9PSKORN/AhYuF/Ik2dRy5c//Og+Y19v9+vf7ap2n96f/VEpmbvQNrl5kYnxt/lJgb3b4W8e/e1bF99fj7V67/eyJZu4sq0v7vuXZvfHg1+cLTb370oGJp/Gm89ak1/s4qfxLxn2iNv7GHn7QdnziS7v7j1b/r1/HlDx8MPqj+xv2fTmn99c8CzZIOjLNL9/9g+/iHksbxmqXtrb8p/vut8a9//PcnL1fS9SPzyvjc3OyJiP7kxdbXT64uW8/Xy6fxVyNtjj/TcPy3Xv/ST4LnNxhj762fP99g/O32f0eGWKbxT2xq/28+cePeVM/W40/3/2gldaT2ykauf4V8f2xkBR9l2wEAAAAAAAAAAAAAAAAAAAAAAADARmUiKs/Azq6kM5lstvoM73/GYKZQLM0dvVCcn5molhuKvkz9py7rv7FY//3Toer8JM2fbMr/LyL+ERHvD+yt5LO5YmGiy7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN2+yjP/k0zz8/9TPw20WTDp3alVBAA6YU9TvrXdv5Nfky2Xy+UOrxMA0FnN7f9GfPhOB1YEANgxbdr/vTu5HgDAztnK538A4PGm/QeA3Uf7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedO3s2ncq/Ly/lkoirE5cX5qeKl49N5EtT2en5XDZXnL2UnSwWJwv5bK44/bD3KxSLl0ZjZv7KyFy+NDdSWlh8dbo4P5NEUpmd79uJoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgk0oLi1PjhUJ+9olIvBURa18pP9ob7q1tpu4HmET3N2+3Ej8e+/5guzLXH3IYj/0lonjMEl2+MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Jv4MAAD//4Z0H5g=") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb180002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x7, 0xa4, 0x4, 0xd, 0x96, 0xfa, 0x8, 0x7, 0x2, 0x7, 0xf, 0x4e, 0x9}, 0xe) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)={0x2, 0x14, 0xf8, 0x9, 0x13, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d4, 0x3, 0x8, 0x40, 0x1, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3505}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x38, {0x6, 0x3c, 0x9, 0x29, 0x0, 0x8, 0x0, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_lifetime={0x4, 0x3, 0x8, 0x1d3, 0xfffffffffffffff9, 0x7fff}]}, 0x98}}, 0x48814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000011600000000000000000000000a2c000000060a09040000000000000000020000200900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000608000948000000000900020073797a32000000000900010073797a30"], 0x88}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 3m24.065915478s ago: executing program 1 (id=3754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r4 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x8880, 0x17e) lseek(r6, 0x104, 0x1) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x82) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48) getdents64(r6, 0x0, 0x4f) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r3, 0x800}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000040), 0x4, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r4, 0x0, 0xa) (async) fchdir(r5) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0x8880, 0x17e) (async) lseek(r6, 0x104, 0x1) (async) inotify_init1(0x0) (async) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x82) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000055"], 0x48) (async) getdents64(r6, 0x0, 0x4f) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r3, 0x800}, 0x8) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) (async) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000040), 0x4, r0}, 0x38) (async) 3m23.224274552s ago: executing program 1 (id=3758): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x1000000000000000, 0xfffffffffffffff8, 0x87, 0x7, 0x10}, 0x0, &(0x7f0000000240)={0x21, 0xc, 0x715, 0x8000000000000000, 0x10000000, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) unshare(0x60000600) 3m23.160983998s ago: executing program 51 (id=3758): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x1000000000000000, 0xfffffffffffffff8, 0x87, 0x7, 0x10}, 0x0, &(0x7f0000000240)={0x21, 0xc, 0x715, 0x8000000000000000, 0x10000000, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) unshare(0x60000600) 2m27.231577334s ago: executing program 52 (id=4122): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000100)={0x100, 0x8}) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r2) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000000660000000200000018000000000000000000000000000000950000000000000077030006000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000083bf64043e82cb8f5c639", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0a93f670004e264303eec992000004090019ff08a5dd9467ed3aed6d", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) syz_emit_ethernet(0x66, &(0x7f0000000580)={@local, @random="0000ea0700", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x2d, 0x58, 0xffff, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0x0, 0xc9, 0x3, 0x7, [{@multicast1, 0x3}, {@multicast2, 0xe}, {@multicast2, 0x9}, {@multicast2, 0x1}, {@empty, 0x7}, {@empty, 0x2}, {@broadcast, 0x9}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x4000, {[@mptcp=@generic={0x40, 0x0, "ea3b5b11da"}, @mptcp=@ack={0x1e, 0xf, 0x1, 0x4, "df4594206db33ef12f8e12"}, @fastopen={0x22, 0x0, "3d8ff088349c23bd1ea7d3d72751"}]}}}}}}}, 0x0) keyctl$invalidate(0x15, r3) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) 2m23.66912439s ago: executing program 53 (id=4152): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750bc28d08a56331db79ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000300390001400100000031007a46e3988285dc75df12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e4612476046e4da249cf1510f1748acdd9dbdf82", 0x9f}], 0x1}, 0x0) 1m30.166561401s ago: executing program 2 (id=4543): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000054001880080003400000000b08000140000000010800"], 0x90}}, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f00000000c0)) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x2}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x1, 0x3, 0xee}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1m29.461991643s ago: executing program 2 (id=4554): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe6c4}}, {@journal_async_commit}, {@noblock_validity}, {@bsdgroups}]}, 0x1, 0x453, &(0x7f0000000c40)="$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") fcntl$setflags(r0, 0x2, 0x0) 1m29.245034833s ago: executing program 8 (id=4555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x2200000, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYBLOB="6ae339f51ed0bfcc458ba2ebce81a7867cced1a21a2556f570ea"], 0x1, 0x122e, &(0x7f0000002580)="$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") r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000000)=0x30) r3 = timerfd_create(0x6, 0x80800) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) fcntl$lock(r3, 0x7, &(0x7f0000000440)={0x2, 0x4, 0x7, 0x12, r4}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, 0x0, 0x20002800) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) close(0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x800) 1m29.109426044s ago: executing program 2 (id=4558): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00001b3000/0x4000)=nil, 0x4000, &(0x7f0000000000)='{\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffffff, 0x0, 0x11e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x20, 0x70bd25, 0x0, {{@in=@multicast1, 0x0, 0xff}, @in=@broadcast, {@in6=@mcast1, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x66177cb5e5c40d1c}, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x3b}, {0x0, 0xfc62, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800000000000}, {0x4000, 0x2, 0x0, 0x8}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x3}, 0xfffffff9, 0x38, 0x9, 0x80000}}, 0x128}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82790, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x2000000, &(0x7f0000000200)=ANY=[]) getpid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1m28.617111218s ago: executing program 8 (id=4562): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m28.536155565s ago: executing program 54 (id=4563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x7ffc, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1m28.279217958s ago: executing program 8 (id=4567): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000080)="8a8e84e0cecbdf3c29f96e12a2f1bf2fb03f3e00359794cee79f128ae896292c97a478d9612697b899a3ecef41f1bfb2fe24cb4238de36791d1684e997e6ca988a13612a50004f0b37bbbdc88c6004a8d36b4076343d557f44bd2bad3c2b25725a16e23ae4754a074e28b9d5e8ffedfb8389af24e4aac927deff1ffae42515618e2d28dde78925451f9e4ffbb53f6d8b630cf6d31e765e7def3104a982a298c7b4e39466e0417cc30f6f7bccaf2e87ee84b2cb240132c9f62aa585d5c719d50ee8599bccc539ec38c7c2543f6df5eeae0dcf2b6501f1d2187a22123722da40b9f75930cba103b13b46c5235c", &(0x7f0000000180)=@udp}, 0x20) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000200)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/68, 0x44, 0x1, &(0x7f00000002c0)=""/37, 0x25}, &(0x7f0000000340)=0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r3, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x3c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8, 0x5, "c9555a49"}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "af7c0ae61082b9df05edbf2ff97976dd09c15d679af1dc3381ab16787a370e68dc96102f7c168605e311e13c"}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000891}, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4000, r2}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f00000005c0)={r4, r1}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000600)={r4, 0x9, 0x4, 0xff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, r5, 0x24, 0x0, @void}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000880)={@dev, 0x0}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0xfd, 0x0, 0x1, @mcast2, @loopback, 0x40, 0x80, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0xe, 0x101, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80, 0x40, 0x100}}) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r4, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0], 0x0, 0x7d, &(0x7f0000000c00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000e40)=0x0, &(0x7f0000000e80)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000ec0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000001200)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x1e0, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x2080}, 0x4000) 1m28.171049017s ago: executing program 2 (id=4568): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000340)={[{@journal_async_commit}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc616}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7c7, &(0x7f0000000480)="$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") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)={0x2, 0x14, 0xf8, 0x9, 0x13, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d4, 0x3, 0x8, 0x40, 0x1, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3505}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x38, {0x6, 0x3c, 0x9, 0x29, 0x0, 0x8, 0x0, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_lifetime={0x4, 0x3, 0x8, 0x1d3, 0xfffffffffffffff9, 0x7fff}]}, 0x98}}, 0x48814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000011600000000000000000000000a2c000000060a09040000000000000000020000200900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000608000948000000000900020073797a32000000000900010073797a30"], 0x88}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 1m28.115067062s ago: executing program 8 (id=4569): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000340)={[{@journal_async_commit}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc616}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7c7, &(0x7f0000000480)="$eJzs3c9rXNUeAPDvnfxq077XPHjw2rdpVu8VSidtX16rIJjiQgQLBV1rw2QaaiaZkklKE7JoEUEQUYsLRTeu/VF3bkXX/g1uRKSlalqsuCgjd34kk5l0mqSZjG0+H7jJOXPPnXO/99c5M/cwN4Bdazj9k4k4FBHvJhEHaq8nEdFXSfVGjFXL3VteyqVTEuXyS78klTJ3l5dy0bBMal8tczAivnkj4mimtd7SwuLUeKGQn63lR+amL42UFhaPXZwen8xP5mdOnRgdPXn6/6dPbV+sv323uP/We8//94uxP17/1423v01iLPbX5jXGsV2GY7i2TfrSTbjGc9tdWZcl3V4BtiQ9NXuqZ3kcigPRU0kBAE+ytP0vAwC7TKL9B4Bdpv49wN3lpVx96u43Ejvr9pmIJKnGX7+/WZ3TW7tnt6dyH3TwbhK9tTuisY33u4Yj4uOvXvksnaJD9yEB1nP1WkScHxpuvf4nLWMWNuv4BsoMN+Vd/2DnfH0mIp5ar/+XWen/xEr/Z9XAOufuVgxH9DfmW8//zM11F3x2Gyqv9f+eqY5tSwNt6P+tDFob6qnl/pZmDkfExUI+vbb9PSKORN/AhYuF/Ik2dRy5c//Og+Y19v9+vf7ap2n96f/VEpmbvQNrl5kYnxt/lJgb3b4W8e/e1bF99fj7V67/eyJZu4sq0v7vuXZvfHg1+cLTb370oGJp/Gm89ak1/s4qfxLxn2iNv7GHn7QdnziS7v7j1b/r1/HlDx8MPqj+xv2fTmn99c8CzZIOjLNL9/9g+/iHksbxmqXtrb8p/vut8a9//PcnL1fS9SPzyvjc3OyJiP7kxdbXT64uW8/Xy6fxVyNtjj/TcPy3Xv/ST4LnNxhj762fP99g/O32f0eGWKbxT2xq/28+cePeVM/W40/3/2gldaT2ykauf4V8f2xkBR9l2wEAAAAAAAAAAAAAAAAAAAAAAADARmUiKs/Azq6kM5lstvoM73/GYKZQLM0dvVCcn5molhuKvkz9py7rv7FY//3Toer8JM2fbMr/LyL+ERHvD+yt5LO5YmGiy7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN2+yjP/k0zz8/9TPw20WTDp3alVBAA6YU9TvrXdv5Nfky2Xy+UOrxMA0FnN7f9GfPhOB1YEANgxbdr/vTu5HgDAztnK538A4PGm/QeA3Uf7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedO3s2ncq/Ly/lkoirE5cX5qeKl49N5EtT2en5XDZXnL2UnSwWJwv5bK44/bD3KxSLl0ZjZv7KyFy+NDdSWlh8dbo4P5NEUpmd79uJoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgk0oLi1PjhUJ+9olIvBURa18pP9ob7q1tpu4HmET3N2+3Ej8e+/5guzLXH3IYj/0lonjMEl2+MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Jv4MAAD//4Z0H5g=") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x7, 0xa4, 0x4, 0xd, 0x96, 0xfa, 0x8, 0x7, 0x2, 0x7, 0xf, 0x4e, 0x9}, 0xe) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)={0x2, 0x14, 0xf8, 0x9, 0x13, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d4, 0x3, 0x8, 0x40, 0x1, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3505}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x38, {0x6, 0x3c, 0x9, 0x29, 0x0, 0x8, 0x0, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_lifetime={0x4, 0x3, 0x8, 0x1d3, 0xfffffffffffffff9, 0x7fff}]}, 0x98}}, 0x48814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000011600000000000000000000000a2c000000060a09040000000000000000020000200900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000608000948000000000900020073797a32000000000900010073797a30"], 0x88}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 1m27.514631145s ago: executing program 2 (id=4573): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x68}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xc9}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004091}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b25374bb4681eb9fde0987384956ad0f2277c55bdaaa69798c72598e36477556867c1f10cf1ce3327ccf81d1ebbfbb3706aa83", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc000000050006000d000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, &(0x7f0000000480)=[{0x0, 0xbe63, 0x9}, {0x5, 0x75b2d368, 0x8}], 0xaaaabbc, 0x8000e5}) pread64(r0, &(0x7f0000000340)=""/123, 0x7b, 0xad) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @private=0xa010102}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) 1m27.492694948s ago: executing program 8 (id=4574): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x97f684794d8c436b) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x4800, 0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e40)=ANY=[@ANYBLOB="180000001600010a00000000000000f5963034d085b2e0f0"], 0x18}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd24, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x9, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x1}]}}]}, 0x44}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") r6 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$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") sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYRES64=r5, @ANYRES16=r6, @ANYBLOB="000425bd7000fcdbdf252800000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990005000000120000001b00340089282b1c5af2fe641ff97fc6eb68d23eeb23f1842d9d9e0003005f000a000600df2b6f2d87340000"], 0x54}, 0x1, 0x0, 0x0, 0x4006}, 0x4004005) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e24, @remote}}}, 0xa0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m26.389150076s ago: executing program 8 (id=4580): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd2a, 0x35dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4080080) 1m26.329112851s ago: executing program 2 (id=4581): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r3, 0x0, 0x0, 0xfffffe01, 0x800) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r4}, 0x38) r5 = epoll_create1(0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)={0x0, 0x100000000000}) epoll_pwait2(r5, &(0x7f0000000100)=[{}, {}], 0x2, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0xa20]}, 0x8) socket$tipc(0x1e, 0x2, 0x0) 1m26.317964812s ago: executing program 55 (id=4580): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r2, 0x1, 0x70bd2a, 0x35dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4080080) 1m26.290214094s ago: executing program 56 (id=4581): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r3, 0x0, 0x0, 0xfffffe01, 0x800) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r4}, 0x38) r5 = epoll_create1(0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)={0x0, 0x100000000000}) epoll_pwait2(r5, &(0x7f0000000100)=[{}, {}], 0x2, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0xa20]}, 0x8) socket$tipc(0x1e, 0x2, 0x0) 1m16.674217156s ago: executing program 1 (id=4583): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000340)={[{@journal_async_commit}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc616}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7c7, &(0x7f0000000480)="$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") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002200)={0x2, 0x14, 0xf8, 0x9, 0x13, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d4, 0x3, 0x8, 0x40, 0x1, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2b, 0x3505}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x38, {0x6, 0x3c, 0x9, 0x29, 0x0, 0x8, 0x0, @in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_lifetime={0x4, 0x3, 0x8, 0x1d3, 0xfffffffffffffff9, 0x7fff}]}, 0x98}}, 0x48814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000011600000000000000000000000a2c000000060a09040000000000000000020000200900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000608000948000000000900020073797a32000000000900010073797a30"], 0x88}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 1m16.016400174s ago: executing program 1 (id=4620): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x4}, 0x6057, 0x6, 0x100, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) (async) modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x1000}, 0x10) (async) rt_sigqueueinfo(0x0, 0x3, &(0x7f0000000080)={0x28, 0x4, 0x1}) 1m15.717050661s ago: executing program 1 (id=4622): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) 1m15.675279505s ago: executing program 57 (id=4622): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) 1m12.306157293s ago: executing program 3 (id=4644): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @remote, 'tunl0\x00'}}, 0x1e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000a, 0x110, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000000000000001, 0x9}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0xc01, 0x40, 0x4, 0x0, 0x3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100a322322d18ece14c000080000000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b900000000000000150000001800000069ff0000000000000e00000085100000fdffffff85000000d4000000040000000000000000000000000000007fa30400000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xe243, 0x82, &(0x7f0000000700)=""/130, 0x40f00, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x606, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5], &(0x7f0000000a40)=[{0x5, 0x2, 0xe, 0x4}, {0x3, 0x3, 0x1, 0x4}], 0x10, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t||') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r9 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r10}}, 0x48) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb4, 0x7, 0x20, 0xe, 0x0, 0x3, 0x4e020, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x110008, 0x4ce, 0x7921, 0x1, 0x9, 0x5, 0x0, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r2, 0xa) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1m11.085020101s ago: executing program 3 (id=4654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x306, 0xfffe, 0x55, 0xffffe, 0x0}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="a6", 0x1, 0x20000001, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0xa5}, 0x1c) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendto$inet(r2, &(0x7f00000000c0)="b135bed8c297cabc90b8478b40e490b9d1cfa949e1561bfbad3995091c4613dec0cb45f7f3d09cd10e339fb9668264300832d3874292e4c17dfe1802980b2ece509b46bf151981cf7143a54753a2540bbf874c18c2203269d43248fdf55870b29be735f1e2da372310cdac13e10ab9edba3fec07e88d9509bef1c4a3c6d0de3ee280af01d6740acd5cb91e8500405b2a35fde4aab2909fefc194e772f43f12b297654bf34caaeedfcdc24922d5be98e561ff5af46743127f8b0ef4fef915ce3c944cce2841ad95de6d5a7b2de567450a6e71155edb94ac", 0xd7, 0x8, &(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='veno', 0x4) shutdown(r0, 0x1) 1m10.900917428s ago: executing program 0 (id=4655): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x40, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x200, 0x2, 0x20, 0x0, 0x18}, {0x0, 0x7, 0x0, 0x2, 0x1000000, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc0000001b0011012dbd7000fcdbdf25fc020000000000000000000000000000fc0200000000000000000000000000004e2100004e2303ff0200602073000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100008000000000ff0f000000000000060000000000000004000000000000000000000000010000ffffff7f00000000080000000000000007000000000000000100000000000000674c00000000000009000000000000009f440000000000000900000000000000020001010000000010000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x149001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x54, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x200000000000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1m10.800335357s ago: executing program 3 (id=4658): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) r1 = syz_open_dev$rtc(&(0x7f0000000300), 0x50, 0x42800) ppoll(&(0x7f0000000100)=[{r1, 0x400}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 1m10.213830939s ago: executing program 0 (id=4662): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1e71, 0x2006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x5a, 0x1, 0x1, {0x22, 0x26e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x4, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x80, 0x4}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0xfa, 0x8, 0x10, 0x3}, 0x3b, &(0x7f0000000240)={0x5, 0xf, 0x3b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x55, "be80eda98f48bb32d80b102bd3ea452d"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0xad, 0x800, 0x20}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "42d3888901000000fac6c6a5d28627ab"}]}, 0x9, [{0xad, &(0x7f0000000400)=@string={0xad, 0x3, "f9e70e3b3bef88e3c63b08b91a16bc8fdd02279af78747969691cb6f24174f903114e970c3a0061d20e0a085c6c085d4bddbe0eb5f63e372f3edee05d7d311e77018d2316ad056cfdfadee99589bb0be6563031adc58dad02647953746fbd796bdc4c5fe0f0d913d9fc32929cb28de20a0c24849d86514743e351bfa3e0c0df8f957a54c075655982be3c35f0f3a6178443955820e79b795ac5693b93a427b8c3add5b311ff5fa015d2eb9"}}, {0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="21038f549237280c44b9bc67cd8eb8dbca2a"]}, {0x6a, &(0x7f00000004c0)=@string={0x6a, 0x3, "d5f5f5db7bba36b6fd2a17fee9d0a53f08f1d6778002d24a2b7357622aec719e56315bd8b37ed96ddfe81f4b5d9417feba7a1b12c094adb6ec716950faa052c9acd667ab8b16c07805895935eb649a5726c0f80aa60a100079917395d91e07aafe2b27f99b07a8fb"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc04}}, {0x75, &(0x7f0000000700)=@string={0x75, 0x3, "7593f8934c37d37ff4b79b3d9864b86dc0bd8c5f99a1f7e569a153bd9e8f8bc87a7d59b9a72fa037ab9e5f2fead0a4b0df15402e59c4afc7e841c1c31546e1528effd511e022f5754bd56e62a4b8f96f3730e9d86258016c5f3b1e6c9e8ebf9f5a35836eb01a5992c3cc232f9810a460145654"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000980)={0x24, &(0x7f0000000840)={0x0, 0x1, 0x40, {0x40, 0xb, "932a6a046a5ff85fb9284f5b15266e2bcd4eeaaa7c4d834d6ebde2648e560ad794bf57fdc96f31a17ccfc8234917d99cd9f1a81c1505a749c3d745999fbe"}}, &(0x7f00000008c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000900)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x1, "ec48ee34"}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1}}}, &(0x7f0000001440)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00083e001c00dcb18381771273dc380ece58cd7567e00733b845d3f52f32c3558db8a24ed0a374393d1e60d7c71041bc725fe404a8ab849c3f7823a14db19ecdbf14d3aa"], &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001340)={0x20, 0x1, 0xa5, "20091bfd891388c3a9899f96a4a536f6025b53849d694315ac50dd82bc8ff5024f38d3edaaedbb6958e1be8c28b21e687b7e2031654e66de3a3639006d3684f5a2ae3dbfe206d870befcb1a8dfa96e49da2487d77ea24368be3f934765d8faad4fac8f01973e59579af29d8e5a51690dd86e3d5991d5edcf125f212d97cdb285f5228ae101fdc6c6512562bca044300d6c00a78a58cffb6c4bc17f913dc735b51c6ddb8702"}, &(0x7f0000001400)={0x20, 0x3, 0x1, 0x81}}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x6fd, &(0x7f0000000c40)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEDesQMjIx3ZeJk5m0knb7e7/N9qNYz8+5/Gx61N37GMQERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERhNUwjIpA2+7u7MrZrIbrdJIvWUwtj0pbwc1o4ua8OlfCegER/odiEW9Fs9/62ijkcvi/dVyNvl1FMfwoYnDh8qW7X81lkvXnJPwisGiBj58OHtzr9/cfnSE2i4WLf52QOUNQS3Vtz7E7ZktJ23NkvVYzbm03Pdm028rb83zVkZarMr7jyg3rpqzU61tSlfecnW6rYbZVMvPON6uGUZPfK0Q7GkDZs7btdtvutnRMuDiMuSM/+FEUoMyOlAeH/f2tsXyepbVxGFRJST4zHhwGVU/b3KpRrVYq1Wqldrt++45h5KZmGCFhDGEqYukHLb1hlnsCJzqHjNX4r/EXAbRRRBc72IVM/bHQgAsHnRnLY0n//84tNbfe8f4/6eVXRouvQPf/16Jv12b1/zNykZB6hbQlYsb8xX5WdEYSj/EUAzzAPfTRxz4eLaFsCbl27hLyRtySS8ln5k8LCl3Y8ODARgcmWvgyZDxHoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIl/B0FwgEPd7ltxPs9TthpJUGXGRhSQS467fVTnbO2s/v/Hz6K14/7fYP//RRUdB4Xo4+N5MUSfAUF8/b+gtZeTDRERERERERG9DEL/67vQv5V/G0CApt1WxkRM4bVlR0RERERERETLIBAUcBUiuisfb0NMX/8TERERERER0ZtN6GfsBICSvqlfjB6XOss/AmRfQYpEREREREREdE76yf9reSDQd/mvQSx0/U9EREREREREb4DfjI2xn8vGY+wGya/1MwDW/loQH/2jAHdFHPd2vy6OzHCJeRTHTN0B4DeviIvxQL36Iw9Af7PUVRHXFg+CORx38JOD9LH+nwcRIYR7IoF8dryAGQmIsOZaLv6GD3A9WuV6PM78/UEGekk0onCpabdV2XLadyswzYsZX+36v3h4+EvAHW7nwWF/v/yTn/bv61yOw1nHR2GhzybSyaQ3xiiXJ3q8Bf3MRdroxqtoJlX+ttspCV2vkWx/FuZRZryieTugtgpEW/krrEf7bD2IYkuD4Yj7AljTgz9UynqXTWy9uyJGWVRObnnajpix5UWdxY0o5sbGjegjaZOwnIwofiMLVMvT+2Aii+p4Fqe3hfjnifafnwVEMWyLrTCLP4UFncjihx9FK2/1dpPhMc6SxdRRQET0uhyMeiE9iPnUGPtJ95Cc1M7e7yAHxGe5Gb37qJYg7j+S3v3J74Ooh8oCufh3E+m1JP0KwjP6htDl5KMB3XNXUs7oRvnTIAjMi0WMn9H/F/89Y9jHnq13Ow6C4OQZ/Y+jdyDFaU9l8Z8gCO5WdE/yuxO96ofhCh/OrNdrV7NhE956cvQzPQB+6P399/cfVqtbNeNdw7hdxYr+q0L8kQX7HiIimnL6O3Z0RGZOhHgX16Myrt//+zvR1ESP95X4lgLtFtDHfWwmrxBYSy+1hAN8+1/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdF8axerbG6rD2OS9QyevAEexWy95LxAREb1a6zP6YWCi/8dk/1+c6P83sRFFbFxJve4ujd1SuJlcHQ8v6QcXjlNjK6cn/50lNwYREdEXhHI/ESX/18J17d57lXq9YvrbSrqO9X3p2o2WknbXV661bXZbSvZcx3cspy17Lgr2qvKkt9PrOa4vm44re45n7+o3v8v41e+e6phd37a8XluZnpKW0/VNy5cN27Nkb+e7bdvbVq5e2espy27alunbTld6zo5rqbKUnlJjgXZDdX27aYeTXdlz7Y7p7skfOO2djpIN5Vmu3fOdqMCkLrvbdNyOLraMYOEXHRIREX0ePX46eHCv399/dHJiNbw0j+YcY0bM9EQ+pUCOEURERPQZM+quF1ip+BITIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiKiKac/0rfgxEraw4LAcM7PL8Zz8ByjRwynyhE4bz6fun/WA/u9yOqZRStNHokYPPh4TvDqcE7S/OMxx4tUikvAC7fP374EXNBzEM3JLfEAmH5+dOnHWNrEtw6iFp0VoxemLioM90Vu+X8cwomHf5heJMKWD4IgmL96YbIN82c/nnMAHuXPsQte9ZmIiF61/wcAAP//iYxA9A==") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0x8, 0xfa04, 0x108, 0x6c02, 0x230, 0x194, 0x194, 0x230, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0x108, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [0x2], 0x0, 0x0, 0x7a}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x0, 0xfffffffc, 0x2b0, 'pptp\x00', 'syz1\x00', {0x47c}}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@cpu={{0x28}, {0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) getdents64(r2, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, 0x1409, 0x400, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x4000010) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 1m6.848959477s ago: executing program 0 (id=4669): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x541200, 0x10c) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffffff, 0x0, 0x11e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x20, 0x70bd25, 0x0, {{@in=@multicast1, 0x0, 0xff}, @in=@broadcast, {@in6=@mcast1, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x66177cb5e5c40d1c}, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x3b}, {0x0, 0xfc62, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800000000000}, {0x4000, 0x2, 0x0, 0x8}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x3}, 0xfffffff9, 0x38, 0x9, 0x80000}}, 0x128}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82790, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x2000000, &(0x7f0000000200)=ANY=[]) getpid() r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 1m6.164172277s ago: executing program 0 (id=4673): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000340)={[{@journal_async_commit}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc616}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7c7, &(0x7f0000000480)="$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") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x7, 0xa4, 0x4, 0xd, 0x96, 0xfa, 0x8, 0x7, 0x2, 0x7, 0xf, 0x4e, 0x9}, 0xe) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000011600000000000000000000000a2c000000060a09040000000000000000020000200900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000608000948000000000900020073797a32000000000900010073797a30"], 0x88}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 1m5.126892759s ago: executing program 0 (id=4676): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f00000007c0)='./file0\x00', 0x10dc02, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 1m4.644191292s ago: executing program 0 (id=4681): r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000340)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0x3, 0x4000002}}, 0x44) 1m4.615456594s ago: executing program 58 (id=4681): r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000340)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0x3, 0x4000002}}, 0x44) 1m0.031053091s ago: executing program 3 (id=4702): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000340)={[{@journal_async_commit}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc616}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7c7, &(0x7f0000000480)="$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") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x7, 0xa4, 0x4, 0xd, 0x96, 0xfa, 0x8, 0x7, 0x2, 0x7, 0xf, 0x4e, 0x9}, 0xe) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48814) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000011600000000000000000000000a2c000000060a09040000000000000000020000200900010073797a30000000000900020073797a320000000034000000080a050000000000000000000200000608000948000000000900020073797a32000000000900010073797a30"], 0x88}}, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 59.447308013s ago: executing program 3 (id=4706): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in6=@loopback, @in=@loopback, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe, 0x2}, {0x1, 0x0, 0x80}}}, 0xb8}}, 0x0) 59.261025629s ago: executing program 3 (id=4707): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x68040200) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) epoll_create(0x3ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0xffbfff41, 0x4000403, 0x68, 0x17, 0x8, "ffffff7f87680000000000001000007fcb3678", 0x9, 0x202}) 59.260351669s ago: executing program 59 (id=4707): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x68040200) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00060000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff07ffd7060000400000006a0200000ee60000bf050000000000003d35f3ff000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966ff76d796c171f5f7a31e1b14b0c0c712c0fdd2710f37a3d15710d68e7326a7db043c57784bd9bdb047db75"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) epoll_create(0x3ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000001c0)={0xffbfff41, 0x4000403, 0x68, 0x17, 0x8, "ffffff7f87680000000000001000007fcb3678", 0x9, 0x202}) 5.301108571s ago: executing program 7 (id=5076): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) 5.172871572s ago: executing program 7 (id=5080): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 4.836028372s ago: executing program 5 (id=5081): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000380)="b9fe030768045c8c989a14f088a8657986dd", 0x0, 0x9b, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.033449863s ago: executing program 4 (id=5082): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000100001e728bd700000000000006f0000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600400012800b00010067656e657665000030000280080001000100000005000c"], 0x74}}, 0x2000000) 3.985137807s ago: executing program 7 (id=5083): syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020000402505a1a44000000001010902"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x44000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3.865617668s ago: executing program 5 (id=5086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x1000000, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}]}, 0x24}}, 0x8) 3.781141175s ago: executing program 4 (id=5087): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 3.743441859s ago: executing program 9 (id=5088): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x40c00) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2710, @local}, 0x10) 3.669101965s ago: executing program 4 (id=5090): syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 3.668944765s ago: executing program 5 (id=5091): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0xf) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) 3.635397918s ago: executing program 9 (id=5092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x38}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 3.589129032s ago: executing program 5 (id=5093): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000040)=""/109, &(0x7f00000000c0)=0x6d) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x569, &(0x7f0000001f80)="$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") pivot_root(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 3.5090737s ago: executing program 9 (id=5094): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) 3.50892483s ago: executing program 4 (id=5095): arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) readv(r3, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 2.840719269s ago: executing program 7 (id=5096): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) 2.699981041s ago: executing program 6 (id=5097): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000c10000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000353000/0x1000)=nil, 0x1000) madvise(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x10) munlockall() 2.563585473s ago: executing program 4 (id=5098): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) 2.337143823s ago: executing program 9 (id=5099): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x260, &(0x7f0000000640)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.336954043s ago: executing program 5 (id=5100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bf2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xc, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12000, 0x0) 1.680566532s ago: executing program 6 (id=5101): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1.550741953s ago: executing program 4 (id=5102): syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) 1.523200686s ago: executing program 9 (id=5103): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, 0x0) ioctl$TCSETSF(r4, 0x5453, 0x0) 1.522691396s ago: executing program 7 (id=5104): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_lower}, {@utf8}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@rodir}, {@shortname_winnt}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7f84}}, {@shortname_win95}, {@numtail}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}]}, 0x91, 0x369, &(0x7f0000001ac0)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x5) 1.345131521s ago: executing program 6 (id=5105): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x8}}, 0x20) 1.239438321s ago: executing program 5 (id=5106): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.108120132s ago: executing program 6 (id=5107): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 960.998275ms ago: executing program 7 (id=5108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socket$inet_smc(0x2b, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 593.077118ms ago: executing program 6 (id=5109): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x60000100, 0x0) 57.397565ms ago: executing program 9 (id=5110): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 0s ago: executing program 6 (id=5111): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) kernel console output (not intermixed with test programs): slave_0) entered forwarding state [ 542.916748][T20520] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.923823][T20520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.011357][T23007] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 543.048984][T23007] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 543.074905][T23007] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 543.101365][T23007] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.361911][T23006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.479807][T23006] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.530944][T20520] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.538031][T20520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.565921][T23007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.578955][T20524] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.586528][T20524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.663956][T23007] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.712865][ T6598] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.720042][ T6598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.747664][ T6598] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.754743][ T6598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.769829][T22941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.944928][T23278] loop4: detected capacity change from 0 to 128 [ 543.964735][T23278] msdos: Bad value for 'gid' [ 544.003177][T23278] msdos: Bad value for 'gid' [ 544.183842][T23006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.231979][T22941] veth0_vlan: entered promiscuous mode [ 544.335768][T22941] veth1_vlan: entered promiscuous mode [ 544.459463][T22941] veth0_macvtap: entered promiscuous mode [ 544.484620][T22941] veth1_macvtap: entered promiscuous mode [ 544.548611][T22941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.578046][T22941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.655954][T20520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.664936][T20520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.689098][T23310] loop0: detected capacity change from 0 to 2048 [ 544.713613][T20520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.739049][T20520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.775890][T23310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.913597][ T28] kauditd_printk_skb: 1489 callbacks suppressed [ 544.913609][ T28] audit: type=1400 audit(2000002818.463:98156): avc: denied { search } for pid=23320 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.952998][T23310] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4609: bg 0: block 234: padding at end of block bitmap is not set [ 544.963075][T23007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.991138][T23006] veth0_vlan: entered promiscuous mode [ 545.004224][ T28] audit: type=1400 audit(2000002818.463:98157): avc: denied { search } for pid=23320 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.036285][T23326] loop4: detected capacity change from 0 to 128 [ 545.069276][T23310] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 394 with error 28 [ 545.148432][T22941] audit: audit_backlog=65 > audit_backlog_limit=64 [ 545.155010][T23310] EXT4-fs (loop0): This should not happen!! Data will be lost [ 545.155010][T23310] [ 545.166486][T23006] veth1_vlan: entered promiscuous mode [ 545.177747][T23007] audit: audit_backlog=65 > audit_backlog_limit=64 [ 545.186323][T23327] audit: audit_backlog=65 > audit_backlog_limit=64 [ 545.200619][T22941] audit: audit_lost=1938 audit_rate_limit=0 audit_backlog_limit=64 [ 545.217708][T23007] audit: audit_lost=1939 audit_rate_limit=0 audit_backlog_limit=64 [ 545.229013][T23310] EXT4-fs (loop0): Total free blocks count 0 [ 545.235658][ T28] audit: type=1400 audit(2000002818.463:98158): avc: denied { search } for pid=23320 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.261173][T23327] audit: audit_lost=1940 audit_rate_limit=0 audit_backlog_limit=64 [ 545.277541][T22941] audit: backlog limit exceeded [ 545.282563][T23310] EXT4-fs (loop0): Free/Dirty block details [ 545.289612][T23310] EXT4-fs (loop0): free_blocks=0 [ 545.294595][T23310] EXT4-fs (loop0): dirty_blocks=400 [ 545.300230][T23310] EXT4-fs (loop0): Block reservation details [ 545.318307][T23310] EXT4-fs (loop0): i_reserved_data_blocks=25 [ 545.427714][T18429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.437955][T23006] veth0_macvtap: entered promiscuous mode [ 545.471642][T23006] veth1_macvtap: entered promiscuous mode [ 545.615286][T23006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.685441][T23006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.715469][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 545.724429][T23350] netlink: 'syz.3.4564': attribute type 1 has an invalid length. [ 545.741431][T20520] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.779237][T20520] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.874935][T23360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4612'. [ 545.884237][T20520] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.917511][T20520] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.095546][T23353] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.102776][T23353] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.181268][T23378] loop4: detected capacity change from 0 to 512 [ 546.215319][T23378] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 546.320321][T23353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.368254][T23353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.462584][T20520] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.549659][T20520] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.579118][T20520] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.602717][T20520] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.766841][T23007] veth0_vlan: entered promiscuous mode [ 546.796512][T23419] loop1: detected capacity change from 0 to 2048 [ 546.820132][T23419] EXT4-fs: Ignoring removed oldalloc option [ 546.830331][T23007] veth1_vlan: entered promiscuous mode [ 546.871268][T23419] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 546.882729][T23007] veth0_macvtap: entered promiscuous mode [ 546.914845][T23007] veth1_macvtap: entered promiscuous mode [ 547.032340][T23007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.078217][T23419] loop1: detected capacity change from 0 to 8192 [ 547.089972][T23007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.130847][T23419] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 547.171458][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.196081][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.222639][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.248722][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.395632][T23448] loop3: detected capacity change from 0 to 2048 [ 547.417999][T23448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.559371][T23448] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4619: bg 0: block 234: padding at end of block bitmap is not set [ 547.628529][T23448] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 992 with max blocks 112 with error 28 [ 547.684100][T23448] EXT4-fs (loop3): This should not happen!! Data will be lost [ 547.684100][T23448] [ 547.748304][T23448] EXT4-fs (loop3): Total free blocks count 0 [ 547.768445][T23448] EXT4-fs (loop3): Free/Dirty block details [ 547.785226][T23448] EXT4-fs (loop3): free_blocks=0 [ 547.816589][T23448] EXT4-fs (loop3): dirty_blocks=1104 [ 547.845432][T23448] EXT4-fs (loop3): Block reservation details [ 547.864647][T23467] loop5: detected capacity change from 0 to 4096 [ 547.877629][T23448] EXT4-fs (loop3): i_reserved_data_blocks=69 [ 547.895595][ T6598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.914835][T23467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.069461][T22941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.094578][ T6598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.384763][ T6598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.469319][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4628'. [ 548.490659][T23508] netlink: 'syz.4.4628': attribute type 1 has an invalid length. [ 548.515225][T23505] loop0: detected capacity change from 0 to 1024 [ 548.537013][T23505] EXT4-fs: Ignoring removed orlov option [ 548.544300][ T6598] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.608829][T23505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.747996][T10122] IPVS: starting estimator thread 0... [ 548.821085][ T6598] bridge_slave_1: left allmulticast mode [ 548.838646][ T6598] bridge_slave_1: left promiscuous mode [ 548.844600][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.868663][T23526] IPVS: using max 2688 ests per chain, 134400 per kthread [ 548.876971][ T6598] bridge_slave_0: left allmulticast mode [ 548.884730][ T6598] bridge_slave_0: left promiscuous mode [ 548.895469][ T6598] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.936523][T23537] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4632'. [ 548.953324][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.009344][T23542] netlink: 'syz.5.4633': attribute type 1 has an invalid length. [ 549.051673][ T6598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.063585][ T6598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.083397][ T6598] bond0 (unregistering): Released all slaves [ 549.121161][T23547] bond1 (unregistering): Released all slaves [ 549.160712][T23557] loop3: detected capacity change from 0 to 512 [ 549.169870][T23557] EXT4-fs: Ignoring removed nobh option [ 549.207283][ T6598] hsr_slave_0: left promiscuous mode [ 549.217826][T23557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.247220][ T6598] hsr_slave_1: left promiscuous mode [ 549.255281][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.262846][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.280900][T23557] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 549.287538][T18429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.302157][ T6598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.309696][ T6598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.370719][ T6598] veth1_macvtap: left promiscuous mode [ 549.376233][ T6598] veth0_macvtap: left promiscuous mode [ 549.420321][ T6598] veth1_vlan: left promiscuous mode [ 549.442889][ T6598] veth0_vlan: left promiscuous mode [ 549.503749][T23573] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4638'. [ 549.533286][T22941] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.163970][ T6598] team0 (unregistering): Port device team_slave_1 removed [ 550.186700][ T6598] team0 (unregistering): Port device team_slave_0 removed [ 550.230117][T23586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4640'. [ 550.276253][ T28] kauditd_printk_skb: 2454 callbacks suppressed [ 550.276266][ T28] audit: type=1400 audit(2000002823.467:100485): avc: denied { read write } for pid=14825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.315368][T23471] chnl_net:caif_netlink_parms(): no params data found [ 550.366962][ T28] audit: type=1400 audit(2000002823.486:100486): avc: denied { read write open } for pid=14825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.397082][ T28] audit: type=1400 audit(2000002823.486:100487): avc: denied { ioctl } for pid=14825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.442470][ T28] audit: type=1400 audit(2000002823.533:100488): avc: denied { read write } for pid=23007 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.481357][ T28] audit: type=1400 audit(2000002823.533:100489): avc: denied { open } for pid=23007 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.512259][ T28] audit: type=1400 audit(2000002823.533:100490): avc: denied { ioctl } for pid=23007 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 550.546644][ T28] audit: type=1400 audit(2000002823.580:100491): avc: denied { prog_load } for pid=23589 comm="syz.4.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 550.555193][T23593] bridge1: entered promiscuous mode [ 550.566640][ T28] audit: type=1400 audit(2000002823.580:100492): avc: denied { bpf } for pid=23589 comm="syz.4.4641" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 550.593147][ T28] audit: type=1400 audit(2000002823.598:100493): avc: denied { prog_load } for pid=23589 comm="syz.4.4641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 550.612525][ T28] audit: type=1400 audit(2000002823.598:100494): avc: denied { bpf } for pid=23589 comm="syz.4.4641" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 550.757568][T23593] set_capacity_and_notify: 1 callbacks suppressed [ 550.757583][T23593] loop5: detected capacity change from 0 to 1024 [ 550.786328][T23471] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.794199][T23471] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.801380][T23471] bridge_slave_0: entered allmulticast mode [ 550.815770][T23471] bridge_slave_0: entered promiscuous mode [ 550.825098][T23593] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 550.840078][T23471] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.847391][T23471] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.854657][T23471] bridge_slave_1: entered allmulticast mode [ 550.861882][T23471] bridge_slave_1: entered promiscuous mode [ 550.895355][T23593] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #3: comm syz.5.4642: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 550.920871][T23471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.942387][T23593] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 550.942942][T23593] EXT4-fs error (device loop5): ext4_quota_enable:7197: comm syz.5.4642: Bad quota inode: 3, type: 0 [ 550.953569][T23471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.962843][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 550.978259][ C0] EXT4-fs (loop5): initial error at time 2000002824: ext4_ext_check_inode:521: inode 3 [ 550.987929][ C0] EXT4-fs (loop5): last error at time 2000002824: ext4_ext_check_inode:521: inode 3 [ 551.028588][T23593] loop5: lost filesystem error report for type 5 error -117 [ 551.035015][T23593] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 551.060841][T23593] EXT4-fs (loop5): mount failed [ 551.102313][T23593] loop5: detected capacity change from 0 to 512 [ 551.109238][T23471] team0: Port device team_slave_0 added [ 551.122189][T23471] team0: Port device team_slave_1 added [ 551.154617][T23593] EXT4-fs: dax option not supported [ 551.271472][T23471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.345707][T23471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.405662][T23640] program syz.0.4648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.444406][T23471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.506615][T23471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.537490][T23471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.613186][T23471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.847209][T23471] hsr_slave_0: entered promiscuous mode [ 551.967981][T23658] loop5: detected capacity change from 0 to 128 [ 551.995057][T23471] hsr_slave_1: entered promiscuous mode [ 552.008558][T23471] debugfs: 'hsr0' already exists in 'hsr' [ 552.032394][T23471] Cannot create hsr debugfs directory [ 552.209502][T23669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23669 comm=syz.4.4652 [ 552.701172][T23692] tun0: tun_chr_ioctl cmd 1074025675 [ 552.727355][T23692] tun0: persist enabled [ 552.744068][T23692] tun0: tun_chr_ioctl cmd 1074025675 [ 552.766714][T23692] tun0: persist enabled [ 552.776746][T23692] netlink: 'syz.0.4655': attribute type 3 has an invalid length. [ 552.783407][T23708] : renamed from lo [ 552.787369][T23692] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4655'. [ 552.834037][T23705] netlink: 'syz.0.4655': attribute type 39 has an invalid length. [ 552.935107][T23722] loop5: detected capacity change from 0 to 1024 [ 552.943775][T23723] dvmrp6: entered allmulticast mode [ 552.964937][T23722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.075233][T23471] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 553.125714][T23471] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 553.139074][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.157190][T23471] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 553.194590][T23471] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 553.252848][T23738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.261329][T23738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.312060][T23738] loop0: detected capacity change from 0 to 164 [ 553.575404][T23750] No such timeout policy "syz1" [ 553.929552][T23749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=23749 comm=syz.0.4662 [ 553.944069][T23749] netlink: 'syz.0.4662': attribute type 1 has an invalid length. [ 554.000931][T23748] netlink: 'syz.5.4661': attribute type 13 has an invalid length. [ 554.043801][T23748] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4661'. [ 554.539829][T23748] syz_tun: refused to change device tx_queue_len [ 554.550895][T23748] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 554.614097][T23471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.781369][T23471] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.855704][ T6588] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.870669][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.877831][T20515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.947937][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.955101][T20515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.065703][T23760] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 555.072353][T23760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 555.143679][T23760] vhci_hcd vhci_hcd.0: Device attached [ 555.225338][T23762] vhci_hcd: connection closed [ 555.225619][ T6598] vhci_hcd vhci_hcd.5: stop threads [ 555.270506][ T6598] vhci_hcd vhci_hcd.5: release socket [ 555.298399][ T6598] vhci_hcd vhci_hcd.5: disconnect device [ 555.346584][T10122] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 555.590324][T23471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.665303][ T28] kauditd_printk_skb: 1645 callbacks suppressed [ 555.665316][ T28] audit: type=1400 audit(2000000002.581:102140): avc: denied { sys_module } for pid=23471 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 555.783771][ T28] audit: type=1400 audit(2000000002.609:102141): avc: denied { module_request } for pid=23471 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 555.912732][ T28] audit: type=1400 audit(2000000002.665:102142): avc: denied { module_request } for pid=23471 comm="syz-executor" kmod="netdev-netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 555.998858][T23779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4667'. [ 556.047100][ T3041] audit: audit_backlog=65 > audit_backlog_limit=64 [ 556.054952][T23782] audit: audit_backlog=65 > audit_backlog_limit=64 [ 556.070307][ T28] audit: type=1400 audit(2000000002.731:102143): avc: denied { read write } for pid=14825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 556.105656][ T3041] audit: audit_lost=1983 audit_rate_limit=0 audit_backlog_limit=64 [ 556.118723][T23782] audit: audit_lost=1984 audit_rate_limit=0 audit_backlog_limit=64 [ 556.142284][ T3041] audit: backlog limit exceeded [ 556.155519][T23779] audit: audit_backlog=65 > audit_backlog_limit=64 [ 556.559710][T23789] loop4: detected capacity change from 0 to 1024 [ 556.608908][T23791] loop0: detected capacity change from 0 to 2048 [ 556.707340][T23791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.729100][T23471] veth0_vlan: entered promiscuous mode [ 556.749325][T23471] veth1_vlan: entered promiscuous mode [ 556.830683][T23471] veth0_macvtap: entered promiscuous mode [ 556.841874][T23791] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4669: bg 0: block 234: padding at end of block bitmap is not set [ 556.863259][T23471] veth1_macvtap: entered promiscuous mode [ 556.886700][T23791] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1002 with error 28 [ 556.924438][T23791] EXT4-fs (loop0): This should not happen!! Data will be lost [ 556.924438][T23791] [ 556.924973][T23471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.967504][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4672'. [ 556.991498][T23471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.000139][T23804] netlink: 'syz.4.4672': attribute type 1 has an invalid length. [ 557.014342][T23791] EXT4-fs (loop0): Total free blocks count 0 [ 557.025918][T20447] Bluetooth: hci0: command 0x1003 tx timeout [ 557.031951][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 557.055840][T20515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.072673][T20515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.078324][T23791] EXT4-fs (loop0): Free/Dirty block details [ 557.089067][T23791] EXT4-fs (loop0): free_blocks=0 [ 557.100963][T23791] EXT4-fs (loop0): dirty_blocks=1008 [ 557.110407][T23791] EXT4-fs (loop0): Block reservation details [ 557.118217][T20515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.131971][T23791] EXT4-fs (loop0): i_reserved_data_blocks=63 [ 557.164980][T20515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.232596][T18429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.346604][T23822] loop0: detected capacity change from 0 to 2048 [ 557.364056][T23822] EXT4-fs: Ignoring removed oldalloc option [ 557.390636][T23822] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 557.927539][T23822] loop0: detected capacity change from 0 to 8192 [ 557.974205][T23822] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 558.167119][T23839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4674'. [ 558.268961][T23848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.452752][T23855] loop5: detected capacity change from 0 to 256 [ 558.480444][T23855] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 558.533687][T23855] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 558.821438][T20524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.852637][T23871] loop5: detected capacity change from 0 to 256 [ 558.859852][T20524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 558.900346][T23871] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 558.938671][T23875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4684'. [ 558.966918][T23875] netlink: 'syz.6.4684': attribute type 1 has an invalid length. [ 559.013979][T20524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.034847][T23871] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 559.061882][T20524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 559.410860][T23879] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.418079][T23879] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.482126][T23879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.520412][T23879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.611318][T20524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.646906][T20524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 559.680833][T20520] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.720741][T20520] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.769558][T20524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.790003][T20524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 559.858131][T20520] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.909010][T20520] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.049702][T20524] bridge_slave_1: left allmulticast mode [ 560.079166][T20524] bridge_slave_1: left promiscuous mode [ 560.104237][T20524] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.178656][T20524] bridge_slave_0: left allmulticast mode [ 560.184319][T20524] bridge_slave_0: left promiscuous mode [ 560.210996][T20524] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.356771][T20524] dvmrp6 (unregistering): left allmulticast mode [ 560.480412][T20524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.495244][T20524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.521431][T20524] bond0 (unregistering): Released all slaves [ 560.538441][T20524] bond1 (unregistering): Released all slaves [ 560.769653][T23946] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4690'. [ 560.869448][T23876] chnl_net:caif_netlink_parms(): no params data found [ 560.890003][T23953] loop4: detected capacity change from 0 to 1024 [ 560.902509][T20524] hsr_slave_0: left promiscuous mode [ 560.922350][T20524] hsr_slave_1: left promiscuous mode [ 560.941752][T23953] loop4: detected capacity change from 0 to 1024 [ 560.950195][T20524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.985617][T20524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.014533][ T28] kauditd_printk_skb: 1600 callbacks suppressed [ 561.014618][ T28] audit: type=1400 audit(2000000007.586:103705): avc: denied { read write } for pid=23007 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.098226][ T28] audit: type=1400 audit(2000000007.586:103706): avc: denied { open } for pid=23007 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.172976][ T28] audit: type=1400 audit(2000000007.586:103707): avc: denied { ioctl } for pid=23007 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.250008][ T28] audit: type=1400 audit(2000000007.642:103708): avc: denied { search } for pid=23962 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.322120][T23973] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.332111][ T28] audit: type=1400 audit(2000000007.642:103709): avc: denied { read } for pid=23962 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 561.358365][T20524] team0 (unregistering): Port device team_slave_1 removed [ 561.371796][T23972] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.376354][T23973] audit: audit_lost=1998 audit_rate_limit=0 audit_backlog_limit=64 [ 561.384245][T23972] audit: audit_lost=1999 audit_rate_limit=0 audit_backlog_limit=64 [ 561.395041][T20524] team0 (unregistering): Port device team_slave_0 removed [ 561.402784][T23973] audit: backlog limit exceeded [ 561.476886][T23972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4694'. [ 561.719867][T23876] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.727224][T23876] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.742510][T23876] bridge_slave_0: entered allmulticast mode [ 561.749020][T23876] bridge_slave_0: entered promiscuous mode [ 561.760067][T23876] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.767874][T23876] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.775775][T23876] bridge_slave_1: entered allmulticast mode [ 561.792478][T23876] bridge_slave_1: entered promiscuous mode [ 561.814677][T23996] loop6: detected capacity change from 0 to 1024 [ 561.823635][T23876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.842904][T23876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.896655][T23996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 561.922158][T23996] System zones: 0-1, 3-8 [ 561.943331][T23996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 561.957757][T20524] IPVS: stop unused estimator thread 0... [ 561.968957][T23996] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.999891][T24012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4698'. [ 562.009769][T23996] FAULT_INJECTION: forcing a failure. [ 562.009769][T23996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.023885][T23996] CPU: 1 UID: 0 PID: 23996 Comm: syz.6.4697 Not tainted syzkaller #0 PREEMPT(full) [ 562.023913][T23996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.023925][T23996] Call Trace: [ 562.023931][T23996] [ 562.023938][T23996] __dump_stack+0x1d/0x30 [ 562.024038][T23996] dump_stack_lvl+0x95/0xd0 [ 562.024056][T23996] dump_stack+0x15/0x1b [ 562.024104][T23996] should_fail_ex+0x263/0x280 [ 562.024125][T23996] should_fail+0xb/0x20 [ 562.024143][T23996] should_fail_usercopy+0x1a/0x20 [ 562.024168][T23996] _copy_from_user+0x1c/0xb0 [ 562.024201][T23996] ext4_ioctl+0x62a/0x31b0 [ 562.024223][T23996] ? ioctl_has_perm+0x27e/0x2d0 [ 562.024254][T23996] ? do_vfs_ioctl+0x84f/0xe70 [ 562.024283][T23996] ? selinux_file_ioctl+0x5f7/0xcb0 [ 562.024303][T23996] ? __rcu_read_unlock+0x4e/0x70 [ 562.024323][T23996] ? __rcu_read_unlock+0x4e/0x70 [ 562.024402][T23996] ? __fget_files+0x184/0x1c0 [ 562.024421][T23996] ? mutex_lock+0x57/0x90 [ 562.024443][T23996] ? __pfx_ext4_ioctl+0x10/0x10 [ 562.024501][T23996] __se_sys_ioctl+0xce/0x140 [ 562.024575][T23996] __x64_sys_ioctl+0x43/0x50 [ 562.024684][T23996] x64_sys_call+0x1563/0x3020 [ 562.024708][T23996] do_syscall_64+0x12c/0x370 [ 562.024737][T23996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.024803][T23996] RIP: 0033:0x7fdd66f9c629 [ 562.024818][T23996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.024955][T23996] RSP: 002b:00007fdd659f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.024973][T23996] RAX: ffffffffffffffda RBX: 00007fdd67215fa0 RCX: 00007fdd66f9c629 [ 562.024987][T23996] RDX: 0000200000000000 RSI: 0000000040286608 RDI: 0000000000000006 [ 562.025001][T23996] RBP: 00007fdd659f7090 R08: 0000000000000000 R09: 0000000000000000 [ 562.025087][T23996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.025098][T23996] R13: 00007fdd67216038 R14: 00007fdd67215fa0 R15: 00007ffd9d714f18 [ 562.025115][T23996] [ 562.025721][T24012] netlink: 'syz.5.4698': attribute type 1 has an invalid length. [ 562.099622][T23876] team0: Port device team_slave_0 added [ 562.255075][T23876] team0: Port device team_slave_1 added [ 562.358087][T24012] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.365363][T24012] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.569322][T24012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.595033][T24012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.627286][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 562.724133][ T41] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.733269][T23876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.776877][T23876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.864461][T23876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.904935][ T41] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.937545][ T41] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.970198][T23876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.977155][T23876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.010249][T23876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.053507][ T41] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.135029][T23876] hsr_slave_0: entered promiscuous mode [ 563.151058][T23876] hsr_slave_1: entered promiscuous mode [ 563.164405][T23876] debugfs: 'hsr0' already exists in 'hsr' [ 563.176797][T23876] Cannot create hsr debugfs directory [ 563.243288][T24045] loop4: detected capacity change from 0 to 4096 [ 563.370380][T24055] loop4: detected capacity change from 0 to 128 [ 563.467119][T24058] loop3: detected capacity change from 0 to 2048 [ 563.489781][T24058] EXT4-fs: Ignoring removed oldalloc option [ 563.526502][T24058] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 563.616116][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 563.722201][T24058] loop3: detected capacity change from 0 to 8192 [ 563.742209][T24058] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 564.170327][T23876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 564.205346][T23876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 564.243459][T23876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 564.268309][T23876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 564.504113][T20524] bridge_slave_1: left allmulticast mode [ 564.541284][T20524] bridge_slave_1: left promiscuous mode [ 564.558663][T20524] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.598317][T20524] bridge_slave_0: left allmulticast mode [ 564.627193][T20524] bridge_slave_0: left promiscuous mode [ 564.631440][T24138] loop5: detected capacity change from 0 to 1024 [ 564.635166][T20524] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.649121][T24138] EXT4-fs: Ignoring removed orlov option [ 564.673627][T24138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.736890][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.757782][T20524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.769546][T20524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.779361][T20524] bond0 (unregistering): Released all slaves [ 564.940336][ T6588] Bluetooth: hci1: Frame reassembly failed (-90) [ 565.005304][T20524] hsr_slave_0: left promiscuous mode [ 565.021281][T20524] hsr_slave_1: left promiscuous mode [ 565.033697][T20524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.045790][T20524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.121196][T24170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4713'. [ 565.145371][T20524] team0 (unregistering): Port device team_slave_1 removed [ 565.156306][T20524] team0 (unregistering): Port device team_slave_0 removed [ 565.217566][T23876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.236488][T24170] loop5: detected capacity change from 0 to 1024 [ 565.268753][T24170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.294379][T24170] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.4713: inode #1701604352: comm syz.5.4713: iget: illegal inode # [ 565.324897][T23876] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.336026][T24170] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4713: error while reading EA inode 1701604352 err=-117 [ 565.364655][T24101] chnl_net:caif_netlink_parms(): no params data found [ 565.393822][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.400976][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.414406][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.421513][ T6588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.475998][T24101] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.483116][T24101] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.490398][T24101] bridge_slave_0: entered allmulticast mode [ 565.493895][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.497992][T24101] bridge_slave_0: entered promiscuous mode [ 565.514132][T24101] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.521215][T24101] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.529051][T24101] bridge_slave_1: entered allmulticast mode [ 565.535874][T24101] bridge_slave_1: entered promiscuous mode [ 565.561386][T24101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.589680][T24101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.683924][T24101] team0: Port device team_slave_0 added [ 565.690712][T24101] team0: Port device team_slave_1 added [ 565.728800][T24101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.737211][T24101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.766340][T24101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.788823][T24101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.796018][T24101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.824575][T24158] Bluetooth: hci0: command 0x1003 tx timeout [ 565.830577][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 565.846104][T24101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.965560][T24101] hsr_slave_0: entered promiscuous mode [ 565.971768][T24101] hsr_slave_1: entered promiscuous mode [ 565.978576][T24101] debugfs: 'hsr0' already exists in 'hsr' [ 565.985255][T24101] Cannot create hsr debugfs directory [ 566.103933][T23876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.378115][ T28] kauditd_printk_skb: 2480 callbacks suppressed [ 566.378149][ T28] audit: type=1400 audit(2000000012.599:106156): avc: denied { sys_module } for pid=23876 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 566.419518][ T28] audit: type=1400 audit(2000000012.609:106157): avc: denied { search } for pid=24259 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.467927][ T28] audit: type=1400 audit(2000000012.609:106158): avc: denied { search } for pid=24259 comm="rm" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.480996][T24101] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 566.510517][ T28] audit: type=1400 audit(2000000012.609:106159): avc: denied { search } for pid=24259 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.537953][T24101] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 566.554684][ T28] audit: type=1400 audit(2000000012.609:106160): avc: denied { getattr } for pid=24259 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=25148 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.582586][T24101] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 566.589420][ T28] audit: type=1400 audit(2000000012.609:106161): avc: denied { remove_name } for pid=24259 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=25148 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.598641][T24101] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 566.615022][ T28] audit: type=1400 audit(2000000012.609:106162): avc: denied { unlink } for pid=24259 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=25148 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.644555][ T28] audit: type=1400 audit(2000000012.618:106163): avc: denied { search } for pid=24261 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.649865][T24262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 566.666093][ T28] audit: type=1400 audit(2000000012.618:106164): avc: denied { search } for pid=24261 comm="rm" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.680724][T23876] veth0_vlan: entered promiscuous mode [ 566.760005][T23876] veth1_vlan: entered promiscuous mode [ 566.839242][T23876] veth0_macvtap: entered promiscuous mode [ 566.894989][T23876] veth1_macvtap: entered promiscuous mode [ 566.995338][T23876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.027252][T24101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.045110][T23876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.059557][T24101] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.106631][ T3515] Bluetooth: hci1: command 0x1003 tx timeout [ 567.112758][T20447] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 567.112764][T20520] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.167243][T20520] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.198520][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.205704][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.262295][T20520] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.269380][T20520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.288865][T20524] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.314846][T20524] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.720298][T24337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4720'. [ 567.759687][T24336] loop7: detected capacity change from 0 to 2048 [ 567.937914][T24336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.056521][T24101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.090689][T24336] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4682: bg 0: block 234: padding at end of block bitmap is not set [ 568.108700][T24336] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 438 with error 28 [ 568.165339][T24336] EXT4-fs (loop7): This should not happen!! Data will be lost [ 568.165339][T24336] [ 568.228762][T24336] EXT4-fs (loop7): Total free blocks count 0 [ 568.242566][T20524] Bluetooth: hci0: Frame reassembly failed (-84) [ 568.263603][T24336] EXT4-fs (loop7): Free/Dirty block details [ 568.287330][T24336] EXT4-fs (loop7): free_blocks=0 [ 568.300003][T24336] EXT4-fs (loop7): dirty_blocks=448 [ 568.325100][T24336] EXT4-fs (loop7): Block reservation details [ 568.331236][T24336] EXT4-fs (loop7): i_reserved_data_blocks=28 [ 568.518817][T23876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.740872][T24389] loop5: detected capacity change from 0 to 128 [ 568.782384][T24101] veth0_vlan: entered promiscuous mode [ 568.818529][T24101] veth1_vlan: entered promiscuous mode [ 568.936182][T24101] veth0_macvtap: entered promiscuous mode [ 569.036506][T24101] veth1_macvtap: entered promiscuous mode [ 569.059102][T24415] tipc: Trying to set illegal importance in message [ 569.159714][T24101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.231158][T24101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.290147][T20524] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.319331][T20524] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.341065][T20524] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.351470][T20524] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.363633][T24426] netlink: 'syz.7.4732': attribute type 1 has an invalid length. [ 569.387480][T24426] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4732'. [ 569.522368][T24435] loop6: detected capacity change from 0 to 2048 [ 569.547845][T24439] FAULT_INJECTION: forcing a failure. [ 569.547845][T24439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.588695][T24439] CPU: 1 UID: 0 PID: 24439 Comm: syz.7.4733 Not tainted syzkaller #0 PREEMPT(full) [ 569.588780][T24439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 569.588791][T24439] Call Trace: [ 569.588797][T24439] [ 569.588804][T24439] __dump_stack+0x1d/0x30 [ 569.588897][T24439] dump_stack_lvl+0x95/0xd0 [ 569.588916][T24439] dump_stack+0x15/0x1b [ 569.588941][T24439] should_fail_ex+0x263/0x280 [ 569.589016][T24439] should_fail+0xb/0x20 [ 569.589034][T24439] should_fail_usercopy+0x1a/0x20 [ 569.589060][T24439] _copy_from_user+0x1c/0xb0 [ 569.589085][T24439] bpf_test_init+0xb9/0x130 [ 569.589110][T24439] bpf_prog_test_run_xdp+0x306/0xa10 [ 569.589138][T24439] ? __rcu_read_unlock+0x4e/0x70 [ 569.589225][T24439] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 569.589249][T24439] bpf_prog_test_run+0x204/0x340 [ 569.589273][T24439] __sys_bpf+0x52e/0x7e0 [ 569.589329][T24439] __x64_sys_bpf+0x41/0x50 [ 569.589360][T24439] x64_sys_call+0x10cb/0x3020 [ 569.589386][T24439] do_syscall_64+0x12c/0x370 [ 569.589423][T24439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.589459][T24439] RIP: 0033:0x7fba7c39c629 [ 569.589502][T24439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.589521][T24439] RSP: 002b:00007fba7adef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 569.589567][T24439] RAX: ffffffffffffffda RBX: 00007fba7c615fa0 RCX: 00007fba7c39c629 [ 569.589582][T24439] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 569.589596][T24439] RBP: 00007fba7adef090 R08: 0000000000000000 R09: 0000000000000000 [ 569.589610][T24439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.589628][T24439] R13: 00007fba7c616038 R14: 00007fba7c615fa0 R15: 00007ffd276ab208 [ 569.589714][T24439] [ 569.593842][T24435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.933478][T24457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4735'. [ 570.002136][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.208304][T24476] loop7: detected capacity change from 0 to 512 [ 570.229429][T24476] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 570.241221][T24478] loop5: detected capacity change from 0 to 1764 [ 570.257938][T24476] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size [ 570.290084][T24478] veth0: entered promiscuous mode [ 570.441639][ T3515] Bluetooth: hci0: command 0x1003 tx timeout [ 570.441663][T20447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 570.516781][T24475] veth0: left promiscuous mode [ 571.343790][T24506] loop6: detected capacity change from 0 to 8192 [ 571.454268][T24506] loop6: p1 < > p3[EZD] [ 571.545830][T24506] loop6: p3 start 3238002688 is beyond EOD, truncated [ 571.568150][T24523] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4752'. [ 571.622612][T24536] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4753'. [ 571.644473][ T3001] loop6: p1 < > p3[EZD] [ 571.674289][ T3001] loop6: p3 start 3238002688 is beyond EOD, truncated [ 571.725724][ T28] kauditd_printk_skb: 2109 callbacks suppressed [ 571.725739][ T28] audit: type=1400 audit(2000000017.613:108266): avc: denied { kernel } for pid=24504 comm="syz.5.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 571.868157][ T28] audit: type=1400 audit(2000000017.641:108267): avc: denied { create } for pid=24504 comm="syz.5.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 571.954976][T24547] loop6: detected capacity change from 0 to 1024 [ 571.962050][ T28] audit: type=1400 audit(2000000017.641:108268): avc: denied { bind } for pid=24504 comm="syz.5.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 571.998193][T24547] EXT4-fs: inline encryption not supported [ 572.020155][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 572.039255][T24547] EXT4-fs: Ignoring removed i_version option [ 572.054808][ T28] audit: type=1400 audit(2000000017.650:108269): avc: denied { read } for pid=24504 comm="syz.5.4749" dev="nsfs" ino=4026533376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 572.102181][T24547] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.194882][ T28] audit: type=1400 audit(2000000017.650:108270): avc: denied { read open } for pid=24504 comm="syz.5.4749" path="net:[4026533376]" dev="nsfs" ino=4026533376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 572.219060][T24528] lo: entered allmulticast mode [ 572.226237][T24528] tunl0: entered allmulticast mode [ 572.232644][T24528] gre0: entered allmulticast mode [ 572.239844][T24528] gretap0: entered allmulticast mode [ 572.246160][T24528] erspan0: entered allmulticast mode [ 572.251652][ T28] audit: type=1400 audit(2000000017.650:108271): avc: denied { create } for pid=24504 comm="syz.5.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 572.260155][T24528] ip_vti0: entered allmulticast mode [ 572.273567][ T28] audit: type=1400 audit(2000000017.660:108272): avc: denied { search } for pid=24541 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.299637][ T28] audit: type=1400 audit(2000000017.660:108273): avc: denied { search } for pid=24541 comm="rm" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.318096][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 572.321547][ T28] audit: type=1400 audit(2000000017.660:108274): avc: denied { search } for pid=24541 comm="rm" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.367210][T24528] ip6_vti0: entered allmulticast mode [ 572.385236][T24528] sit0: entered allmulticast mode [ 572.397714][T24528] ip6tnl0: entered allmulticast mode [ 572.411667][T24547] audit: audit_backlog=65 > audit_backlog_limit=64 [ 572.439790][T24528] ip6gre0: entered allmulticast mode [ 572.456337][T24528] syz_tun: entered allmulticast mode [ 572.484707][T24528] ip6gretap0: entered allmulticast mode [ 572.491412][T24528] bridge0: entered allmulticast mode [ 572.517179][T24528] vcan0: entered allmulticast mode [ 572.523528][T24528] bond0: entered allmulticast mode [ 572.552048][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.558343][T24528] bond_slave_0: entered allmulticast mode [ 572.569018][T24528] bond_slave_1: entered allmulticast mode [ 572.576514][T24528] team0: entered allmulticast mode [ 572.611785][T24528] team_slave_0: entered allmulticast mode [ 572.620857][T24528] team_slave_1: entered allmulticast mode [ 572.634972][T24528] dummy0: entered allmulticast mode [ 572.641349][T24528] nlmon0: entered allmulticast mode [ 572.666896][T24528] caif0: entered allmulticast mode [ 572.672032][T24528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.717400][T24536] bridge0: entered promiscuous mode [ 572.729678][T24536] macvtap1: entered promiscuous mode [ 572.747197][T24536] bridge0: port 3(macvtap1) entered blocking state [ 572.773403][T24536] bridge0: port 3(macvtap1) entered disabled state [ 572.780181][T24536] macvtap1: entered allmulticast mode [ 572.790972][T20520] Bluetooth: hci0: Frame reassembly failed (-84) [ 572.801086][T24536] macvtap1: left allmulticast mode [ 572.830081][T24536] bridge0: left promiscuous mode [ 573.195839][T24578] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 573.236624][T24578] loop9: detected capacity change from 0 to 164 [ 573.287178][T24578] ISOFS: Unable to identify CD-ROM format. [ 573.599002][T24551] loop6: detected capacity change from 0 to 2048 [ 573.726915][T24607] loop7: detected capacity change from 0 to 4096 [ 573.736172][T24551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.785605][T24607] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.865097][T24603] loop9: detected capacity change from 0 to 512 [ 573.873206][T24603] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 573.914476][T24603] EXT4-fs (loop9): 1 truncate cleaned up [ 573.942182][T24603] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.187532][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.237882][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.359855][T23876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.440919][T24645] loop5: detected capacity change from 0 to 512 [ 574.539814][T24645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.590266][T24645] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.676524][T24645] EXT4-fs warning (device loop5): ext4_group_extend:1891: can't read last block, resize aborted [ 574.771624][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.974561][ T3515] Bluetooth: hci0: command 0x1003 tx timeout [ 574.980595][T20447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 575.025652][T24689] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 575.226973][T24701] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4784'. [ 575.308735][T24701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4784'. [ 575.417932][T24715] netlink: 'syz.4.4787': attribute type 1 has an invalid length. [ 575.950331][T24738] loop4: detected capacity change from 0 to 512 [ 575.965613][ T6598] Bluetooth: hci0: Frame reassembly failed (-84) [ 576.003116][T24738] EXT4-fs: Ignoring removed i_version option [ 576.009193][T24738] EXT4-fs: test_dummy_encryption option not supported [ 576.124339][T24744] netlink: 'syz.7.4795': attribute type 66 has an invalid length. [ 576.398849][T24754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 576.466095][T24759] netlink: 'syz.5.4799': attribute type 10 has an invalid length. [ 576.498549][T24759] team0: Failed to send options change via netlink (err -105) [ 576.539449][T24759] team0: Port device dummy0 added [ 576.557715][T24768] netlink: 'syz.5.4799': attribute type 10 has an invalid length. [ 576.566665][T24768] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 576.592373][T24768] team0: Failed to send options change via netlink (err -105) [ 576.611530][T24768] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 576.620510][T24768] team0: Port device dummy0 removed [ 576.631091][T24768] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 576.784818][T24786] loop6: detected capacity change from 0 to 512 [ 576.837635][T24786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.888316][T24786] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.097412][ T28] kauditd_printk_skb: 1941 callbacks suppressed [ 577.097425][ T28] audit: type=1400 audit(2000000022.627:110202): avc: denied { search } for pid=24804 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.130376][ T28] audit: type=1400 audit(2000000022.655:110203): avc: denied { search } for pid=24804 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.175166][ T28] audit: type=1400 audit(2000000022.655:110204): avc: denied { search } for pid=24804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.209459][ T28] audit: type=1400 audit(2000000022.655:110205): avc: denied { search } for pid=24804 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.235398][ T28] audit: type=1400 audit(2000000022.674:110206): avc: denied { search } for pid=24805 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.236168][T24786] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.258663][ T28] audit: type=1400 audit(2000000022.674:110207): avc: denied { search } for pid=24805 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.295076][ T6588] Bluetooth: hci1: Frame reassembly failed (-84) [ 577.319388][ T28] audit: type=1400 audit(2000000022.674:110208): avc: denied { search } for pid=24805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.351351][T24804] audit: audit_backlog=65 > audit_backlog_limit=64 [ 577.357950][T24804] audit: audit_lost=2019 audit_rate_limit=0 audit_backlog_limit=64 [ 577.366633][ T28] audit: type=1400 audit(2000000022.674:110209): avc: denied { read open } for pid=24805 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.559747][T24822] lo: entered allmulticast mode [ 577.574199][T24822] tunl0: entered allmulticast mode [ 577.581671][T24822] gre0: entered allmulticast mode [ 577.593254][T24822] gretap0: entered allmulticast mode [ 577.603956][T24822] erspan0: entered allmulticast mode [ 577.625987][T24822] ip_vti0: entered allmulticast mode [ 577.657425][T24822] ip6_vti0: entered allmulticast mode [ 577.658278][T24833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4806'. [ 577.705067][T24822] sit0: entered allmulticast mode [ 577.736767][T24822] ip6tnl0: entered allmulticast mode [ 577.763956][T24822] ip6gre0: entered allmulticast mode [ 577.771246][T24822] syz_tun: entered allmulticast mode [ 577.778630][T24822] ip6gretap0: entered allmulticast mode [ 577.785378][T24822] bridge0: entered allmulticast mode [ 577.809614][T24822] vcan0: entered allmulticast mode [ 577.815858][T24822] bond0: entered allmulticast mode [ 577.850274][T24822] bond_slave_0: entered allmulticast mode [ 577.856185][T24822] bond_slave_1: entered allmulticast mode [ 577.862792][T24822] dummy0: entered allmulticast mode [ 577.871258][T24822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.896641][T24822] team0: entered allmulticast mode [ 577.901838][T24822] team_slave_0: entered allmulticast mode [ 577.910524][T24822] team_slave_1: entered allmulticast mode [ 577.919625][T24822] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.935475][T24822] bond0: (slave dummy0): Releasing backup interface [ 578.032764][T24822] nlmon0: entered allmulticast mode [ 578.040120][T24822] caif0: entered allmulticast mode [ 578.045321][T24822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.067940][T24833] bridge0: entered promiscuous mode [ 578.073400][T24833] macvtap1: entered promiscuous mode [ 578.080023][T24833] bridge0: port 3(macvtap1) entered blocking state [ 578.087413][T24833] bridge0: port 3(macvtap1) entered disabled state [ 578.094234][T24833] macvtap1: entered allmulticast mode [ 578.101612][T24833] macvtap1: left allmulticast mode [ 578.109082][T24833] bridge0: left promiscuous mode [ 578.142135][T24158] Bluetooth: hci0: command 0x1003 tx timeout [ 578.176448][T24847] No such timeout policy "syz1" [ 578.202826][T20447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 578.768907][T24868] loop9: detected capacity change from 0 to 256 [ 578.786015][T24868] vfat: Unknown parameter '00000000000000000004' [ 578.946416][T23400] hid_parser_main: 9 callbacks suppressed [ 578.946432][T23400] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 578.980191][T23400] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 579.130834][T24885] fido_id[24885]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 579.357619][ T6592] tipc: Subscription rejected, illegal request [ 579.389647][ T6588] Bluetooth: hci0: Frame reassembly failed (-84) [ 579.511122][T24158] Bluetooth: hci1: command 0x1003 tx timeout [ 579.517192][ T3515] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 579.663828][T24917] loop5: detected capacity change from 0 to 512 [ 579.680432][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.764005][T24917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.785560][T24917] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.943592][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.358294][T24953] loop5: detected capacity change from 0 to 128 [ 580.369975][T24955] loop7: detected capacity change from 0 to 512 [ 580.397102][T24955] EXT4-fs: inline encryption not supported [ 580.406540][T24953] msdos: Unknown parameter 'dmaok' [ 580.445332][T24955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 580.490826][T24955] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 580.530966][T24955] EXT4-fs (loop7): orphan cleanup on readonly fs [ 580.568583][T24955] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4224: comm syz.7.4829: Allocating blocks 41-42 which overlap fs metadata [ 580.640522][T24955] loop7: lost filesystem error report for type 5 error -117 [ 580.643294][T24955] EXT4-fs (loop7): Remounting filesystem read-only [ 580.657142][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 580.657158][ C1] EXT4-fs (loop7): initial error at time 2000000025: ext4_mb_mark_diskspace_used:4224 [ 580.657179][ C1] EXT4-fs (loop7): last error at time 2000000025: ext4_mb_mark_diskspace_used:4224 [ 580.702987][T24955] EXT4-fs (loop7): 1 truncate cleaned up [ 580.738501][T24955] EXT4-fs (loop7): pa ffff8881082a8b60: logic 1, phys. 41, len 23 [ 580.775011][T24955] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 580.866620][T23876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.032467][T24973] syzkaller1: entered promiscuous mode [ 581.051039][T24973] syzkaller1: entered allmulticast mode [ 581.123117][T24973] netlink: 'syz.7.4830': attribute type 39 has an invalid length. [ 581.175130][T24973] hsr_slave_1 (unregistering): left promiscuous mode [ 581.188680][T24981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4831'. [ 581.221694][T24985] netlink: 'syz.7.4830': attribute type 10 has an invalid length. [ 581.231605][T24981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4831'. [ 581.236013][T24985] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 581.260284][T24985] team0: Failed to send options change via netlink (err -105) [ 581.292181][T24973] netlink: 'syz.7.4830': attribute type 10 has an invalid length. [ 581.319195][T24985] team0: Port device dummy0 added [ 581.332090][T24988] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 581.368754][T24988] batman_adv: batadv0: Adding interface: gretap1 [ 581.375128][T24988] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.416812][T24988] batman_adv: batadv0: Interface activated: gretap1 [ 581.432107][T24973] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 581.445291][T24973] team0: Failed to send options change via netlink (err -105) [ 581.452972][T24973] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 581.474797][T24973] team0: Port device dummy0 removed [ 581.496278][T24973] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 581.526581][ T41] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.548236][ T41] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.559962][ T3515] Bluetooth: hci0: command 0x1003 tx timeout [ 581.566056][T20447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 581.569866][ T41] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.677837][ T41] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.698347][T24995] loop9: detected capacity change from 0 to 512 [ 581.748557][T24995] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 581.796387][T24995] EXT4-fs (loop9): mount failed [ 581.881402][T25009] loop7: detected capacity change from 0 to 1764 [ 582.157171][T25024] IPv6: NLM_F_CREATE should be specified when creating new route [ 582.227632][T25024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.235458][T25024] IPv6: NLM_F_CREATE should be set when creating new route [ 582.348150][T25042] ref_ctr increment failed for inode: 0xce offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810b8986c0 [ 582.455408][ T28] kauditd_printk_skb: 1730 callbacks suppressed [ 582.455431][ T28] audit: type=1400 audit(2000000027.641:111937): avc: denied { search } for pid=25051 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.518667][T25053] loop9: detected capacity change from 0 to 128 [ 582.536763][ T28] audit: type=1400 audit(2000000027.678:111938): avc: denied { create } for pid=25034 comm="syz.6.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 582.634865][ T28] audit: type=1400 audit(2000000027.678:111939): avc: denied { write } for pid=25034 comm="syz.6.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 582.707480][T25058] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.717467][ T28] audit: type=1400 audit(2000000027.697:111940): avc: denied { read } for pid=25051 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 582.749281][T25061] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.761405][T25062] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.767236][T25061] audit: audit_lost=2020 audit_rate_limit=0 audit_backlog_limit=64 [ 582.788327][ T28] audit: type=1400 audit(2000000027.697:111941): avc: denied { open } for pid=25051 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 582.792887][T14825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 582.910047][ T41] kworker/u8:2: attempt to access beyond end of device [ 582.910047][ T41] loop9: rw=1, sector=153, nr_sectors = 8 limit=128 [ 582.931376][ T41] kworker/u8:2: attempt to access beyond end of device [ 582.931376][ T41] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 582.981298][ T41] kworker/u8:2: attempt to access beyond end of device [ 582.981298][ T41] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 583.019522][ T41] kworker/u8:2: attempt to access beyond end of device [ 583.019522][ T41] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 583.085235][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4841'. [ 583.104637][ T41] kworker/u8:2: attempt to access beyond end of device [ 583.104637][ T41] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 583.189955][ T41] kworker/u8:2: attempt to access beyond end of device [ 583.189955][ T41] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 583.227619][ T41] kworker/u8:2: attempt to access beyond end of device [ 583.227619][ T41] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 583.241830][ T41] kworker/u8:2: attempt to access beyond end of device [ 583.241830][ T41] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 583.262360][ T41] kworker/u8:2: attempt to access beyond end of device [ 583.262360][ T41] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 583.276531][ T41] kworker/u8:2: attempt to access beyond end of device [ 583.276531][ T41] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 583.716795][T25105] netlink: 'syz.6.4851': attribute type 1 has an invalid length. [ 583.935293][T25109] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 583.970176][T25115] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4852'. [ 584.032621][T25105] veth7: entered promiscuous mode [ 584.049385][T25105] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 584.068321][T25121] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4852'. [ 584.078075][T25109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4851'. [ 584.128469][T25115] bond1 (unregistering): Released all slaves [ 584.203889][T25109] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.210908][T20520] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 584.340533][T25137] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4856'. [ 584.371549][T20520] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 584.419092][T25149] loop4: detected capacity change from 0 to 512 [ 584.448452][T25132] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4853'. [ 584.466063][T25149] EXT4-fs: Ignoring removed bh option [ 584.522512][T25149] EXT4-fs: inline encryption not supported [ 584.591190][T25156] loop6: detected capacity change from 0 to 512 [ 584.660557][T25162] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4857'. [ 584.697945][T25156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.713426][T25162] netlink: 'syz.9.4857': attribute type 1 has an invalid length. [ 584.728899][T25156] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.824506][T25156] RDS: rds_bind could not find a transport for c00::, load rds_tcp or rds_rdma? [ 584.872003][T25156] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 584.949384][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.986428][T25167] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.993614][T25167] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.081527][T25182] IPv6: NLM_F_CREATE should be specified when creating new route [ 585.099953][T25182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.108613][T25182] IPv6: NLM_F_CREATE should be set when creating new route [ 585.116406][T25182] IPv6: NLM_F_CREATE should be set when creating new route [ 585.170066][T25167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.197610][T25167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.254963][T25187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4864'. [ 585.406468][ T6588] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.462010][ T6588] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.501376][ T6588] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.577860][ T6588] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.939625][T25220] loop6: detected capacity change from 0 to 1024 [ 585.972546][T25220] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 586.003946][T25229] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 586.061278][T25220] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #3: block 1: comm syz.6.4870: lblock 1 mapped to illegal pblock 1 (length 1) [ 586.072181][T25229] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 586.103054][T25220] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 586.103175][T25220] EXT4-fs error (device loop6): ext4_acquire_dquot:7003: comm syz.6.4870: Failed to acquire dquot type 0 [ 586.111665][T25229] tipc: Failed to obtain node identity [ 586.112322][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 586.125346][T25229] tipc: Enabling of bearer rejected, failed to enable media [ 586.128924][ C1] EXT4-fs (loop6): initial error at time 2000000031: ext4_map_blocks:818: inode 3: block 1 [ 586.153864][ C1] EXT4-fs (loop6): last error at time 2000000031: ext4_map_blocks:818: inode 3: block 1 [ 586.210973][T25220] loop6: lost filesystem error report for type 5 error -117 [ 586.211134][T25220] EXT4-fs error (device loop6): ext4_free_blocks:6726: comm syz.6.4870: Freeing blocks not in datazone - block = 0, count = 4096 [ 586.249789][T25220] loop6: lost filesystem error report for type 5 error -117 [ 586.249970][T25220] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4870: Invalid inode bitmap blk 0 in block_group 0 [ 586.270746][ T41] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 586.285595][ T41] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 586.285723][T25220] loop6: lost filesystem error report for type 5 error -117 [ 586.306464][ T41] EXT4-fs error (device loop6): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 0 [ 586.338543][T25220] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 586.347624][ T41] loop6: lost filesystem error report for type 5 error -117 [ 586.370608][T25220] loop6: lost filesystem error report for type 5 error -117 [ 586.421484][T25220] EXT4-fs (loop6): 1 orphan inode deleted [ 586.458247][T25220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.489563][T25251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.564954][T25251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4875'. [ 586.604660][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.626428][T25251] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4875'. [ 586.670783][T25251] bond0: left allmulticast mode [ 586.675739][T25251] bond_slave_0: left allmulticast mode [ 586.719144][T25251] bond_slave_1: left allmulticast mode [ 586.739463][T25251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.767104][T25251] bond1: (slave bond0): making interface the new active one [ 586.827228][T25251] bond1: (slave bond0): Enslaving as an active interface with an up link [ 586.896632][T25266] lo: left allmulticast mode [ 586.926280][ T6588] Bluetooth: hci0: Frame reassembly failed (-84) [ 586.941406][T25266] tunl0: left allmulticast mode [ 586.975370][T25266] gre0: left allmulticast mode [ 587.017833][T25266] gretap0: left allmulticast mode [ 587.056073][T25274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.064540][T25274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.074218][T25266] erspan0: left allmulticast mode [ 587.091023][T25266] ip_vti0: left allmulticast mode [ 587.158770][T25266] ip6_vti0: left allmulticast mode [ 587.209860][T25266] sit0: left allmulticast mode [ 587.218376][T25266] ip6tnl0: left allmulticast mode [ 587.224563][T25266] ip6gre0: left allmulticast mode [ 587.231164][T25266] syz_tun: left allmulticast mode [ 587.246187][T25266] ip6gretap0: left allmulticast mode [ 587.352375][T25294] loop5: detected capacity change from 0 to 1024 [ 587.362421][T25294] EXT4-fs: inline encryption not supported [ 587.402988][T25266] bridge0: left allmulticast mode [ 587.624849][T25266] vcan0: left allmulticast mode [ 587.686012][T25266] bond1: (slave bond0): Releasing active interface [ 587.942415][T25266] team0: left allmulticast mode [ 588.027428][T25266] team_slave_0: left allmulticast mode [ 588.107266][T25266] team_slave_1: left allmulticast mode [ 588.189111][T25266] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.222666][ T28] kauditd_printk_skb: 1980 callbacks suppressed [ 588.222679][ T28] audit: type=1400 audit(2000000033.038:113885): avc: denied { prog_load } for pid=25296 comm="syz.4.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 588.300561][T25266] dummy0: left allmulticast mode [ 588.368678][T25266] nlmon0: left allmulticast mode [ 588.433783][T25266] caif0: left allmulticast mode [ 588.458142][ T28] audit: type=1400 audit(2000000033.066:113886): avc: denied { bpf } for pid=25296 comm="syz.4.4881" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 588.492595][T25266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.613941][T25280] : renamed from team_slave_1 [ 588.676607][ T28] audit: type=1400 audit(2000000033.159:113887): avc: denied { create } for pid=25296 comm="syz.4.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 588.920547][ T28] audit: type=1400 audit(2000000033.197:113888): avc: denied { write } for pid=25296 comm="syz.4.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 588.943958][T25294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.992323][T25288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=25288 comm=syz.5.4880 [ 589.000482][ T28] audit: type=1400 audit(2000000033.197:113889): avc: denied { read } for pid=25296 comm="syz.4.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 589.005199][T25288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=25288 comm=syz.5.4880 [ 589.026251][ T28] audit: type=1400 audit(2000000033.206:113890): avc: denied { open } for pid=25296 comm="syz.4.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 589.087392][ T28] audit: type=1400 audit(2000000033.225:113891): avc: denied { perfmon } for pid=25296 comm="syz.4.4881" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.098425][T20447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 589.149332][T25309] wg0: entered allmulticast mode [ 589.164381][ T28] audit: type=1400 audit(2000000033.225:113892): avc: denied { kernel } for pid=25296 comm="syz.4.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 589.203141][ T28] audit: type=1400 audit(2000000033.318:113893): avc: denied { name_bind } for pid=25296 comm="syz.4.4881" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 589.226989][ T28] audit: type=1400 audit(2000000033.318:113894): avc: denied { node_bind } for pid=25296 comm="syz.4.4881" saddr=::ffff:172.30.1.5 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 589.413946][T25316] loop9: detected capacity change from 0 to 128 [ 589.511766][T25317] loop6: detected capacity change from 0 to 1024 [ 589.686830][T25314] wg1: entered promiscuous mode [ 589.691756][T25314] wg1: entered allmulticast mode [ 589.800974][T25329] bridge0: port 3(veth0_to_bridge) entered blocking state [ 589.827066][T25329] bridge0: port 3(veth0_to_bridge) entered disabled state [ 589.860766][T25329] veth0_to_bridge: entered allmulticast mode [ 589.889397][T25329] veth0_to_bridge: entered promiscuous mode [ 590.278974][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.527722][T25346] netlink: 'syz.6.4890': attribute type 13 has an invalid length. [ 590.683049][T25363] loop9: detected capacity change from 0 to 1024 [ 590.720799][T25363] EXT4-fs: inline encryption not supported [ 590.777006][T25363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.930962][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.126297][T25346] batman_adv: batadv0: Interface deactivated: gretap1 [ 591.184545][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 591.229509][T25378] FAULT_INJECTION: forcing a failure. [ 591.229509][T25378] name failslab, interval 1, probability 0, space 0, times 0 [ 591.270835][ T6591] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.279896][ T6591] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.289503][T25378] CPU: 0 UID: 0 PID: 25378 Comm: syz.9.4896 Not tainted syzkaller #0 PREEMPT(full) [ 591.289527][T25378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.289580][T25378] Call Trace: [ 591.289587][T25378] [ 591.289595][T25378] __dump_stack+0x1d/0x30 [ 591.289622][T25378] dump_stack_lvl+0x95/0xd0 [ 591.289650][T25378] dump_stack+0x15/0x1b [ 591.289671][T25378] should_fail_ex+0x263/0x280 [ 591.289693][T25378] should_failslab+0x8c/0xb0 [ 591.289720][T25378] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 591.289742][T25378] ? sidtab_sid2str_get+0xa0/0x130 [ 591.289765][T25378] kmemdup_noprof+0x2b/0x70 [ 591.289794][T25378] sidtab_sid2str_get+0xa0/0x130 [ 591.289811][T25378] security_sid_to_context_core+0x1eb/0x2e0 [ 591.289844][T25378] security_sid_to_context+0x27/0x40 [ 591.289873][T25378] avc_audit_post_callback+0x9d/0x540 [ 591.289910][T25378] ? audit_log_lsm_data+0x756/0xbb0 [ 591.289954][T25378] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 591.290004][T25378] common_lsm_audit+0x1ba/0x230 [ 591.290055][T25378] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 591.290101][T25378] slow_avc_audit+0x14c/0x190 [ 591.290123][T25378] avc_has_perm+0x144/0x190 [ 591.290149][T25378] selinux_uring_allowed+0x73/0x80 [ 591.290218][T25378] security_uring_allowed+0x28/0x60 [ 591.290236][T25378] __se_sys_io_uring_setup+0xe4/0x1e0 [ 591.290264][T25378] ? hrtimer_interrupt+0x705/0x810 [ 591.290288][T25378] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 591.290315][T25378] __x64_sys_io_uring_setup+0x31/0x40 [ 591.290342][T25378] x64_sys_call+0x2962/0x3020 [ 591.290433][T25378] do_syscall_64+0x12c/0x370 [ 591.290465][T25378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.290483][T25378] RIP: 0033:0x7f8c49c5c629 [ 591.290498][T25378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.290596][T25378] RSP: 002b:00007f8c486af028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 591.290614][T25378] RAX: ffffffffffffffda RBX: 00007f8c49ed5fa0 RCX: 00007f8c49c5c629 [ 591.290629][T25378] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000524 [ 591.290641][T25378] RBP: 00007f8c486af090 R08: 0000000000000000 R09: 0000000000000000 [ 591.290684][T25378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.290698][T25378] R13: 00007f8c49ed6038 R14: 00007f8c49ed5fa0 R15: 00007ffc676d1648 [ 591.290717][T25378] [ 591.543496][ T6591] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.552443][ T6591] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.695667][T25391] loop6: detected capacity change from 0 to 512 [ 591.703697][T25391] EXT4-fs: inline encryption not supported [ 591.742037][T25391] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 591.883281][T25391] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4901'. [ 591.887969][T25402] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4904'. [ 592.010143][T25402] bridge0: entered promiscuous mode [ 592.022501][T25402] bridge0: port 3(macsec1) entered blocking state [ 592.050896][T25402] bridge0: port 3(macsec1) entered disabled state [ 592.057803][T25402] macsec1: entered allmulticast mode [ 592.111989][T25414] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4904'. [ 592.128224][T25402] bridge0: entered allmulticast mode [ 592.144858][T25402] macsec1: left allmulticast mode [ 592.149899][T25402] bridge0: left allmulticast mode [ 592.168943][T25402] bridge0: left promiscuous mode [ 592.246865][ T6591] Bluetooth: hci1: Frame reassembly failed (-84) [ 592.322834][T25423] loop6: detected capacity change from 0 to 1024 [ 592.373523][T25423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.673967][T23471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.746045][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4911'. [ 593.312717][T25460] netlink: 1040 bytes leftover after parsing attributes in process `syz.6.4914'. [ 593.363225][ T3515] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 593.365305][T24158] Bluetooth: hci0: command 0x1003 tx timeout [ 593.581266][ T28] kauditd_printk_skb: 1261 callbacks suppressed [ 593.581282][ T28] audit: type=1400 audit(2000000038.052:115156): avc: denied { ioctl } for pid=25468 comm="syz.7.4916" path="socket:[82493]" dev="sockfs" ino=82493 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 593.693200][ T28] audit: type=1400 audit(2000000038.061:115157): avc: denied { search } for pid=25477 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.744086][ T28] audit: type=1400 audit(2000000038.061:115158): avc: denied { read } for pid=25477 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 593.784888][T25486] audit: audit_backlog=65 > audit_backlog_limit=64 [ 593.795249][T25471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 593.802523][T25486] audit: audit_lost=2033 audit_rate_limit=0 audit_backlog_limit=64 [ 593.810708][T25471] audit: audit_lost=2034 audit_rate_limit=0 audit_backlog_limit=64 [ 593.814289][ T28] audit: type=1400 audit(2000000038.061:115159): avc: denied { read open } for pid=25477 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 593.819565][T25486] audit: backlog limit exceeded [ 593.851575][T25471] audit: backlog limit exceeded [ 593.872105][T25471] loop6: detected capacity change from 0 to 128 [ 594.148141][T25500] loop7: detected capacity change from 0 to 512 [ 594.175210][T25500] journal_path: Lookup failure for './file0' [ 594.187277][T25500] EXT4-fs: error: could not find journal device path [ 594.390541][ T3515] Bluetooth: hci1: command 0x1003 tx timeout [ 594.396622][T20447] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 594.548545][T20520] bio_check_eod: 102 callbacks suppressed [ 594.548606][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.548606][T20520] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 594.584241][T25525] loop5: detected capacity change from 0 to 512 [ 594.592793][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.592793][T20520] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 594.617332][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.617332][T20520] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 594.638854][T25525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.663105][T25525] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.676913][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.676913][T20520] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 594.719453][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.719453][T20520] loop6: rw=1, sector=209, nr_sectors = 8 limit=128 [ 594.777842][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.777842][T20520] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 594.792410][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.792410][T20520] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 594.792938][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.815382][T20520] kworker/u8:7: attempt to access beyond end of device [ 594.815382][T20520] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 594.907459][T25537] netlink: 'syz.5.4921': attribute type 1 has an invalid length. [ 594.967084][T25543] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 594.994479][T25543] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 595.127285][T25543] bond1: (slave vxcan3): making interface the new active one [ 595.168615][T25543] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 595.296980][T25543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=25543 comm=syz.5.4921 [ 595.815369][T25564] loop5: detected capacity change from 0 to 1024 [ 595.841786][T25564] EXT4-fs: Ignoring removed orlov option [ 595.853898][T25564] ext4: Bad value for 'min_batch_time' [ 595.948360][T25570] loop4: detected capacity change from 0 to 1024 [ 597.195808][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4934'. [ 597.220573][T25630] netlink: 'syz.5.4934': attribute type 1 has an invalid length. [ 597.333179][T25635] netlink: 'syz.6.4935': attribute type 21 has an invalid length. [ 597.362974][T25635] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4935'. [ 597.421587][T25635] netlink: 'syz.6.4935': attribute type 4 has an invalid length. [ 597.450438][T25635] netlink: 'syz.6.4935': attribute type 5 has an invalid length. [ 597.467943][T25635] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4935'. [ 597.980719][ T3515] Bluetooth: hci0: command 0x1003 tx timeout [ 598.002220][T20447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 598.100017][T25656] : renamed from bond_slave_0 (while UP) [ 598.285365][T25671] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4943'. [ 598.302338][T25670] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 598.310230][T25670] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 598.436654][T25678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.636891][T25670] tipc: Failed to obtain node identity [ 598.676787][T25670] tipc: Enabling of bearer rejected, failed to enable media [ 598.785808][T25697] loop9: detected capacity change from 0 to 128 [ 599.046383][ T28] kauditd_printk_skb: 1690 callbacks suppressed [ 599.046774][ T28] audit: type=1400 audit(2000000043.159:116841): avc: denied { read write } for pid=23471 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.157378][ T28] audit: type=1400 audit(2000000043.196:116842): avc: denied { read write open } for pid=23471 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.210005][ T28] audit: type=1400 audit(2000000043.196:116843): avc: denied { ioctl } for pid=23471 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.356788][ T28] audit: type=1400 audit(2000000043.215:116844): avc: denied { search } for pid=25698 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.379349][ T28] audit: type=1400 audit(2000000043.309:116845): avc: denied { read write } for pid=23471 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.405500][ T28] audit: type=1400 audit(2000000043.309:116846): avc: denied { read write open } for pid=23471 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.441972][ T28] audit: type=1400 audit(2000000043.309:116847): avc: denied { ioctl } for pid=23471 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.486391][ T28] audit: type=1400 audit(2000000043.337:116848): avc: denied { search } for pid=25701 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 599.513230][ T28] audit: type=1400 audit(2000000043.355:116849): avc: denied { execmem } for pid=25702 comm="syz.6.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 599.576912][ T28] audit: type=1400 audit(2000000043.439:116850): avc: denied { read write } for pid=23876 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.763791][T25714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.914452][T25712] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=25712 comm=syz.7.4953 [ 599.937168][T25712] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 600.938195][T25734] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4959'. [ 601.007016][T25748] loop7: detected capacity change from 0 to 1024 [ 601.021130][T25748] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 601.069009][T25748] EXT4-fs (loop7): mount failed [ 601.111943][T25755] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 601.120692][T25755] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 601.219473][T25752] tipc: Failed to obtain node identity [ 601.235866][T25752] tipc: Enabling of bearer rejected, failed to enable media [ 601.623536][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4968'. [ 601.765780][T25785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=25785 comm=syz.5.4972 [ 601.942555][T25785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=25785 comm=syz.5.4972 [ 603.848434][T25805] loop4: detected capacity change from 0 to 512 [ 604.095851][T25805] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 604.145671][T25805] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 604.248845][T25805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 604.381354][T25805] netlink: 'syz.4.4978': attribute type 2 has an invalid length. [ 604.405483][ T28] kauditd_printk_skb: 513 callbacks suppressed [ 604.405496][ T28] audit: type=1400 audit(2000000048.173:117348): avc: denied { write } for pid=25791 comm="syz.7.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.406343][T25805] netlink: 'syz.4.4978': attribute type 11 has an invalid length. [ 604.453136][T25805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4978'. [ 604.485404][ T28] audit: type=1400 audit(2000000048.210:117349): avc: denied { write } for pid=25791 comm="syz.7.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.533440][ T28] audit: type=1400 audit(2000000048.210:117350): avc: denied { mounton } for pid=25814 comm="syz.9.4980" path="/file0" dev="autofs" ino=83390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 604.579498][T25822] IPVS: set_ctl: invalid protocol: 46 10.1.1.1:20001 [ 604.623464][ T28] audit: type=1400 audit(2000000048.210:117351): avc: denied { write } for pid=25791 comm="syz.7.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.670225][T14825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.727217][ T28] audit: type=1400 audit(2000000048.219:117352): avc: denied { write } for pid=25791 comm="syz.7.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 604.781093][T25834] loop4: detected capacity change from 0 to 512 [ 604.797363][T25834] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.806693][T25836] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.807730][ T28] audit: type=1400 audit(2000000048.229:117353): avc: denied { create } for pid=25814 comm="syz.9.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 604.827423][T25834] audit: audit_lost=2043 audit_rate_limit=0 audit_backlog_limit=64 [ 604.842982][T25836] audit: audit_lost=2044 audit_rate_limit=0 audit_backlog_limit=64 [ 604.989814][T25839] loop5: detected capacity change from 0 to 512 [ 605.014490][T25819] loop4: detected capacity change from 0 to 7 [ 605.027927][T25839] EXT4-fs: Ignoring removed orlov option [ 605.049374][T25839] EXT4-fs: Ignoring removed mblk_io_submit option [ 605.057583][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.075936][T25839] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 605.097299][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.113124][ T3617] loop4: unable to read partition table [ 605.116024][T25839] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4985: attempt to clear invalid blocks 2 len 1 [ 605.134869][T25819] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.148527][T25819] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.157313][T25819] loop4: unable to read partition table [ 605.171772][T25819] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 605.186491][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.195127][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.205144][T25839] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 605.205451][T25839] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, [ 605.209466][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.215211][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 605.236397][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.236997][ C0] EXT4-fs (loop5): initial error at time 2000000048: ext4_clear_blocks:876: inode 13 [ 605.254370][ C0] EXT4-fs (loop5): last error at time 2000000048: ext4_clear_blocks:876: inode 13 [ 605.257122][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.264262][T25839] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 605.283043][ T3617] Buffer I/O error on dev loop4, logical block 0, async page read [ 605.313693][T25839] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4985: invalid indirect mapped block 1819239214 (level 0) [ 605.367814][T25839] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 605.372671][T25839] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4985: invalid indirect mapped block 1819239214 (level 1) [ 605.385125][T25854] FAULT_INJECTION: forcing a failure. [ 605.385125][T25854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.423927][T25854] CPU: 1 UID: 0 PID: 25854 Comm: syz.9.4989 Not tainted syzkaller #0 PREEMPT(full) [ 605.424062][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 605.424075][T25854] Call Trace: [ 605.424083][T25854] [ 605.424092][T25854] __dump_stack+0x1d/0x30 [ 605.424117][T25854] dump_stack_lvl+0x95/0xd0 [ 605.424135][T25854] dump_stack+0x15/0x1b [ 605.424179][T25854] should_fail_ex+0x263/0x280 [ 605.424201][T25854] should_fail+0xb/0x20 [ 605.424220][T25854] should_fail_usercopy+0x1a/0x20 [ 605.424243][T25854] _copy_to_user+0x20/0xa0 [ 605.424269][T25854] simple_read_from_buffer+0xb5/0x130 [ 605.424346][T25854] proc_fail_nth_read+0x10e/0x150 [ 605.424376][T25854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 605.424399][T25854] vfs_read+0x1ab/0x7f0 [ 605.424429][T25854] ? __rcu_read_unlock+0x4e/0x70 [ 605.424453][T25854] ? __fget_files+0x184/0x1c0 [ 605.424474][T25854] ? mutex_lock+0x57/0x90 [ 605.424495][T25854] ksys_read+0xdc/0x1a0 [ 605.424529][T25854] __x64_sys_read+0x40/0x50 [ 605.424605][T25854] x64_sys_call+0x2886/0x3020 [ 605.424626][T25854] do_syscall_64+0x12c/0x370 [ 605.424660][T25854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.424749][T25854] RIP: 0033:0x7f8c49c1cece [ 605.424764][T25854] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 605.424779][T25854] RSP: 002b:00007f8c486aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 605.424859][T25854] RAX: ffffffffffffffda RBX: 00007f8c486af6c0 RCX: 00007f8c49c1cece [ 605.424872][T25854] RDX: 000000000000000f RSI: 00007f8c486af0a0 RDI: 0000000000000005 [ 605.424884][T25854] RBP: 00007f8c486af090 R08: 0000000000000000 R09: 0000000000000000 [ 605.424895][T25854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.424905][T25854] R13: 00007f8c49ed6038 R14: 00007f8c49ed5fa0 R15: 00007ffc676d1648 [ 605.424924][T25854] [ 605.431632][T25839] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 605.544605][T25857] xt_CONNSECMARK: invalid mode: 0 [ 605.593829][T25839] EXT4-fs (loop5): 1 truncate cleaned up [ 605.681993][T25839] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.719758][T25839] EXT4-fs (loop5): shut down requested (2) [ 605.961466][T25866] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4993'. [ 605.970607][T25866] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4993'. [ 606.020636][T23007] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.078451][T25872] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4996'. [ 606.257123][T25878] loop9: detected capacity change from 0 to 1024 [ 606.291621][T25878] EXT4-fs: inline encryption not supported [ 606.323310][T25878] EXT4-fs: Ignoring removed nobh option [ 606.328892][T25878] EXT4-fs: Ignoring removed bh option [ 606.366408][T25878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.550267][T25893] FAULT_INJECTION: forcing a failure. [ 606.550267][T25893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.601251][T25893] CPU: 1 UID: 0 PID: 25893 Comm: syz.4.5002 Not tainted syzkaller #0 PREEMPT(full) [ 606.601279][T25893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.601292][T25893] Call Trace: [ 606.601300][T25893] [ 606.601377][T25893] __dump_stack+0x1d/0x30 [ 606.601403][T25893] dump_stack_lvl+0x95/0xd0 [ 606.601429][T25893] dump_stack+0x15/0x1b [ 606.601448][T25893] should_fail_ex+0x263/0x280 [ 606.601467][T25893] should_fail+0xb/0x20 [ 606.601489][T25893] should_fail_usercopy+0x1a/0x20 [ 606.601511][T25893] _copy_from_user+0x1c/0xb0 [ 606.601535][T25893] ___sys_sendmsg+0xc1/0x1e0 [ 606.601660][T25893] ? path_openat+0x1b01/0x2050 [ 606.601693][T25893] __sys_sendmmsg+0x185/0x320 [ 606.601754][T25893] __x64_sys_sendmmsg+0x57/0x70 [ 606.601777][T25893] x64_sys_call+0x27aa/0x3020 [ 606.601803][T25893] do_syscall_64+0x12c/0x370 [ 606.601898][T25893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.601920][T25893] RIP: 0033:0x7efd0bf9c629 [ 606.601936][T25893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.601951][T25893] RSP: 002b:00007efd0a9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 606.601969][T25893] RAX: ffffffffffffffda RBX: 00007efd0c215fa0 RCX: 00007efd0bf9c629 [ 606.602025][T25893] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 606.602040][T25893] RBP: 00007efd0a9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 606.602053][T25893] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 606.602136][T25893] R13: 00007efd0c216038 R14: 00007efd0c215fa0 R15: 00007ffdecfcf748 [ 606.602153][T25893] [ 606.933917][T25906] netlink: 'syz.4.5005': attribute type 21 has an invalid length. [ 607.059152][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.327417][T25919] loop4: detected capacity change from 0 to 1024 [ 607.782201][T25933] loop7: detected capacity change from 0 to 2048 [ 607.854231][T25933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.136735][T25750] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 608.756919][T20447] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 609.132748][T25955] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5017'. [ 609.263757][T23876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.404586][T25969] SELinux: policydb string does not match my string SE Linux [ 609.419736][T25969] SELinux: failed to load policy [ 609.510214][T25971] loop4: detected capacity change from 0 to 128 [ 609.758303][ T28] kauditd_printk_skb: 782 callbacks suppressed [ 609.758317][ T28] audit: type=1400 audit(2000000053.177:118071): avc: denied { read write } for pid=23471 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 609.866700][T25975] loop5: detected capacity change from 0 to 512 [ 609.877336][T25978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.878972][T25980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.891726][T23876] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.899061][T23876] audit: audit_lost=2066 audit_rate_limit=0 audit_backlog_limit=64 [ 609.900680][T25980] audit: audit_lost=2067 audit_rate_limit=0 audit_backlog_limit=64 [ 609.908207][ T28] audit: type=1400 audit(2000000053.214:118072): avc: denied { open } for pid=23471 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 609.920742][T25978] audit: audit_lost=2068 audit_rate_limit=0 audit_backlog_limit=64 [ 609.940100][T25975] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.948856][T23876] audit: backlog limit exceeded [ 610.236004][T25992] macsec0: entered promiscuous mode [ 610.406302][T26006] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 610.418975][T26011] 9p: Bad value for 'debug' [ 610.437188][T26006] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 610.589570][T26006] tipc: Failed to obtain node identity [ 610.595068][T26006] tipc: Enabling of bearer rejected, failed to enable media [ 611.158970][T26056] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.5039'. [ 611.212438][T26056] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5039'. [ 611.455023][T26067] loop9: detected capacity change from 0 to 128 [ 612.381698][T26078] loop9: detected capacity change from 0 to 512 [ 612.423544][T26078] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 612.482483][T26078] EXT4-fs (loop9): 1 truncate cleaned up [ 612.514780][T26078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.584750][T26085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5046'. [ 612.607327][T26091] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 612.614782][T26091] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 612.857603][T26091] tipc: Failed to obtain node identity [ 612.880414][T26091] tipc: Enabling of bearer rejected, failed to enable media [ 612.920053][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.375740][T26123] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 613.396810][T26123] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 613.449248][T26129] loop9: detected capacity change from 0 to 512 [ 613.494124][T26129] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 613.537316][T26129] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 613.560448][T26129] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 613.642397][T26129] System zones: 0-2, 18-18, 34-35 [ 613.648067][T26129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 613.675890][T26123] tipc: Failed to obtain node identity [ 613.681373][T26123] tipc: Enabling of bearer rejected, failed to enable media [ 613.807316][T26145] loop4: detected capacity change from 0 to 128 [ 614.106876][T24101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.682659][T26160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5050'. [ 615.113059][ T28] kauditd_printk_skb: 1770 callbacks suppressed [ 615.113074][ T28] audit: type=1400 audit(2000000058.191:119504): avc: denied { search } for pid=26166 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.214677][ T28] audit: type=1400 audit(2000000058.219:119505): avc: denied { read } for pid=26166 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 615.239709][ T28] audit: type=1400 audit(2000000058.219:119506): avc: denied { read open } for pid=26166 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 615.271907][ T28] audit: type=1400 audit(2000000058.219:119507): avc: denied { getattr } for pid=26166 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=517 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 615.297399][ T28] audit: type=1400 audit(2000000058.228:119508): avc: denied { read write } for pid=24101 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 615.372201][T26176] loop4: detected capacity change from 0 to 256 [ 615.382377][ T28] audit: type=1400 audit(2000000058.238:119509): avc: denied { open } for pid=24101 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 615.454205][T26180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.460940][T26163] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.467466][ T28] audit: type=1400 audit(2000000058.238:119510): avc: denied { ioctl } for pid=24101 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 615.475483][T14825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 615.504314][T26180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.513395][T26180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.156140][T26215] netlink: 'syz.9.5062': attribute type 30 has an invalid length. [ 616.961012][T26232] loop4: detected capacity change from 0 to 128 [ 618.217768][T26282] loop9: detected capacity change from 0 to 256 [ 619.384729][T26282] FAT-fs (loop9): codepage cp1250 not found [ 619.400684][T26298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5082'. [ 619.432949][T26301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.447419][T26298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5082'. [ 619.504755][T26298] geneve4: entered promiscuous mode [ 619.521954][T26301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.761139][T26319] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5092'. [ 619.884691][T26324] loop5: detected capacity change from 0 to 164 [ 620.307951][T26324] rock: directory entry would overflow storage [ 620.314175][T26324] rock: sig=0x4f50, size=4, remaining=3 [ 620.321711][T26324] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 620.484207][ T28] kauditd_printk_skb: 860 callbacks suppressed [ 620.484219][ T28] audit: type=1400 audit(2000000063.214:120332): avc: denied { read write } for pid=23876 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.541666][ T28] audit: type=1400 audit(2000000063.270:120333): avc: denied { read write open } for pid=23876 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.777808][ T28] audit: type=1400 audit(2000000063.298:120334): avc: denied { ioctl } for pid=23876 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.804347][ T28] audit: type=1400 audit(2000000063.410:120335): avc: denied { read write } for pid=23471 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.830063][ T28] audit: type=1400 audit(2000000063.410:120336): avc: denied { open } for pid=23471 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.854836][ T28] audit: type=1400 audit(2000000063.429:120337): avc: denied { ioctl } for pid=23471 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.881434][ T28] audit: type=1400 audit(2000000063.532:120338): avc: denied { read write } for pid=14825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.922690][ T28] audit: type=1400 audit(2000000063.532:120339): avc: denied { open } for pid=14825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 620.965382][ T28] audit: type=1400 audit(2000000063.532:120340): avc: denied { ioctl } for pid=14825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 621.046939][ T28] audit: type=1400 audit(2000000063.541:120341): avc: denied { create } for pid=26335 comm="syz.7.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 621.188670][T26345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.199513][T26345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.001819][T26361] loop7: detected capacity change from 0 to 256 [ 622.057994][T26355] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 622.064591][T26355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.094359][T26354] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 622.100954][T26354] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.110578][T26355] vhci_hcd vhci_hcd.0: Device attached [ 622.118930][T26355] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 622.125444][T26355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.212044][T26354] vhci_hcd vhci_hcd.0: Device attached [ 622.239659][T26361] FAT-fs (loop7): IO charset macgaelic not found [ 622.290568][T26355] vhci_hcd vhci_hcd.0: Device attached [ 622.329765][T26363] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 622.336387][T26363] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 622.537486][T26372] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(14) [ 622.544196][T26372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 622.777315][T26363] vhci_hcd vhci_hcd.0: Device attached [ 622.827148][T26372] vhci_hcd vhci_hcd.0: Device attached [ 623.307444][T26356] vhci_hcd: connection closed [ 623.307685][ T41] vhci_hcd vhci_hcd.4: stop threads [ 623.319584][T26373] vhci_hcd: connection closed [ 623.319706][T26357] vhci_hcd: connection closed [ 623.324511][T26366] vhci_hcd: connection closed [ 623.346682][ T41] vhci_hcd vhci_hcd.4: release socket [ 623.371511][T26376] vhci_hcd: connection closed [ 623.379338][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 623.435839][ T41] vhci_hcd vhci_hcd.4: stop threads [ 623.453621][ T41] vhci_hcd vhci_hcd.4: release socket [ 623.564729][ C1] ================================================================== [ 623.573013][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 623.580222][ C1] [ 623.582541][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 0: [ 623.590775][ C1] can_can_gw_rcv+0x863/0x870 [ 623.595457][ C1] can_rcv_filter+0xc7/0x4f0 [ 623.600058][ C1] can_receive+0x13e/0x190 [ 623.604480][ C1] can_rcv+0x17d/0x1f0 [ 623.608553][ C1] process_backlog+0x363/0x670 [ 623.613323][ C1] __napi_poll+0x61/0x330 [ 623.617661][ C1] net_rx_action+0x452/0x930 [ 623.622270][ C1] handle_softirqs+0xb9/0x2a0 [ 623.626950][ C1] do_softirq+0x45/0x60 [ 623.631124][ C1] __local_bh_enable_ip+0x70/0x80 [ 623.636154][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 623.641105][ C1] release_sock+0x116/0x150 [ 623.645602][ C1] j1939_sk_sendmsg+0xac4/0xc00 [ 623.650465][ C1] ____sys_sendmsg+0x5af/0x600 [ 623.655235][ C1] ___sys_sendmsg+0x195/0x1e0 [ 623.659916][ C1] __sys_sendmmsg+0x185/0x320 [ 623.664598][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 623.669540][ C1] x64_sys_call+0x27aa/0x3020 [ 623.674248][ C1] do_syscall_64+0x12c/0x370 [ 623.678863][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.684766][ C1] [ 623.687089][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 1: [ 623.695147][ C1] can_can_gw_rcv+0x863/0x870 [ 623.699833][ C1] can_rcv_filter+0xc7/0x4f0 [ 623.704442][ C1] can_receive+0x13e/0x190 [ 623.708860][ C1] can_rcv+0x17d/0x1f0 [ 623.712938][ C1] process_backlog+0x363/0x670 [ 623.717716][ C1] __napi_poll+0x61/0x330 [ 623.722054][ C1] net_rx_action+0x452/0x930 [ 623.726654][ C1] handle_softirqs+0xb9/0x2a0 [ 623.731330][ C1] run_ksoftirqd+0x1c/0x30 [ 623.735841][ C1] smpboot_thread_fn+0x32a/0x510 [ 623.740885][ C1] kthread+0x22a/0x280 [ 623.744961][ C1] ret_from_fork+0x150/0x360 [ 623.749659][ C1] ret_from_fork_asm+0x1a/0x30 [ 623.754446][ C1] [ 623.756773][ C1] value changed: 0x0000b19a -> 0x0000b19b [ 623.762484][ C1] [ 623.764800][ C1] Reported by Kernel Concurrency Sanitizer on: [ 623.770953][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 623.780154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 623.790210][ C1] ================================================================== [ 623.798504][ C1] ================================================================== [ 623.806581][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 623.813803][ C1] [ 623.816111][ C1] read-write to 0xffff8881003b2ce8 of 8 bytes by interrupt on cpu 0: [ 623.824176][ C1] can_rcv_filter+0xd9/0x4f0 [ 623.828775][ C1] can_receive+0x13e/0x190 [ 623.833286][ C1] can_rcv+0x17d/0x1f0 [ 623.837363][ C1] process_backlog+0x363/0x670 [ 623.842155][ C1] __napi_poll+0x61/0x330 [ 623.846497][ C1] net_rx_action+0x452/0x930 [ 623.851100][ C1] handle_softirqs+0xb9/0x2a0 [ 623.855772][ C1] do_softirq+0x45/0x60 [ 623.859928][ C1] __local_bh_enable_ip+0x70/0x80 [ 623.864951][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 623.869894][ C1] j1939_session_activate+0x1d3/0x220 [ 623.875279][ C1] j1939_sk_sendmsg+0x890/0xc00 [ 623.880137][ C1] ____sys_sendmsg+0x5af/0x600 [ 623.884902][ C1] ___sys_sendmsg+0x195/0x1e0 [ 623.889582][ C1] __sys_sendmmsg+0x185/0x320 [ 623.894261][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 623.899117][ C1] x64_sys_call+0x27aa/0x3020 [ 623.903798][ C1] do_syscall_64+0x12c/0x370 [ 623.908395][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.914300][ C1] [ 623.916612][ C1] read-write to 0xffff8881003b2ce8 of 8 bytes by interrupt on cpu 1: [ 623.924753][ C1] can_rcv_filter+0xd9/0x4f0 [ 623.929352][ C1] can_receive+0x13e/0x190 [ 623.933788][ C1] can_rcv+0x17d/0x1f0 [ 623.937871][ C1] process_backlog+0x363/0x670 [ 623.942847][ C1] __napi_poll+0x61/0x330 [ 623.947185][ C1] net_rx_action+0x452/0x930 [ 623.951793][ C1] handle_softirqs+0xb9/0x2a0 [ 623.956471][ C1] run_ksoftirqd+0x1c/0x30 [ 623.960887][ C1] smpboot_thread_fn+0x32a/0x510 [ 623.965926][ C1] kthread+0x22a/0x280 [ 623.970002][ C1] ret_from_fork+0x150/0x360 [ 623.974604][ C1] ret_from_fork_asm+0x1a/0x30 [ 623.979721][ C1] [ 623.982034][ C1] value changed: 0x000000000000ec6f -> 0x000000000000ec70 [ 623.989128][ C1] [ 623.991444][ C1] Reported by Kernel Concurrency Sanitizer on: [ 623.997670][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 624.006866][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.016923][ C1] ================================================================== [ 624.030284][ C1] ================================================================== [ 624.038368][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 624.045588][ C1] [ 624.047900][ C1] read-write to 0xffff888100b2af18 of 8 bytes by interrupt on cpu 0: [ 624.055955][ C1] can_rcv_filter+0x242/0x4f0 [ 624.060634][ C1] can_receive+0x13e/0x190 [ 624.065058][ C1] can_rcv+0x17d/0x1f0 [ 624.069142][ C1] process_backlog+0x363/0x670 [ 624.073910][ C1] __napi_poll+0x61/0x330 [ 624.078247][ C1] net_rx_action+0x452/0x930 [ 624.082846][ C1] handle_softirqs+0xb9/0x2a0 [ 624.087521][ C1] do_softirq+0x45/0x60 [ 624.091675][ C1] __local_bh_enable_ip+0x70/0x80 [ 624.096699][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 624.101634][ C1] j1939_sk_sendmsg+0x86c/0xc00 [ 624.106505][ C1] ____sys_sendmsg+0x5af/0x600 [ 624.111271][ C1] ___sys_sendmsg+0x195/0x1e0 [ 624.115949][ C1] __sys_sendmmsg+0x185/0x320 [ 624.120627][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 624.125582][ C1] x64_sys_call+0x27aa/0x3020 [ 624.130264][ C1] do_syscall_64+0x12c/0x370 [ 624.134862][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.140756][ C1] [ 624.143070][ C1] read-write to 0xffff888100b2af18 of 8 bytes by interrupt on cpu 1: [ 624.151246][ C1] can_rcv_filter+0x242/0x4f0 [ 624.155932][ C1] can_receive+0x13e/0x190 [ 624.160357][ C1] can_rcv+0x17d/0x1f0 [ 624.164432][ C1] process_backlog+0x363/0x670 [ 624.169379][ C1] __napi_poll+0x61/0x330 [ 624.173725][ C1] net_rx_action+0x452/0x930 [ 624.178498][ C1] handle_softirqs+0xb9/0x2a0 [ 624.183181][ C1] do_softirq+0x45/0x60 [ 624.187344][ C1] __local_bh_enable_ip+0x70/0x80 [ 624.192371][ C1] update_defense_level+0x59d/0x5d0 [ 624.197593][ C1] defense_work_handler+0x1f/0x80 [ 624.202635][ C1] process_scheduled_works+0x4de/0x9e0 [ 624.208108][ C1] worker_thread+0x581/0x770 [ 624.212716][ C1] kthread+0x22a/0x280 [ 624.216778][ C1] ret_from_fork+0x150/0x360 [ 624.221382][ C1] ret_from_fork_asm+0x1a/0x30 [ 624.226151][ C1] [ 624.228495][ C1] value changed: 0x0000000000012827 -> 0x0000000000012828 [ 624.235601][ C1] [ 624.237915][ C1] Reported by Kernel Concurrency Sanitizer on: [ 624.244054][ C1] CPU: 1 UID: 0 PID: 23401 Comm: kworker/1:15 Not tainted syzkaller #0 PREEMPT(full) [ 624.253604][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 624.263658][ C1] Workqueue: events_long defense_work_handler [ 624.269741][ C1] ================================================================== [ 624.505011][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 625.048700][ T41] vhci_hcd vhci_hcd.4: stop threads [ 625.143250][ T41] vhci_hcd vhci_hcd.4: release socket [ 625.263821][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 625.487722][ T41] vhci_hcd vhci_hcd.4: stop threads [ 625.559692][ T41] vhci_hcd vhci_hcd.4: release socket [ 625.583385][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 625.926491][ T28] kauditd_printk_skb: 178 callbacks suppressed [ 625.926507][ T28] audit: type=1400 audit(2000000068.256:120520): avc: denied { write } for pid=26380 comm="syz.7.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 625.990004][ T41] vhci_hcd vhci_hcd.4: stop threads [ 626.055015][ T41] vhci_hcd vhci_hcd.4: release socket [ 626.060434][ T41] vhci_hcd vhci_hcd.4: disconnect device [ 626.332987][ T28] audit: type=1400 audit(2000000068.387:120521): avc: denied { write } for pid=26380 comm="syz.7.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 626.787841][ C1] ================================================================== [ 626.795955][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 626.803167][ C1] [ 626.805570][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 0: [ 626.813634][ C1] can_can_gw_rcv+0x863/0x870 [ 626.818323][ C1] can_rcv_filter+0xc7/0x4f0 [ 626.822921][ C1] can_receive+0x13e/0x190 [ 626.827346][ C1] can_rcv+0x17d/0x1f0 [ 626.831419][ C1] process_backlog+0x363/0x670 [ 626.835363][ T28] audit: type=1400 audit(2000000068.387:120522): avc: denied { read write } for pid=24101 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 626.836198][ C1] __napi_poll+0x61/0x330 [ 626.864966][ C1] net_rx_action+0x452/0x930 [ 626.869579][ C1] handle_softirqs+0xb9/0x2a0 [ 626.874377][ C1] do_softirq+0x45/0x60 [ 626.878538][ C1] __local_bh_enable_ip+0x70/0x80 [ 626.883563][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 626.888501][ C1] release_sock+0x116/0x150 [ 626.893003][ C1] inet_stream_connect+0x57/0x70 [ 626.897953][ C1] kernel_connect+0x9f/0xf0 [ 626.902462][ C1] rds_tcp_conn_path_connect+0x50d/0x5f0 [ 626.908102][ C1] rds_connect_worker+0x12f/0x1b0 [ 626.913140][ C1] process_scheduled_works+0x4de/0x9e0 [ 626.918607][ C1] worker_thread+0x581/0x770 [ 626.923201][ C1] kthread+0x22a/0x280 [ 626.927269][ C1] ret_from_fork+0x150/0x360 [ 626.931867][ C1] ret_from_fork_asm+0x1a/0x30 [ 626.936650][ C1] [ 626.938963][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 1: [ 626.947107][ C1] can_can_gw_rcv+0x863/0x870 [ 626.951783][ C1] can_rcv_filter+0xc7/0x4f0 [ 626.956379][ C1] can_receive+0x13e/0x190 [ 626.960801][ C1] can_rcv+0x17d/0x1f0 [ 626.964874][ C1] process_backlog+0x363/0x670 [ 626.969644][ C1] __napi_poll+0x61/0x330 [ 626.973971][ C1] net_rx_action+0x452/0x930 [ 626.978570][ C1] handle_softirqs+0xb9/0x2a0 [ 626.983244][ C1] __irq_exit_rcu+0x39/0xc0 [ 626.987749][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 626.993479][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 626.999471][ C1] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 627.005110][ C1] hrtimer_start_range_ns+0xd3b/0x10f0 [ 627.010568][ C1] j1939_tp_schedule_txtimer+0x68/0xa0 [ 627.016039][ C1] j1939_sk_sendmsg+0x8b2/0xc00 [ 627.020903][ C1] ____sys_sendmsg+0x5af/0x600 [ 627.025666][ C1] ___sys_sendmsg+0x195/0x1e0 [ 627.030624][ C1] __sys_sendmmsg+0x185/0x320 [ 627.035307][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 627.040176][ C1] x64_sys_call+0x27aa/0x3020 [ 627.044859][ C1] do_syscall_64+0x12c/0x370 [ 627.049463][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.055358][ C1] [ 627.057674][ C1] value changed: 0x00053f06 -> 0x00053f07 [ 627.063379][ C1] [ 627.065714][ C1] Reported by Kernel Concurrency Sanitizer on: [ 627.072037][ C1] CPU: 1 UID: 0 PID: 26386 Comm: syz.7.5108 Not tainted syzkaller #0 PREEMPT(full) [ 627.081582][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.091632][ C1] ================================================================== [ 627.125635][ C0] ================================================================== [ 627.133785][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 627.141009][ C0] [ 627.143321][ C0] read-write to 0xffff8881003b2ce8 of 8 bytes by interrupt on cpu 1: [ 627.151381][ C0] can_rcv_filter+0xd9/0x4f0 [ 627.156328][ C0] can_receive+0x13e/0x190 [ 627.160761][ C0] can_rcv+0x17d/0x1f0 [ 627.164842][ C0] process_backlog+0x363/0x670 [ 627.169616][ C0] __napi_poll+0x61/0x330 [ 627.173952][ C0] net_rx_action+0x452/0x930 [ 627.178556][ C0] handle_softirqs+0xb9/0x2a0 [ 627.183229][ C0] do_softirq+0x45/0x60 [ 627.187382][ C0] __local_bh_enable_ip+0x70/0x80 [ 627.192403][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 627.197342][ C0] j1939_sk_sendmsg+0x420/0xc00 [ 627.202216][ C0] ____sys_sendmsg+0x5af/0x600 [ 627.206993][ C0] ___sys_sendmsg+0x195/0x1e0 [ 627.211758][ C0] __sys_sendmmsg+0x185/0x320 [ 627.216439][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 627.221294][ C0] x64_sys_call+0x27aa/0x3020 [ 627.225978][ C0] do_syscall_64+0x12c/0x370 [ 627.230578][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.236558][ C0] [ 627.238868][ C0] read-write to 0xffff8881003b2ce8 of 8 bytes by interrupt on cpu 0: [ 627.246933][ C0] can_rcv_filter+0xd9/0x4f0 [ 627.251533][ C0] can_receive+0x13e/0x190 [ 627.255965][ C0] can_rcv+0x17d/0x1f0 [ 627.260385][ C0] process_backlog+0x363/0x670 [ 627.265244][ C0] __napi_poll+0x61/0x330 [ 627.269581][ C0] net_rx_action+0x452/0x930 [ 627.274198][ C0] handle_softirqs+0xb9/0x2a0 [ 627.278878][ C0] do_softirq+0x45/0x60 [ 627.283034][ C0] __local_bh_enable_ip+0x70/0x80 [ 627.288058][ C0] __alloc_skb+0x2b6/0x690 [ 627.292570][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 627.298213][ C0] process_scheduled_works+0x4de/0x9e0 [ 627.303683][ C0] worker_thread+0x581/0x770 [ 627.308284][ C0] kthread+0x22a/0x280 [ 627.312353][ C0] ret_from_fork+0x150/0x360 [ 627.317040][ C0] ret_from_fork_asm+0x1a/0x30 [ 627.321817][ C0] [ 627.324129][ C0] value changed: 0x0000000000058b4e -> 0x0000000000058b4f [ 627.331228][ C0] [ 627.333540][ C0] Reported by Kernel Concurrency Sanitizer on: [ 627.339680][ C0] CPU: 0 UID: 0 PID: 20524 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 627.349229][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.359280][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 627.366063][ C0] ================================================================== [ 627.495681][ C0] ================================================================== [ 627.503794][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 627.511006][ C0] [ 627.513320][ C0] read-write to 0xffff888100b2af18 of 8 bytes by interrupt on cpu 1: [ 627.521377][ C0] can_rcv_filter+0x242/0x4f0 [ 627.526057][ C0] can_receive+0x13e/0x190 [ 627.530500][ C0] can_rcv+0x17d/0x1f0 [ 627.534585][ C0] process_backlog+0x363/0x670 [ 627.539362][ C0] __napi_poll+0x61/0x330 [ 627.543700][ C0] net_rx_action+0x452/0x930 [ 627.548303][ C0] handle_softirqs+0xb9/0x2a0 [ 627.552986][ C0] do_softirq+0x45/0x60 [ 627.557134][ C0] __local_bh_enable_ip+0x70/0x80 [ 627.562156][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 627.567177][ C0] j1939_session_activate+0x1d3/0x220 [ 627.572559][ C0] j1939_sk_sendmsg+0x890/0xc00 [ 627.577419][ C0] ____sys_sendmsg+0x5af/0x600 [ 627.582187][ C0] ___sys_sendmsg+0x195/0x1e0 [ 627.586866][ C0] __sys_sendmmsg+0x185/0x320 [ 627.591547][ C0] __x64_sys_sendmmsg+0x57/0x70 [ 627.596408][ C0] x64_sys_call+0x27aa/0x3020 [ 627.601100][ C0] do_syscall_64+0x12c/0x370 [ 627.605720][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.611616][ C0] [ 627.613940][ C0] read-write to 0xffff888100b2af18 of 8 bytes by interrupt on cpu 0: [ 627.622007][ C0] can_rcv_filter+0x242/0x4f0 [ 627.626720][ C0] can_receive+0x13e/0x190 [ 627.631144][ C0] can_rcv+0x17d/0x1f0 [ 627.635219][ C0] process_backlog+0x363/0x670 [ 627.639990][ C0] __napi_poll+0x61/0x330 [ 627.644335][ C0] net_rx_action+0x452/0x930 [ 627.648932][ C0] handle_softirqs+0xb9/0x2a0 [ 627.653607][ C0] do_softirq+0x45/0x60 [ 627.657759][ C0] __local_bh_enable_ip+0x70/0x80 [ 627.662781][ C0] update_defense_level+0x59d/0x5d0 [ 627.667990][ C0] defense_work_handler+0x1f/0x80 [ 627.673028][ C0] process_scheduled_works+0x4de/0x9e0 [ 627.678498][ C0] worker_thread+0x581/0x770 [ 627.683096][ C0] kthread+0x22a/0x280 [ 627.687164][ C0] ret_from_fork+0x150/0x360 [ 627.691765][ C0] ret_from_fork_asm+0x1a/0x30 [ 627.696622][ C0] [ 627.698938][ C0] value changed: 0x000000000005fb1b -> 0x000000000005fb1c [ 627.706034][ C0] [ 627.708351][ C0] Reported by Kernel Concurrency Sanitizer on: [ 627.714489][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 627.723686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.733748][ C0] Workqueue: events_long defense_work_handler [ 627.739838][ C0] ================================================================== [ 628.107426][ T28] audit: type=1400 audit(2000000068.424:120523): avc: denied { read write } for pid=14825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.760213][ T28] audit: type=1400 audit(2000000068.424:120524): avc: denied { read write open } for pid=14825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 630.016653][ C1] ================================================================== [ 630.024764][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 630.031966][ C1] [ 630.034278][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 0: [ 630.042340][ C1] can_can_gw_rcv+0x863/0x870 [ 630.047028][ C1] can_rcv_filter+0xc7/0x4f0 [ 630.051624][ C1] can_receive+0x13e/0x190 [ 630.056042][ C1] can_rcv+0x17d/0x1f0 [ 630.060116][ C1] process_backlog+0x363/0x670 [ 630.064898][ C1] __napi_poll+0x61/0x330 [ 630.069238][ C1] net_rx_action+0x452/0x930 [ 630.073837][ C1] handle_softirqs+0xb9/0x2a0 [ 630.078514][ C1] run_ksoftirqd+0x1c/0x30 [ 630.082938][ C1] smpboot_thread_fn+0x32a/0x510 [ 630.087905][ C1] kthread+0x22a/0x280 [ 630.091973][ C1] ret_from_fork+0x150/0x360 [ 630.096583][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.101358][ C1] [ 630.103670][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 1: [ 630.111730][ C1] can_can_gw_rcv+0x863/0x870 [ 630.116449][ C1] can_rcv_filter+0xc7/0x4f0 [ 630.121057][ C1] can_receive+0x13e/0x190 [ 630.125483][ C1] can_rcv+0x17d/0x1f0 [ 630.129556][ C1] process_backlog+0x363/0x670 [ 630.134433][ C1] __napi_poll+0x61/0x330 [ 630.138767][ C1] net_rx_action+0x452/0x930 [ 630.143360][ C1] handle_softirqs+0xb9/0x2a0 [ 630.148032][ C1] do_softirq+0x45/0x60 [ 630.152184][ C1] __local_bh_enable_ip+0x70/0x80 [ 630.157206][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 630.162143][ C1] lock_sock_nested+0x132/0x160 [ 630.167092][ C1] j1939_sk_sendmsg+0x4f/0xc00 [ 630.171868][ C1] ____sys_sendmsg+0x5af/0x600 [ 630.176630][ C1] ___sys_sendmsg+0x195/0x1e0 [ 630.181317][ C1] __sys_sendmmsg+0x185/0x320 [ 630.186002][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 630.190856][ C1] x64_sys_call+0x27aa/0x3020 [ 630.195542][ C1] do_syscall_64+0x12c/0x370 [ 630.200150][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.206040][ C1] [ 630.208355][ C1] value changed: 0x0009dce0 -> 0x0009dce1 [ 630.214066][ C1] [ 630.216381][ C1] Reported by Kernel Concurrency Sanitizer on: [ 630.222539][ C1] CPU: 1 UID: 0 PID: 26386 Comm: syz.7.5108 Not tainted syzkaller #0 PREEMPT(full) [ 630.231912][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.241962][ C1] ================================================================== [ 630.294375][ T28] audit: type=1400 audit(2000000068.471:120525): avc: denied { write } for pid=26380 comm="syz.7.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 630.359781][ C1] ================================================================== [ 630.367890][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 630.375113][ C1] [ 630.377428][ C1] read-write to 0xffff8881003b2ce8 of 8 bytes by interrupt on cpu 0: [ 630.385499][ C1] can_rcv_filter+0xd9/0x4f0 [ 630.390100][ C1] can_receive+0x13e/0x190 [ 630.394517][ C1] can_rcv+0x17d/0x1f0 [ 630.398591][ C1] process_backlog+0x363/0x670 [ 630.403366][ C1] __napi_poll+0x61/0x330 [ 630.407704][ C1] net_rx_action+0x452/0x930 [ 630.412319][ C1] handle_softirqs+0xb9/0x2a0 [ 630.416989][ C1] do_softirq+0x45/0x60 [ 630.421144][ C1] __local_bh_enable_ip+0x70/0x80 [ 630.426165][ C1] kernel_fpu_end+0x6c/0x80 [ 630.430681][ C1] blake2s_compress+0x67/0x1740 [ 630.435538][ C1] blake2s_final+0x6a/0xb0 [ 630.439971][ C1] hmac+0x3a1/0x400 [ 630.443782][ C1] kdf+0xa9/0x1e0 [ 630.447425][ C1] wg_noise_handshake_create_initiation+0x1b0/0x610 [ 630.454126][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 630.460203][ C1] process_scheduled_works+0x4de/0x9e0 [ 630.465668][ C1] worker_thread+0x581/0x770 [ 630.470266][ C1] kthread+0x22a/0x280 [ 630.474418][ C1] ret_from_fork+0x150/0x360 [ 630.479021][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.483793][ C1] [ 630.486104][ C1] read-write to 0xffff8881003b2ce8 of 8 bytes by interrupt on cpu 1: [ 630.494249][ C1] can_rcv_filter+0xd9/0x4f0 [ 630.498849][ C1] can_receive+0x13e/0x190 [ 630.503272][ C1] can_rcv+0x17d/0x1f0 [ 630.507347][ C1] process_backlog+0x363/0x670 [ 630.512123][ C1] __napi_poll+0x61/0x330 [ 630.516460][ C1] net_rx_action+0x452/0x930 [ 630.521239][ C1] handle_softirqs+0xb9/0x2a0 [ 630.525916][ C1] do_softirq+0x45/0x60 [ 630.530072][ C1] __local_bh_enable_ip+0x70/0x80 [ 630.535096][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 630.540037][ C1] j1939_session_activate+0x1d3/0x220 [ 630.545436][ C1] j1939_sk_sendmsg+0x890/0xc00 [ 630.550311][ C1] ____sys_sendmsg+0x5af/0x600 [ 630.555084][ C1] ___sys_sendmsg+0x195/0x1e0 [ 630.559765][ C1] __sys_sendmmsg+0x185/0x320 [ 630.564449][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 630.569313][ C1] x64_sys_call+0x27aa/0x3020 [ 630.574008][ C1] do_syscall_64+0x12c/0x370 [ 630.578612][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.584517][ C1] [ 630.586833][ C1] value changed: 0x00000000000a4278 -> 0x00000000000a4279 [ 630.593932][ C1] [ 630.596255][ C1] Reported by Kernel Concurrency Sanitizer on: [ 630.602401][ C1] CPU: 1 UID: 0 PID: 26386 Comm: syz.7.5108 Not tainted syzkaller #0 PREEMPT(full) [ 630.611871][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.621929][ C1] ================================================================== [ 630.798489][ C1] ================================================================== [ 630.806606][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 630.813827][ C1] [ 630.816143][ C1] read-write to 0xffff888100b2af18 of 8 bytes by interrupt on cpu 0: [ 630.824302][ C1] can_rcv_filter+0x242/0x4f0 [ 630.829000][ C1] can_receive+0x13e/0x190 [ 630.833430][ C1] can_rcv+0x17d/0x1f0 [ 630.837852][ C1] process_backlog+0x363/0x670 [ 630.842629][ C1] __napi_poll+0x61/0x330 [ 630.847051][ C1] net_rx_action+0x452/0x930 [ 630.851663][ C1] handle_softirqs+0xb9/0x2a0 [ 630.856334][ C1] do_softirq+0x45/0x60 [ 630.860485][ C1] __local_bh_enable_ip+0x70/0x80 [ 630.865509][ C1] kernel_fpu_end+0x6c/0x80 [ 630.870044][ C1] blake2s_compress+0x67/0x1740 [ 630.874991][ C1] blake2s_final+0x6a/0xb0 [ 630.879410][ C1] hmac+0x219/0x400 [ 630.883302][ C1] kdf+0x7d/0x1e0 [ 630.886937][ C1] wg_noise_handshake_create_initiation+0x1b0/0x610 [ 630.893532][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 630.899616][ C1] process_scheduled_works+0x4de/0x9e0 [ 630.905079][ C1] worker_thread+0x581/0x770 [ 630.909716][ C1] kthread+0x22a/0x280 [ 630.913795][ C1] ret_from_fork+0x150/0x360 [ 630.918399][ C1] ret_from_fork_asm+0x1a/0x30 [ 630.923169][ C1] [ 630.925480][ C1] read-write to 0xffff888100b2af18 of 8 bytes by interrupt on cpu 1: [ 630.929328][ T28] audit: type=1400 audit(2000000068.536:120526): avc: denied { read write open } for pid=24101 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 630.933537][ C1] can_rcv_filter+0x242/0x4f0 [ 630.963438][ C1] can_receive+0x13e/0x190 [ 630.967862][ C1] can_rcv+0x17d/0x1f0 [ 630.971941][ C1] process_backlog+0x363/0x670 [ 630.976715][ C1] __napi_poll+0x61/0x330 [ 630.981053][ C1] net_rx_action+0x452/0x930 [ 630.985656][ C1] handle_softirqs+0xb9/0x2a0 [ 630.990332][ C1] __irq_exit_rcu+0x39/0xc0 [ 630.994838][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 631.000568][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 631.006555][ C1] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 631.012188][ C1] hrtimer_start_range_ns+0xd3b/0x10f0 [ 631.017659][ C1] j1939_tp_schedule_txtimer+0x68/0xa0 [ 631.023135][ C1] j1939_sk_sendmsg+0x8b2/0xc00 [ 631.027996][ C1] ____sys_sendmsg+0x5af/0x600 [ 631.032780][ C1] ___sys_sendmsg+0x195/0x1e0 [ 631.037454][ C1] __sys_sendmmsg+0x185/0x320 [ 631.042131][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 631.046988][ C1] x64_sys_call+0x27aa/0x3020 [ 631.051681][ C1] do_syscall_64+0x12c/0x370 [ 631.056283][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.062176][ C1] [ 631.064491][ C1] value changed: 0x00000000000ac864 -> 0x00000000000ac865 [ 631.071587][ C1] [ 631.073902][ C1] Reported by Kernel Concurrency Sanitizer on: [ 631.080040][ C1] CPU: 1 UID: 0 PID: 26386 Comm: syz.7.5108 Not tainted syzkaller #0 PREEMPT(full) [ 631.089407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 631.099457][ C1] ================================================================== [ 631.966435][ T28] audit: type=1400 audit(2000000068.546:120527): avc: denied { write } for pid=26380 comm="syz.7.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 632.736324][ T28] audit: type=1400 audit(2000000068.555:120528): avc: denied { ioctl } for pid=14825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.243251][ C1] ================================================================== [ 633.251358][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 633.258561][ C1] [ 633.260876][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 0: [ 633.269054][ C1] can_can_gw_rcv+0x863/0x870 [ 633.273733][ C1] can_rcv_filter+0xc7/0x4f0 [ 633.278329][ C1] can_receive+0x13e/0x190 [ 633.282752][ C1] can_rcv+0x17d/0x1f0 [ 633.286830][ C1] process_backlog+0x363/0x670 [ 633.291694][ C1] __napi_poll+0x61/0x330 [ 633.296029][ C1] net_rx_action+0x452/0x930 [ 633.300628][ C1] handle_softirqs+0xb9/0x2a0 [ 633.305304][ C1] do_softirq+0x45/0x60 [ 633.309549][ C1] __local_bh_enable_ip+0x70/0x80 [ 633.314578][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 633.319527][ C1] release_sock+0x116/0x150 [ 633.324029][ C1] tcp_sock_set_nodelay+0x9d/0xb0 [ 633.329054][ C1] rds_tcp_tune+0x49/0x390 [ 633.333467][ C1] rds_tcp_conn_path_connect+0x1c1/0x5f0 [ 633.339099][ C1] rds_connect_worker+0x12f/0x1b0 [ 633.344139][ C1] process_scheduled_works+0x4de/0x9e0 [ 633.349609][ C1] worker_thread+0x581/0x770 [ 633.354247][ C1] kthread+0x22a/0x280 [ 633.358313][ C1] ret_from_fork+0x150/0x360 [ 633.362913][ C1] ret_from_fork_asm+0x1a/0x30 [ 633.367681][ C1] [ 633.369994][ C1] read-write to 0xffff88813ffb68c0 of 4 bytes by interrupt on cpu 1: [ 633.378049][ C1] can_can_gw_rcv+0x863/0x870 [ 633.382725][ C1] can_rcv_filter+0xc7/0x4f0 [ 633.387325][ C1] can_receive+0x13e/0x190 [ 633.391745][ C1] can_rcv+0x17d/0x1f0 [ 633.395999][ C1] process_backlog+0x363/0x670 [ 633.400784][ C1] __napi_poll+0x61/0x330 [ 633.405121][ C1] net_rx_action+0x452/0x930 [ 633.409729][ C1] handle_softirqs+0xb9/0x2a0 [ 633.414403][ C1] do_softirq+0x45/0x60 [ 633.418556][ C1] __local_bh_enable_ip+0x70/0x80 [ 633.423578][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 633.428514][ C1] j1939_session_activate+0x1d3/0x220 [ 633.433905][ C1] j1939_sk_sendmsg+0x890/0xc00 [ 633.438848][ C1] ____sys_sendmsg+0x5af/0x600 [ 633.443614][ C1] ___sys_sendmsg+0x195/0x1e0 [ 633.448304][ C1] __sys_sendmmsg+0x185/0x320 [ 633.453071][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 633.457923][ C1] x64_sys_call+0x27aa/0x3020 [ 633.462606][ C1] do_syscall_64+0x12c/0x370 [ 633.467206][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.473096][ C1] [ 633.475405][ C1] value changed: 0x000e8d13 -> 0x000e8d14 [ 633.481113][ C1] [ 633.483428][ C1] Reported by Kernel Concurrency Sanitizer on: [ 633.489569][ C1] CPU: 1 UID: 0 PID: 26386 Comm: syz.7.5108 Not tainted syzkaller #0 PREEMPT(full) [ 633.498934][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.509073][ C1] ==================================================================