last executing test programs: 16.520559211s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.231843878s ago: executing program 2 (id=7): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x0, 0xffffffff, 0x240, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @broadcast, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0xb}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x2e]}}, &(0x7f00000004c0)=""/194, 0x37, 0xc2}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r0, 0x20, &(0x7f0000000680)={&(0x7f00000005c0)=""/51, 0x33, 0x0, &(0x7f0000000600)=""/111, 0x6f}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pi6 \x00'}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x6f3, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffccc, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0x87, &(0x7f00000002c0)=""/135, 0x41000, 0x44, '\x00', r7, @fallback=0x1b, r8, 0x8, &(0x7f0000000400)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x3, 0x4f9650c6, 0x50}, 0x10, r9, r1, 0x1, &(0x7f0000000840)=[r10, r11], &(0x7f0000000880)=[{0x0, 0x3, 0x1, 0x1}], 0x10, 0x3ff}, 0x94) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x2, 0x2, 0x2a}, 0x2c) 14.997831598s ago: executing program 2 (id=25): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000700010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x400) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x5, &(0x7f0000000280)={0x1, 0x0, 0x10001, 0x2}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000801) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000140), &(0x7f0000000280)=r3}, 0x20) 14.799216219s ago: executing program 2 (id=28): socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@nojournal_checksum}, {@lazytime}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000157b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') flock(r0, 0x1) open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x1, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = dup2(r6, r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) ftruncate(r0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x11, &(0x7f0000000100)=@raw=[@generic={0xa, 0x9, 0x3, 0x4, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r7}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0xf, 0x7, 0x1, 0xfffffffffffffff8, 0x1}, @map_val={0x18, 0x1, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) connect$can_bcm(r7, &(0x7f00000002c0), 0x10) 13.671197354s ago: executing program 2 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sigaltstack(0x0, &(0x7f0000000740)={0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) read(r0, &(0x7f0000000240)=""/235, 0xeb) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 13.616420446s ago: executing program 32 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sigaltstack(0x0, &(0x7f0000000740)={0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) read(r0, &(0x7f0000000240)=""/235, 0xeb) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 8.8024313s ago: executing program 1 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="df12c9f7b9a6000000000000000196fc36dc2f8741d451f4117d2a7e856d7783dd24c267235638bc9848dc2a4802eb8368252950343416c0cc5e97c1ad38221bbee42fa6889347a1142eb02d2082edef45e3e6c986b5ac38b4da20680e38cfb2654edde484745f8540011d9bbb54745dfa48054f466adddae71c126e89108ffcd3397aeb659b430910aee5cf2cfb1b2ea381441c09a0d2edc5c3cfbc2e5a73945b148d5609de2360726517cd100704031259b829b7f8201a02fc0278a61d1dfbfa5d8840ddf3271e47444e87e3400b3f291c695dbc4ef710b0429828c87229b506bd7893194745c04adf82b656cbafa7d5c64ddf8e9beb0991b60cfff30cd024686fc44699e925d7e58f5756bde679da2a71755539a5f0f8304a7c378afdc42aecd4b881f1cd91a5f038e4a6981088d7307dbe16ba236ce0e69af08025e6188f8f0f920741aa719c6f5d848eaa760443e50bc849d6891481a26ce7cf06eb91553bdb6f27b7dac817", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2b) socket$unix(0x1, 0x2, 0x0) 8.770021602s ago: executing program 1 (id=127): r0 = socket(0xa, 0x3, 0xff) socket(0xa, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x70}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x94) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="98a7aabbbbbbbbbbbbffffffffffff86dd697a262d00383afefe880000000000000000000000000001ff02000000000000000000000000000102009078000005006208130000000000000100000000000700000000000000000001554001294af7376b6e"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) shutdown(0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unshare(0x20050980) 8.618636621s ago: executing program 1 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x4}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x70}}, 0x0) (fail_nth: 6) 8.603647972s ago: executing program 1 (id=133): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x54, 0x1, 0x3, 0x0, 0x0, 0x8, 0xc0512, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={&(0x7f0000000640), 0xb}, 0x0, 0x2e, 0x2, 0x1, 0x2, 0x0, 0x4, 0x0, 0x8, 0x0, 0x5cb}, 0x0, 0xffffffffffffffff, r0, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200001, &(0x7f0000000680)={[{@test_dummy_encryption_v1}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}]}, 0x23, 0x56a, &(0x7f00000015c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') syz_clone(0x422a400, &(0x7f0000002b40)="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", 0x1000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000004d80)="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") r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x8001, 0x2}, &(0x7f0000000200)=0x8) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={0x0}) prlimit64(r6, 0x0, &(0x7f0000000600)={0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_normal', 0x143000, 0xb2) setrlimit(0x5, &(0x7f0000000200)={0x2, 0x4}) recvmsg(r7, &(0x7f00000003c0)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/27, 0x1b}], 0x1, &(0x7f0000001b40)=""/4096, 0x1000}, 0x10100) 7.985509617s ago: executing program 1 (id=140): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10006c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 7.21699438s ago: executing program 1 (id=147): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/114, 0x29}], 0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = dup2(r0, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) close(r3) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0x80000213, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigqueueinfo(0xffffffffffffffff, 0x37, &(0x7f0000000640)={0x33, 0x8, 0x738}) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) 7.21315899s ago: executing program 33 (id=147): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/114, 0x29}], 0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = dup2(r0, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) close(r3) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0x80000213, 0x0, r3}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigqueueinfo(0xffffffffffffffff, 0x37, &(0x7f0000000640)={0x33, 0x8, 0x738}) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) 4.950902959s ago: executing program 3 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d000000000014"], 0x38}}, 0x0) 4.948277729s ago: executing program 3 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x3d, &(0x7f00000005c0)="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", 0x0, 0x3, 0x0, 0x0, 0xfe25, 0x0, 0x0, 0x8000000, 0x0, 0x80}, 0x2b) socket$unix(0x1, 0x2, 0x0) 4.945143029s ago: executing program 3 (id=186): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xd, 0xc40, 0x7fffffff, 0x0, 0x10, 0x9, 0x16, 0x6, 0xca11, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) r3 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c000180060006"], 0x24}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0x5411, 0x1000000000000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8, 0x0, 0x1a0000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.94082538s ago: executing program 3 (id=187): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0xc6d7, 0x320, 0x4, 0x187, 0x0, r4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000002080)=ANY=[@ANYRES8=r13, @ANYRES64=r12, @ANYRES16=r11, @ANYRES8=r9, @ANYRESHEX=r10, @ANYRESHEX=r11, @ANYRES16, @ANYBLOB="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", @ANYRES64=r10, @ANYRES8=r13], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000005c0)={"3135f8af74a19b3cd69677b8c1094e5f", r13, r14, {0x4}, {}, 0x0, [0x12000000000000, 0x66, 0x100000001, 0x80, 0x40, 0x1, 0x6, 0x3, 0x2, 0x41e, 0x3, 0x873, 0xfffffffffffffff9, 0x3, 0x2, 0x892f]}) 4.835770076s ago: executing program 3 (id=189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000001c40), 0x2}, 0x50) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) getgroups(0xffffffffffffff3c, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) (async) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40064}, 0x14) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 4.575894s ago: executing program 3 (id=199): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000008740)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)="9d8765f3c127d26f30c24751e6788e3bb40de9b844042556abfb9ad822f15b1af0079427c409538e261c84b46043bff825a008baac77572acc552ee7f6ecfdee55a48db781", 0x45}, {&(0x7f00000006c0)="2aee4a32f8ea72fb25cb24a03540deb1f25c8dacfa6d3da46db8b8dfe408555fa03a7919bf930c2ef6b3696bac1376ea5d567559b98659418cc97a8811bfb8115cb53737a27c4a020f2024e4fc4c945fbe79c79231a618cb80efabe0a2844ed10a64c315fe5e7397395f99e0e685608ef4f3c7bd1785e65c208f01feef0babd0af7ef6724ca7fd0a1ba67b4f8187398a836b", 0x92}, {&(0x7f00000005c0)="328a5f5714493ee42db0ca1f674558f8", 0x10}, {&(0x7f0000000780)="7a98c5cee85df9b1c245cd1caefb95b0c970c7a7d7d85b297e29180740b2fddded408ecb1b38b1413f4f372bd9c44e925fe0e33aae625069", 0x38}], 0x4, 0x0, 0x0, 0x45}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000009c0)="354d46ab41863b7f9e84ab02de827622942839ea40c8b2341991c1a7300befb3b79040814f45284acd12f5597ae028199097a184a279784305fceea7c5c87b0f9a8c07e2830e67929c6799acef7f61eb517aeea3cc67bb5f5c79542a7c86278c1c3cbb0e0644bc8630e402db434498faa8222695638ce8d952f8f8374db2b70d3940159d5f074391e1eece2b2f05425895e5e73d8c7d982a72e8fa259f480630f931059c6ac9214c8d8aa6e68524e3e93470feda9a48f2fd92b0ed1df52ae119ee7ad45a", 0xc4}, {&(0x7f0000000ac0)="cd5be52cbf8d1ec571891915429d9b987df06acb9d4eaa031342103abc60ce063cc0918e762bf6d505e5ceb243154423493945f0ae65b4edaf928585027b49fff91ebaa22078a19196447e874234cd5956df5fca48894476384a679869ad871999ada8cc76b41ac434b8dde6eb7de91d4a3b282ce6610f08ec23e425c7a0262dd987c4f51448cd832787", 0x8a}, {&(0x7f0000000c40)="38b2f65d7e9a56ee517c37e21ed90d19911699b349cf7479f6a1275dccfaedae6a93f0b6f36d887094fb247c03fd82c6cfdda5a86d5e27eeebb71e6420af2b72f3d561fc183a305bf4a98e53174df743f2c4b53ba6bdeb0a46c42c027c8e90c316315b53f3a65526d63004866e8341083f5e5df15b0547277c8e0bc89e4f09c94e8330a15241424d4e8f1db57d35e9c4c0940de424ee74e644caf9859a7b9bbd28d84c176e4bf0e58a7434ba329599d1aa5a9d1c39e17e6b472b82d50d8b3748474865adf5b46a6b914048686e9fa8056b4cd59a", 0xd4}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x70, 0x4004015}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}], 0x4, 0x0) 2.799851961s ago: executing program 5 (id=222): socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.94986484s ago: executing program 5 (id=233): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) capset(0x0, &(0x7f0000000080)) (async) capset(0x0, &(0x7f0000000080)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) (async) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mlock2(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) 1.740018611s ago: executing program 6 (id=238): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x19) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r2, 0x301, 0x70bd25, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r4, 0x2) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x30cff64326b230b5, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000180)='syzkaller\x00', 0xa, 0xff3, &(0x7f0000000480)=""/4083, 0x41000, 0x40, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x19) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) (async) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r2, 0x301, 0x70bd25, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) listen(r4, 0x2) (async) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca0ebc000000000000008000f0fffeffe809005300fff5dd00000010000163d4f99d69e216e9cc21000a0c10000000008003000000", 0x58}], 0x1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x30cff64326b230b5, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000180)='syzkaller\x00', 0xa, 0xff3, &(0x7f0000000480)=""/4083, 0x41000, 0x40, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) 1.739554852s ago: executing program 5 (id=239): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) getrlimit(0x4, &(0x7f0000000240)) syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x480003) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004180)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x240048c5}, 0x200408d5) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept$unix(r1, 0x0, &(0x7f0000000280)) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.719433173s ago: executing program 0 (id=240): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/zoneinfo\x00', 0x0, 0x0) sync_file_range(r1, 0xc, 0x4, 0x0) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) (async) recvmmsg(r0, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x40000022, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000100)="b1586652c201290268d39964dc9cc2d1f05ff680ad9eb7bd9fb09f9e21ae9eedbe4a6b894baf2f0294217a10bf15d87d46d256dbfb7da88b4dc864fe1b667e9cfbc3623d69532504b15f1a6157cbaea3755d1ab6af1af3e8e2e84888d47450f9b0e67f1d4888ec0edf49f4c7ab7865e37a743973547cdf1b740794c947ecb8970de451a8521ae13124d19730d9ed03b363675119020e5a8cbac21af3c46eeead90e817f451917262448a961909bf5304294404eebcbdd9a68c4ae13cca25666a2e5ee4ea", 0xc4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180240000f0000000000000000000000850000002e000000850000007d0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x28, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) 1.631985248s ago: executing program 5 (id=242): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1, 0x2a4, &(0x7f0000000a40)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000d0000000040000000f00000005000004000001000e000000050000000800000005000000020000000300000008000000000000000400000003000000020000008f0000000000000300000000030000000100000003000000000000000300000d000000000d0000000400000000000000050000000e000000040000000a000000030000850c0800000700000004000000070000000900000003000000ff0000000000000005000000000000000800000000000008020000000a11000001000000006d002a08005f3000"], &(0x7f0000000780)=""/205, 0xec, 0xcd, 0x1, 0x5, 0x10000}, 0x28) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@errors_remount}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) preadv2(r1, &(0x7f0000000300)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000090000000000000000800055e1397500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000240), 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r6, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000a0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000a00)="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", 0x871}], 0x1}}], 0x1, 0xc4) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000400)=0xb3, 0x4) 1.630367198s ago: executing program 0 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000100)="ba0455111f1b8072fd972350948b31257965f589201c", 0x16, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000108000b40000001005c000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d0500020007000000240001800a000100726564697200000014000280080001400000001108000240000000110900010073797a3000000000140000001100010000000000000000000700000a"], 0xf8}}, 0x0) 1.496414425s ago: executing program 6 (id=245): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x9840c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1700, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x0, 0x0, 0x200000}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000040)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1d}}], 0x30, 0x4000000}, 0x0) 1.428528079s ago: executing program 0 (id=246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x200000000000000) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000140)={0xf1, "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"}) 1.145167895s ago: executing program 5 (id=247): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket(0x9, 0xa, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/126, 0x7e}, {&(0x7f0000000440)=""/79, 0x4f}], 0x6, &(0x7f0000000540)=""/147, 0x93}, 0xfffffffa}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/27, 0x1b}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000800)=""/26, 0x1a}, {&(0x7f0000000840)=""/170, 0xaa}], 0x5, &(0x7f0000000980)=""/96, 0x60}, 0x3573}, {{0xfffffffffffffffc, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/204, 0xcc}, {&(0x7f0000000cc0)=""/152, 0x98}], 0x5, &(0x7f0000000e00)=""/203, 0xcb}, 0xe70}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/41, 0x29}, {&(0x7f0000000f40)=""/249, 0xf9}], 0x2, &(0x7f0000001080)=""/238, 0xee}, 0xae}], 0x4, 0x2000, &(0x7f0000001280)={0x0, 0x989680}) (async) recvmmsg(r0, &(0x7f0000001180)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000200)=""/182, 0xb6}, {&(0x7f00000002c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/126, 0x7e}, {&(0x7f0000000440)=""/79, 0x4f}], 0x6, &(0x7f0000000540)=""/147, 0x93}, 0xfffffffa}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/27, 0x1b}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000800)=""/26, 0x1a}, {&(0x7f0000000840)=""/170, 0xaa}], 0x5, &(0x7f0000000980)=""/96, 0x60}, 0x3573}, {{0xfffffffffffffffc, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/226, 0xe2}, {&(0x7f0000000bc0)=""/204, 0xcc}, {&(0x7f0000000cc0)=""/152, 0x98}], 0x5, &(0x7f0000000e00)=""/203, 0xcb}, 0xe70}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)=""/41, 0x29}, {&(0x7f0000000f40)=""/249, 0xf9}], 0x2, &(0x7f0000001080)=""/238, 0xee}, 0xae}], 0x4, 0x2000, &(0x7f0000001280)={0x0, 0x989680}) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000012c0)=0x1, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000012c0)=0x1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x101, &(0x7f0000001300)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x100, &(0x7f0000001340)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x100, &(0x7f0000001340)) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001380)=0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0xc90e, &(0x7f00000013c0)) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$cgroup_subtree(r3, &(0x7f0000001400)={[{0x2b, 'net_prio'}, {0x2d, 'net'}, {0x2d, 'net'}, {0x2b, 'devices'}]}, 0x1d) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001580)={0x0, 0x6c7}, &(0x7f00000015c0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000018c0)=[{&(0x7f0000001440)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001480)="6d2bc051cbb5ec612538a8f0ca4bb70671d61c29e46e758879ed925c32333c16e3b079c6c4de6b735d2807fb3ae2011cfef9bb2ed2c6a36d91b30980023330a560640b3d1d6e3b415560a4b3681fe987afa0b78ef7f461e339b440bd008ec3328de67d2449202228d488668c183a7b372812e628f2c5b27409322027d734b09b4754dfa94bbefec8b889e98cc23997667ea989", 0x93}], 0x1, &(0x7f0000001600)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x1, 0x100, 0x0, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x69, 0x401, 0x6, 0xff}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @init={0x18, 0x84, 0x0, {0x6, 0x1, 0x8, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}], 0xa0, 0xc}, {&(0x7f00000016c0)=@in6={0xa, 0x4e23, 0x2, @empty, 0x10000}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001700)="66b4f9ba609d02f51ea04463745e3ce276c0903e487f4a822706d3a2d5a014cb4ccd96dbdafe224f2ec2da6acab12ba99044313b7738f145d04b3c78e858e9735a7a99c735034d313dce360db3fe92ef8cf937930431981654e8fa0ab698385182879b525ca3ae37c25b7730a0483085188d24a914cd32c72c250bc30f891917933145226086c579c0172ae0bd44f3d60b736925fe5cd585dfb0b31ec5dbec200182e491d54f7df2f03aae1e3f1b92348ecda0d00f8198b254595eb0720f51d530ca2aabc7c13cff3b", 0xc9}, {&(0x7f0000001800)="5baed584f195e719650ab82652725bbbd1af3a673a442b81a0acb999f234cee3292adcc42f3f51d5fe04d3bfd8d3f56f8bb3026c8301fb4735dfe371cb1a59c50489552aeca7e6efaf5156864afc78b3edbda97a25891411878b16cf0053482f8a4cf90ff012bf4c6f4729e2a1fa78c7cbefe9d39a5a90e942e80e", 0x7b}], 0x2, 0x0, 0x0, 0x884}], 0x2, 0x20000000) move_mount(0xffffffffffffffff, &(0x7f0000001940)='./file0\x00', r3, &(0x7f0000001980)='./file0\x00', 0x40) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r5, {0x40}}, './file0\x00'}) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000001a00)={@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010101, 0x1, "9c3cf9ade6f8a57bc0510638378d2b212becb38d67a92e1043293d2c77915c0c", 0x92be, 0x80000001, 0x10000, 0x7}, 0x3c) gettid() (async) r7 = gettid() syz_open_procfs(r7, &(0x7f0000001a40)='fd/3\x00') (async) syz_open_procfs(r7, &(0x7f0000001a40)='fd/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000001a80)) connect$vsock_stream(r3, &(0x7f0000001ac0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001b00)={'xfrm0\x00', 0x4000}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001b00)={'xfrm0\x00', 0x4000}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001b40)={r4, 0xaa, "4f11945b69546057dc148b3629a7ceff162bab30c8470f72e10dd3673c652100bdf39d597a0524b7f984525a18c9853e8c149810686095ca1a0b367c504a94649c9e38196abc244522083e35929c02c58fbc98d46e5bf50ba21faa10d518eb4c9b80585299b6b216f53dc3a5a8dc2bfecb209094e32b1238db5566b8146c99f5167dbd09e4fa1a056955584737b0c31680c0c142894b9db33d0b1d2465c928863f68cb85749916adddde"}, &(0x7f0000001c00)=0xb2) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001b40)={r4, 0xaa, "4f11945b69546057dc148b3629a7ceff162bab30c8470f72e10dd3673c652100bdf39d597a0524b7f984525a18c9853e8c149810686095ca1a0b367c504a94649c9e38196abc244522083e35929c02c58fbc98d46e5bf50ba21faa10d518eb4c9b80585299b6b216f53dc3a5a8dc2bfecb209094e32b1238db5566b8146c99f5167dbd09e4fa1a056955584737b0c31680c0c142894b9db33d0b1d2465c928863f68cb85749916adddde"}, &(0x7f0000001c00)=0xb2) read$nci(r6, &(0x7f0000001c40)=""/49, 0x31) syz_pidfd_open(r7, 0x0) (async) syz_pidfd_open(r7, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000001c80)={'filter\x00', 0x0, [0x2, 0x3, 0xdcb]}, &(0x7f0000001d00)=0x44) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001d40)='hybla', 0x5) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001d40)='hybla', 0x5) 1.102449948s ago: executing program 6 (id=248): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000008740)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000540)="9d8765f3c127d26f30c24751e6788e3bb40de9b844042556abfb9ad822f15b1af0079427c409538e261c84b46043bff825a008baac77572acc552ee7f6ecfdee55a48db781", 0x45}, {&(0x7f00000006c0)="2aee4a32f8ea72fb25cb24a03540deb1f25c8dacfa6d3da46db8b8dfe408555fa03a7919bf930c2ef6b3696bac1376ea5d567559b98659418cc97a8811bfb8115cb53737a27c4a020f2024e4fc4c945fbe79c79231a618cb80efabe0a2844ed10a64c315fe5e7397395f99e0e685608ef4f3c7bd1785e65c208f01feef0babd0af7ef6724ca7fd0a1ba67b4f8187398a836b", 0x92}, {&(0x7f00000005c0)="328a5f5714493ee42db0ca1f674558f8", 0x10}, {&(0x7f0000000780)="7a98c5cee85df9b1c245cd1caefb95b0c970c7a7d7d85b297e29180740b2fddded408ecb1b38b1413f4f372bd9c44e925fe0e33aae625069", 0x38}], 0x4, 0x0, 0x0, 0x45}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000009c0)="354d46ab41863b7f9e84ab02de827622942839ea40c8b2341991c1a7300befb3b79040814f45284acd12f5597ae028199097a184a279784305fceea7c5c87b0f9a8c07e2830e67929c6799acef7f61eb517aeea3cc67bb5f5c79542a7c86278c1c3cbb0e0644bc8630e402db434498faa8222695638ce8d952f8f8374db2b70d3940159d5f074391e1eece2b2f05425895e5e73d8c7d982a72e8fa259f480630f931059c6ac9214c8d8aa6e68524e3e93470feda9a48f2fd92b0ed1df52ae119ee7ad45a", 0xc4}, {&(0x7f0000000ac0)="cd5be52cbf8d1ec571891915429d9b987df06acb9d4eaa031342103abc60ce063cc0918e762bf6d505e5ceb243154423493945f0ae65b4edaf928585027b49fff91ebaa22078a19196447e874234cd5956df5fca48894476384a679869ad871999ada8cc76b41ac434b8dde6eb7de91d4a3b282ce6610f08ec23e425c7a0262dd987c4f51448cd832787", 0x8a}, {&(0x7f0000000c40)="38b2f65d7e9a56ee517c37e21ed90d19911699b349cf7479f6a1275dccfaedae6a93f0b6f36d887094fb247c03fd82c6cfdda5a86d5e27eeebb71e6420af2b72f3d561fc183a305bf4a98e53174df743f2c4b53ba6bdeb0a46c42c027c8e90c316315b53f3a65526d63004866e8341083f5e5df15b0547277c8e0bc89e4f09c94e8330a15241424d4e8f1db57d35e9c4c0940de424ee74e644caf9859a7b9bbd28d84c176e4bf0e58a7434ba329599d1aa5a9d1c39e17e6b472b82d50d8b3748474865adf5b46a6b914048686e9fa8056b4cd59a", 0xd4}], 0x3, &(0x7f0000000dc0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x70, 0x4004015}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="057a8422547ae33ff1718a16c59d6e0a3ca119a56da320fc0dc359ddb6ea6dea5b5dbd3ed62da742e17c74d8478e4abbb26e76a4865a2a5d051be1c0a26454c31873c5419892e9260d9c3754cbcb58b8fb97b9670633cff0738f5b2f1614393a14953708d609a1c0b4286e26a5441c8e65300be88b541908b016b9860686a65c5fc38bc0ca465578", 0x88}, {&(0x7f0000001600)="b32866cb5bcf3cefdb8c46011f31f015db3dd7692db81863617652ad03f311f663a7789d5a622701d8dd28a52d9a29455691b8959aa9ab71e9d1d99bb7c5987c3fe9744f44f3d5a250756017e490acc2bd24bc32c0c468228a494a55f5bdef06e5a94595eec0114b86bbdc2e6bb1c0b634abd9ec0c0c89d237998dc9100ec4bf77cb9d82726aa565279c1fa40fbe62d014f5652042452bb1fbbc40cb392cbc3f5d50613f79bc1b410eab5e49c99b508ab1d8", 0xb2}, {&(0x7f0000000b80)="4175c9803f63ec4c1febde", 0xb}, {0x0}], 0x4, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}}], 0x4, 0x0) 994.271213ms ago: executing program 6 (id=249): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000100001000000000000c49cff00000000", @ANYRES32=0x0, @ANYBLOB="000100000000000024001280090001007866726d000000001400028008000200ea0000000800010004000000140003007866726d3000"/64], 0x58}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x278, 0x6c, 0x0, 0x168, 0x0, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'xfrm0\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x1ff, 0x6, 0xffffe758, 'pptp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3a8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080), 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) sendfile(r1, r2, 0x0, 0x20000023896) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000100001000000000000c49cff00000000", @ANYRES32=0x0, @ANYBLOB="000100000000000024001280090001007866726d000000001400028008000200ea0000000800010004000000140003007866726d3000"/64], 0x58}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x278, 0x6c, 0x0, 0x168, 0x0, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [0x0, 0xffffffff], [0x0, 0x0, 0xffffff00], 'xfrm0\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x1ff, 0x6, 0xffffe758, 'pptp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3a8) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3fffffffc, 0x4}, 0x11111a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080), 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2100, 0x0) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) (async) sendfile(r1, r2, 0x0, 0x20000023896) (async) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 871.934461ms ago: executing program 0 (id=250): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000091042b000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x0, 0x3, 0xff, 0x3ff, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0xa6, 0x1, 0x85b7bca, 0xa}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x9, 0x0, 0x8, 0x20840, r2, 0x4, '\x00', r3, r4, 0x5, 0x2}, 0x50) r6 = dup3(r1, r0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000003f00)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003ec0)={0x0}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) timer_settime(r8, 0x0, &(0x7f0000000040)={{r11, r12+60000000}, {r9, r10+60000000}}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) chmod(0x0, 0x355) statx(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4000, 0x7ff, &(0x7f0000000500)) 842.602093ms ago: executing program 0 (id=251): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x9) (async) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_mr_vif\x00') lseek(r2, 0x7ff, 0x0) (async) lseek(r2, 0x7ff, 0x0) getdents64(r2, &(0x7f00000001c0)=""/162, 0xa2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000001bc0), &(0x7f0000001c00)=0x8) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000080)="87f83d6a26c2f976bda38866d2", 0xd}], 0x1, 0x2) (async) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000080)="87f83d6a26c2f976bda38866d2", 0xd}], 0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000000a00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x620, &(0x7f0000000a00)="$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") 692.008441ms ago: executing program 6 (id=252): r0 = socket$inet(0x2, 0x3, 0xd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setreuid(0x0, 0xee01) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0119040a00000000000001030500e5d6dc0800000000000000b8f7f542808b79de9cbc7cd3940aed69fb02cd66c25d52ba6efbc18a1dd3e4e913c81c4e596ae2cedf2d3194f09c2cceab745ca5522a7df1e8853841d069f3e1664acde4e1b5876b4488019e7cb70c2a1d7643ec0e7b2b2741e638f08756c38b2b80988b9a547e805a4ba8164cf2fd8e9007469bc22cb88e354541bbf5c8abb4db67626328c2"], 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0xf, 0xbffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 552.045329ms ago: executing program 6 (id=253): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "ebe250a8486be34705f4f827ae60ecb65e00", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) r2 = getuid() r3 = getuid() setresuid(0x0, r2, r3) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x2, 0xc, 0x1fc, &(0x7f0000000540)}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$nci(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="500403"], 0x7) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000300)="1163469003d4166957cc7c2fe84c5849a3a94fd56840876c9b109421381fedea5fa252d62e9c7418336a7997447107c343f1df409a1e130986ed409cc71d38459ca274094820cce499", 0x49}], 0x1) close_range(r0, r1, 0x0) 551.404789ms ago: executing program 4 (id=254): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000453000/0x4000)=nil, 0x4000, 0xb, 0x30, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2b) r1 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/44, 0x2c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r3}, 0x3, 0xf12, 0xc6}) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) 538.62226ms ago: executing program 0 (id=255): socket$packet(0x11, 0x2, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x50, r3, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) 313.669122ms ago: executing program 4 (id=256): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240488c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xfffffffffffffe36, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) sendto$inet6(r4, &(0x7f0000000400)="b47faf5e6502364ba98d64d46620b6721141409ce11841e267963ab8412332ab501d1ce94fe5186bda49a850f753afdef922cd9c6ed5af54e23df05d172481499ff151ab385433234eefbee8100c81bf6486f8e8fd1768b8363b8682d16fc95c4a9dfbb50c1939bb7a1c038025e0d814e1ac16612f9d6e8235b017daa5aa06eb6da8e029fe31acc427950d66483697a4117e41c43dfa420b0732beeb", 0x9c, 0x24000080, &(0x7f00000001c0)={0xa, 0x4e21, 0x10, @private2, 0x6}, 0x1c) (async, rerun: 64) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a01030000000000000000010000001400048008000240000000000800014000000005090003f573797a30000000000900010073797a310000000008000b"], 0x92fc}}, 0x0) 184.17218ms ago: executing program 4 (id=257): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86a166ffcb3159162f8503efdbce4b3bc8ebebaaea2c3b657ae0b59b4ab6d26401b11dd8e9ffcb841b0402ac2d709ca854980ea4a1952ea60f0f82d88b3d08f4d61ae17dda042c64e21a7a15b8ab53ff26b9bcd8dc46989f5bf9199627e91fee5a3ff053c2b9097a8efba49bf3db56eaba1017c7517a35fa36a4e258378e2b68f82a394a20c928c6cf2512d72b427f28199aebe7532793431e8429d84d94c9b16843eec23e30b900f76a7d0a6a03fcc63ff7378298fe4f624610579993d34a20f05716351189dcd4688c5b005724ce90c41f6792962e1c4424b8da7478b0ca31e9dd35411a29169cc1ea2008ae8a61634a70aa875bd39831207c5b664cf65ba0f283281ff78d7702660c067ef1c2a7ab5181ace071a5768619bd6e24a43b0778b33f1d06b763336d85e31bfa83d679fea9abefd146695b9586abf829b44cb4094c82e23d81a7d9962180899cc0a7b2ee7df234bc5f7cbf53d2b1819075e5143e6744d14e0080000000000000c593bed0f799886824ff41f099b681", 0x191}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd00100000000040007d007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r2}, 0x94) 183.23498ms ago: executing program 4 (id=258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000002c0)="0000ffff", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd75, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) read$usbmon(r3, &(0x7f0000001300)=""/4096, 0x1000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x9, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r4, 0x7000000) (async) r5 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) (async) r7 = syz_open_procfs(r5, &(0x7f0000000100)='map_files\x00') fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000140)=""/46, 0x2e) (async) getdents64(r8, 0xfffffffffffffffe, 0x29) (async) r9 = dup(r4) move_pages(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f00003ae000/0x3000)=nil], 0x0, 0x0, 0xa) (async) preadv2(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 179.53191ms ago: executing program 4 (id=259): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x1, 0x0, 0x20004006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0x3c, 0x29, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x5}, {0x9, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6a, 0x6}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c830) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@deltclass={0x3c, 0x29, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x5}, {0x9, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6a, 0x6}}, @tclass_kind_options=@c_fq_codel={0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c830) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x94202, 0x2) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x94202, 0x2) r6 = inotify_init1(0x800) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(r6, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080)={0x40000008}) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000080)={0x40000008}) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) sendfile(r10, r8, &(0x7f0000000240)=0x101, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r9, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x72, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="814d0000000000003800128008000100687372002c00028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="196e76ef1122ecd169218310b5da31c6070715eeb2505ad86daec68e38fb9b7bfefefd418a1dd54a85620392bc5806bc96d35ae2070016e1a8a19849661b30e7d4ae2cefa75ab584c8b92beed101a07bb6cd52"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8002) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="814d0000000000003800128008000100687372002c00028008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="196e76ef1122ecd169218310b5da31c6070715eeb2505ad86daec68e38fb9b7bfefefd418a1dd54a85620392bc5806bc96d35ae2070016e1a8a19849661b30e7d4ae2cefa75ab584c8b92beed101a07bb6cd52"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8002) 83.284096ms ago: executing program 5 (id=260): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) close(r0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) ioprio_set$pid(0x3, 0x0, 0x0) (rerun: 64) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1709080009003f000000050007000000000008000a000400"/38], 0x2c}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000001000000fe80000000000000000000000000001b000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000500000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0xc0000) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000007c0)) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000005000048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000140002800800024000003304ef118c5417358456c59edd09006f000e0800034000000004100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000"], 0xa4}}, 0x48084) (async) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000780)={[{@norecovery}]}, 0x0, 0x62c, &(0x7f00000000c0)="$eJzs3c9rXNUeAPDvnfxO3ntJw+O917fQgGgL2qRJWyki2CK4qqX+WAhuHJu01E5/0EQ0tdIU6kYQNy4EVy6sC/8HLQiu/AdcuHEllSLSjVJ05E7ujNNk7mQSMzNt5vOByZwz586cc5t8e86cOedOAD1rKv1RiNgdEReTiMm6sv7ICqdWj7vzy5WT6S2Jcvmln5O4cjVZqX+tJLsfi4i04PfxSL6JiMm+9fUuLl8+WyyVFi5l+ZmlcxdnFpcv7ztzrnh64fTC+bkn5w4fOnjo8Oz+umedem6z57erLn3s+htvjb9//NXPPrmbzH7+/fEkjtQanZ7XZl97I1MxFeVM/ePpv+vh7a6sS/pqfyd/SdY+sNazbWwQm1L9/Q1ExH9jPPrqfpvj8d4LXW0c0FblJGp9FNBrEvEPPao6Dqi+t2/tffBgm0clQCfcPhrxWC3+ByKiGv/9q3ODMVyZGxi9k9wzz5NExP5tqD+t49uvj19Pb9GmeTigsZVrQ9kU+Nr+P6nE5kQMV3Kjdwr3xH8hm8adyOYPX2xezXhewdSafFb/0FbPB2jdyrWI+F+j8f++ys9m8f9adp8+/voW68+JfwAAAAAAAGALbh6NiCcaff5XqK3/GWyw/mcsIo5sQ/0bf/5XuLUN1QAN3D4a8XTD9b+F6iETfVnun5X1AAPJqTOlhf0R8a+I2BsDQ2l+tv5Fv6h7dkTs+2Dy47z669f/pbe0/upawKwdt/rXrAaaLy4Vt+HUoefdvhbx//5G8Z/U+v+kQf+fxvfFFuuYfPTGibyyjeMfaJfypxF7Gvb/Se2YpPn1OWYq44GZ6qhgvYfe+fDLvPrFP3RP2v+PNo//oaT+ej2Lm3v9wYg4sNxfzivfKP7ToX+j8f9g8nJf1O1EfLu4tHRpNmIwObb+8bnNtRkeJMOtH/puRFTioRovafzvfaT5/F9t/F8XhyPZNb5a8Z8/xn7IK9P/Q/ek8T/fvP+fuLf/33xi7sbEV3n1n2hp/u9gpU/fmz1i/g+aazVAu91OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgQFSLiH5EUpmvpQmF6OmIsIv4do4XShcWlx09dePP8fFpW+f7/QvWbfsdX80n1+/8n6vJza/IHImJXRHzUN1LJT5+8UJrv9skDAAAAAAAAAAAAAAAAAADAfWJs9W7d/v/Uj33Nn/t8+5sHtFt/dr9BvAM7UH+3GwB0jfiH3iX+oXflx/+vd8sVHW0O0EGt9v/lq21uCNBxWxz/+7gAdgDv/6FXDbR22HC72wF0g/4fAAAAAAB2lF0P3/wuiYiVp0Yqt9RgVlb7YHCkW60D2qmQVzDU2XYAnWcNL/QuS3+gd7W4+BfYwZJa6reGm/3zV/8n7WkQAAAAAAAAAAAAALDOnt0t7P8HdqTc/f/Ajtdk/3+jjT0uFwA7iP3/0Ltc5guoDvbzvunf/n8AAAAAAAAAAAAAuA8MXz5bLJUWLi0ut5y4upmD/37ip8greqaTzdiuxErxvmjGg5AYiIg1ReXx1T/bs8XSK9HZ9lQjphN1DXawrpxEl/4/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1vkzAAD//y6EJ6E=") (async, rerun: 32) close(r4) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) 0s ago: executing program 4 (id=261): bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xce9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48801) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) ftruncate(0xffffffffffffffff, 0x5) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) close(0xffffffffffffffff) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfc2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket(0x23, 0x80805, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xf45}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000000c0)={r5, 0xffff}, &(0x7f0000000100)=0x8) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) (async) close(0x3) (async) creat(&(0x7f0000000180)='./file0\x00', 0x80) (async) connect$phonet_pipe(r4, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) kernel console output (not intermixed with test programs): [ 19.188634][ T29] audit: type=1400 audit(1769724250.406:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.210583][ T29] audit: type=1400 audit(1769724250.406:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.233325][ T29] audit: type=1400 audit(1769724250.406:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.256243][ T29] audit: type=1400 audit(1769724250.406:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.279255][ T29] audit: type=1400 audit(1769724250.406:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 25.387542][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 25.387556][ T29] audit: type=1400 audit(1769724256.606:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.416648][ T29] audit: type=1400 audit(1769724256.636:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.417429][ T3299] cgroup: Unknown subsys name 'net' [ 25.444385][ T29] audit: type=1400 audit(1769724256.666:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.542516][ T3299] cgroup: Unknown subsys name 'cpuset' [ 25.548669][ T3299] cgroup: Unknown subsys name 'rlimit' [ 25.658450][ T29] audit: type=1400 audit(1769724256.876:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.687377][ T29] audit: type=1400 audit(1769724256.876:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.708033][ T29] audit: type=1400 audit(1769724256.876:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.728760][ T29] audit: type=1400 audit(1769724256.876:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.749340][ T29] audit: type=1400 audit(1769724256.876:77): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.770469][ T29] audit: type=1400 audit(1769724256.876:78): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.796554][ T29] audit: type=1400 audit(1769724256.876:79): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.802609][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.878722][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.711863][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.739243][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.806792][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.830490][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.837596][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.845027][ T3317] bridge_slave_0: entered allmulticast mode [ 27.851387][ T3317] bridge_slave_0: entered promiscuous mode [ 27.865426][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.879089][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 27.887804][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.894869][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.902145][ T3317] bridge_slave_1: entered allmulticast mode [ 27.908446][ T3317] bridge_slave_1: entered promiscuous mode [ 27.925960][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.933044][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.940146][ T3309] bridge_slave_0: entered allmulticast mode [ 27.946603][ T3309] bridge_slave_0: entered promiscuous mode [ 27.953601][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.960789][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.968218][ T3309] bridge_slave_1: entered allmulticast mode [ 27.974998][ T3309] bridge_slave_1: entered promiscuous mode [ 28.016280][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.044741][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.054882][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.076998][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.088570][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.095667][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.102880][ T3310] bridge_slave_0: entered allmulticast mode [ 28.109219][ T3310] bridge_slave_0: entered promiscuous mode [ 28.122598][ T3317] team0: Port device team_slave_0 added [ 28.136637][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.143816][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.151174][ T3310] bridge_slave_1: entered allmulticast mode [ 28.157481][ T3310] bridge_slave_1: entered promiscuous mode [ 28.172947][ T3317] team0: Port device team_slave_1 added [ 28.188353][ T3309] team0: Port device team_slave_0 added [ 28.209046][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.218762][ T3309] team0: Port device team_slave_1 added [ 28.225330][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.234428][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.241629][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.248822][ T3318] bridge_slave_0: entered allmulticast mode [ 28.255422][ T3318] bridge_slave_0: entered promiscuous mode [ 28.262756][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.269914][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.277087][ T3313] bridge_slave_0: entered allmulticast mode [ 28.283577][ T3313] bridge_slave_0: entered promiscuous mode [ 28.303189][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.310280][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.317589][ T3318] bridge_slave_1: entered allmulticast mode [ 28.324129][ T3318] bridge_slave_1: entered promiscuous mode [ 28.330552][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.337699][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.344836][ T3313] bridge_slave_1: entered allmulticast mode [ 28.351165][ T3313] bridge_slave_1: entered promiscuous mode [ 28.357728][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.364670][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.390681][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.406347][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.413339][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.439384][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.464785][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.471798][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.497752][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.508806][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.515800][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.541755][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.553327][ T3310] team0: Port device team_slave_0 added [ 28.576493][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.586236][ T3310] team0: Port device team_slave_1 added [ 28.593498][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.611287][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.626211][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.642525][ T3317] hsr_slave_0: entered promiscuous mode [ 28.648474][ T3317] hsr_slave_1: entered promiscuous mode [ 28.672376][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.679493][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.707331][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.718821][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.725863][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.751852][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.763291][ T3313] team0: Port device team_slave_0 added [ 28.774100][ T3318] team0: Port device team_slave_0 added [ 28.782013][ T3309] hsr_slave_0: entered promiscuous mode [ 28.788046][ T3309] hsr_slave_1: entered promiscuous mode [ 28.793967][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.799683][ T3309] Cannot create hsr debugfs directory [ 28.815535][ T3313] team0: Port device team_slave_1 added [ 28.822322][ T3318] team0: Port device team_slave_1 added [ 28.850588][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.857589][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.883607][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.907056][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.914172][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.940722][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.951952][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.958900][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.984875][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.995980][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.002958][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.029008][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.042166][ T3310] hsr_slave_0: entered promiscuous mode [ 29.048444][ T3310] hsr_slave_1: entered promiscuous mode [ 29.054372][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 29.060082][ T3310] Cannot create hsr debugfs directory [ 29.128317][ T3313] hsr_slave_0: entered promiscuous mode [ 29.134462][ T3313] hsr_slave_1: entered promiscuous mode [ 29.140318][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 29.146095][ T3313] Cannot create hsr debugfs directory [ 29.180981][ T3318] hsr_slave_0: entered promiscuous mode [ 29.186999][ T3318] hsr_slave_1: entered promiscuous mode [ 29.192962][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 29.198676][ T3318] Cannot create hsr debugfs directory [ 29.317250][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.328884][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.340718][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.349834][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.389464][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.398280][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.409615][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.419063][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.446650][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.456054][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.465046][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.478368][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.515583][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.525567][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.534798][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.545176][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.572434][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.582706][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.595165][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.604079][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.628521][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.645022][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.662308][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.681474][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.688580][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.698011][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.705199][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.723934][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.743801][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.750942][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.760478][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.767712][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.808111][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.824328][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.845945][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.853827][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.875555][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.882737][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.893033][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.900135][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.913413][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.920738][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.947036][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.957299][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.964416][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.975163][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.991471][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.002150][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.028421][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.045322][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.074140][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.084693][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.108371][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.115661][ T3339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.125354][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.132742][ T3339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.182213][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.192996][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.247504][ T3310] veth0_vlan: entered promiscuous mode [ 30.263833][ T3310] veth1_vlan: entered promiscuous mode [ 30.282651][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.297653][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.326354][ T3317] veth0_vlan: entered promiscuous mode [ 30.347912][ T3309] veth0_vlan: entered promiscuous mode [ 30.355543][ T3310] veth0_macvtap: entered promiscuous mode [ 30.373017][ T3309] veth1_vlan: entered promiscuous mode [ 30.392656][ T3310] veth1_macvtap: entered promiscuous mode [ 30.402853][ T3317] veth1_vlan: entered promiscuous mode [ 30.438602][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.449331][ T3313] veth0_vlan: entered promiscuous mode [ 30.460391][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.469995][ T3309] veth0_macvtap: entered promiscuous mode [ 30.485941][ T3313] veth1_vlan: entered promiscuous mode [ 30.498365][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.508502][ T3309] veth1_macvtap: entered promiscuous mode [ 30.518309][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.541996][ T3317] veth0_macvtap: entered promiscuous mode [ 30.548564][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.557827][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.572226][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.582561][ T3318] veth0_vlan: entered promiscuous mode [ 30.591888][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.601371][ T3313] veth0_macvtap: entered promiscuous mode [ 30.609580][ T3313] veth1_macvtap: entered promiscuous mode [ 30.617100][ T3317] veth1_macvtap: entered promiscuous mode [ 30.626861][ T381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.641461][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 30.641476][ T29] audit: type=1400 audit(1769724261.866:90): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.xAKimg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.642826][ T3318] veth1_vlan: entered promiscuous mode [ 30.678646][ T381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.687938][ T29] audit: type=1400 audit(1769724261.866:91): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.691379][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.713242][ T29] audit: type=1400 audit(1769724261.896:92): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.xAKimg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.713273][ T29] audit: type=1400 audit(1769724261.896:93): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.713297][ T29] audit: type=1400 audit(1769724261.896:94): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.xAKimg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.723208][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.746586][ T29] audit: type=1400 audit(1769724261.896:95): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.xAKimg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.830773][ T29] audit: type=1400 audit(1769724261.896:96): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.853573][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.860807][ T381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.862153][ T29] audit: type=1400 audit(1769724261.916:97): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.869659][ T381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.892199][ T29] audit: type=1400 audit(1769724261.916:98): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.906604][ T3318] veth0_macvtap: entered promiscuous mode [ 30.931939][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.959417][ T29] audit: type=1400 audit(1769724262.176:99): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.984673][ T3318] veth1_macvtap: entered promiscuous mode [ 30.991993][ T381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.001775][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.022679][ T381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.036040][ T3481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=3481 comm=syz.3.4 [ 31.054725][ T3481] loop3: detected capacity change from 0 to 1024 [ 31.063119][ T381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.084241][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.095017][ T3453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.112028][ T3481] ext4: Unknown parameter 'smackfsfloor' [ 31.128197][ T3453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.139460][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.168576][ T3453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.188355][ T3481] loop3: detected capacity change from 0 to 512 [ 31.201877][ T3453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.210849][ T3487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.219721][ T3487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.251202][ T3490] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 31.258753][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.292202][ T3453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.300982][ T3453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.333229][ T3453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.368390][ T3453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.384088][ T3453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.394350][ T3496] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 31.421218][ T3498] xt_nat: multiple ranges no longer supported [ 31.537846][ T3504] loop3: detected capacity change from 0 to 512 [ 31.546232][ T3499] loop0: detected capacity change from 0 to 256 [ 31.582409][ T3504] EXT4-fs: Ignoring removed orlov option [ 31.606264][ T3499] vfat: Unknown parameter '' [ 31.608756][ T3371] IPVS: starting estimator thread 0... [ 31.642620][ T3505] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 31.659912][ T3504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.695384][ T3514] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'. [ 31.721782][ T3507] IPVS: using max 2400 ests per chain, 120000 per kthread [ 31.767837][ T3504] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.837687][ T3520] vlan2: entered promiscuous mode [ 31.842786][ T3520] geneve1: entered promiscuous mode [ 31.848148][ T3520] vlan2: entered allmulticast mode [ 31.853489][ T3520] geneve1: entered allmulticast mode [ 31.894486][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.972209][ T3527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 31.981059][ T3527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.035745][ T3527] loop4: detected capacity change from 0 to 128 [ 32.065268][ T3527] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.089178][ T3523] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 32.098968][ T3523] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.107779][ T3523] bond0: (slave team0): Enslaving as an active interface with an up link [ 32.187994][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.277909][ T3548] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19'. [ 32.332081][ T3548] hsr_slave_0: left promiscuous mode [ 32.353360][ T3548] hsr_slave_1: left promiscuous mode [ 32.378007][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 32.392933][ T55] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.418684][ T3553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 32.697439][ T3568] ======================================================= [ 32.697439][ T3568] WARNING: The mand mount option has been deprecated and [ 32.697439][ T3568] and is ignored by this kernel. Remove the mand [ 32.697439][ T3568] option from the mount to silence this warning. [ 32.697439][ T3568] ======================================================= [ 32.767000][ T3572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.802399][ T3544] futex_wake_op: syz.0.18 tries to shift op by 35; fix this program [ 32.814791][ T3572] loop4: detected capacity change from 0 to 1024 [ 32.843437][ T3572] EXT4-fs: Ignoring removed orlov option [ 32.870544][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.925769][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.964908][ T3595] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 33.130837][ T3612] loop4: detected capacity change from 0 to 128 [ 33.151787][ T3612] bridge0: port 3(vlan3) entered blocking state [ 33.158075][ T3612] bridge0: port 3(vlan3) entered disabled state [ 33.164664][ T3612] vlan3: entered allmulticast mode [ 33.169942][ T3612] bridge0: entered allmulticast mode [ 33.176935][ T3612] vlan3: left allmulticast mode [ 33.182300][ T3612] bridge0: left allmulticast mode [ 33.200061][ T3617] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.207991][ T3617] FAT-fs (loop4): Filesystem has been set read-only [ 33.215350][ T3617] syz.4.35: attempt to access beyond end of device [ 33.215350][ T3617] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 33.231858][ T3617] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.234358][ T3615] sd 0:0:1:0: device reset [ 33.239880][ T3617] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.253589][ T3617] syz.4.35: attempt to access beyond end of device [ 33.253589][ T3617] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.267436][ T3611] syz.4.35: attempt to access beyond end of device [ 33.267436][ T3611] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.281727][ T3611] syz.4.35: attempt to access beyond end of device [ 33.281727][ T3611] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.295574][ T3617] syz.4.35: attempt to access beyond end of device [ 33.295574][ T3617] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.309358][ T3611] syz.4.35: attempt to access beyond end of device [ 33.309358][ T3611] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.323849][ T3611] syz.4.35: attempt to access beyond end of device [ 33.323849][ T3611] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.338242][ T3611] syz.4.35: attempt to access beyond end of device [ 33.338242][ T3611] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.351887][ T3617] syz.4.35: attempt to access beyond end of device [ 33.351887][ T3617] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.365614][ T3611] syz.4.35: attempt to access beyond end of device [ 33.365614][ T3611] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 33.379914][ T3611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.387890][ T3611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.395912][ T3611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.403845][ T3611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.412140][ T3611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.420022][ T3611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.428378][ T3611] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 33.940367][ T3628] Zero length message leads to an empty skb [ 33.974847][ T55] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.035806][ T55] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.092190][ T3643] loop0: detected capacity change from 0 to 1024 [ 34.107449][ T3649] loop3: detected capacity change from 0 to 1024 [ 34.137207][ T3643] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.137718][ T3649] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.178909][ T3649] JBD2: no valid journal superblock found [ 34.184737][ T3649] EXT4-fs (loop3): Could not load journal inode [ 34.199824][ T55] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.200394][ T3646] usb usb8: usbfs: process 3646 (syz.1.48) did not claim interface 0 before use [ 34.220139][ T3643] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 34.237490][ T3659] loop3: detected capacity change from 0 to 1024 [ 34.244837][ T3643] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.254906][ T55] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.279611][ T3643] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 34.294478][ T3643] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 34.302925][ T3659] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.334694][ T3643] EXT4-fs (loop0): 1 truncate cleaned up [ 34.340920][ T3643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.351813][ T3659] JBD2: no valid journal superblock found [ 34.359624][ T3659] EXT4-fs (loop3): Could not load journal inode [ 34.378054][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.474998][ T55] bridge_slave_1: left allmulticast mode [ 34.480919][ T55] bridge_slave_1: left promiscuous mode [ 34.486927][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.506454][ T55] bridge_slave_0: left allmulticast mode [ 34.512281][ T55] bridge_slave_0: left promiscuous mode [ 34.518089][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.527540][ T3680] EXT4-fs error (device loop0): __ext4_fill_super:5553: inode #2: comm syz.0.55: iget: checksum invalid [ 34.541230][ T3680] EXT4-fs (loop0): get root inode failed [ 34.546969][ T3680] EXT4-fs (loop0): mount failed [ 34.554089][ T3674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.674305][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.684242][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.694233][ T55] bond0 (unregistering): Released all slaves [ 34.734606][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.753573][ T55] hsr_slave_0: left promiscuous mode [ 34.774949][ T55] hsr_slave_1: left promiscuous mode [ 34.799776][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.807376][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.828865][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.836328][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.846636][ T55] veth1_macvtap: left promiscuous mode [ 34.852791][ T55] veth0_macvtap: left promiscuous mode [ 34.858425][ T55] veth1_vlan: left promiscuous mode [ 34.863995][ T55] veth0_vlan: left promiscuous mode [ 34.957140][ T55] team0 (unregistering): Port device team_slave_1 removed [ 34.967510][ T55] team0 (unregistering): Port device team_slave_0 removed [ 35.005245][ T3650] chnl_net:caif_netlink_parms(): no params data found [ 35.072786][ T3732] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.144338][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.151485][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.159791][ T3749] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 35.168315][ T3749] FAT-fs (loop1): Filesystem has been set read-only [ 35.186101][ T3754] FAULT_INJECTION: forcing a failure. [ 35.186101][ T3754] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.199249][ T3754] CPU: 1 UID: 0 PID: 3754 Comm: syz.0.67 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.199355][ T3754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.199373][ T3754] Call Trace: [ 35.199385][ T3754] [ 35.199393][ T3754] __dump_stack+0x1d/0x30 [ 35.199421][ T3754] dump_stack_lvl+0x95/0xd0 [ 35.199527][ T3754] dump_stack+0x15/0x1b [ 35.199549][ T3754] should_fail_ex+0x263/0x280 [ 35.199643][ T3754] should_fail+0xb/0x20 [ 35.199734][ T3754] should_fail_usercopy+0x1a/0x20 [ 35.199769][ T3754] _copy_from_user+0x1c/0xb0 [ 35.199792][ T3754] ___sys_sendmsg+0xc1/0x1e0 [ 35.199833][ T3754] __x64_sys_sendmsg+0xd4/0x160 [ 35.199883][ T3754] x64_sys_call+0x17ba/0x3000 [ 35.199911][ T3754] do_syscall_64+0xc0/0x2a0 [ 35.199984][ T3754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.200018][ T3754] RIP: 0033:0x7f103f03aeb9 [ 35.200042][ T3754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.200061][ T3754] RSP: 002b:00007f103da97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.200084][ T3754] RAX: ffffffffffffffda RBX: 00007f103f2b5fa0 RCX: 00007f103f03aeb9 [ 35.200165][ T3754] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 35.200178][ T3754] RBP: 00007f103da97090 R08: 0000000000000000 R09: 0000000000000000 [ 35.200190][ T3754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.200201][ T3754] R13: 00007f103f2b6038 R14: 00007f103f2b5fa0 R15: 00007ffe220294c8 [ 35.200221][ T3754] [ 35.202277][ T3756] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 35.212605][ T3650] bridge_slave_0: entered allmulticast mode [ 35.383035][ T3650] bridge_slave_0: entered promiscuous mode [ 35.390230][ T3766] capability: warning: `syz.0.71' uses 32-bit capabilities (legacy support in use) [ 35.447083][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.454281][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.463125][ T3650] bridge_slave_1: entered allmulticast mode [ 35.472436][ T3650] bridge_slave_1: entered promiscuous mode [ 35.509399][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.531757][ T3781] FAULT_INJECTION: forcing a failure. [ 35.531757][ T3781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.544880][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.3.74 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.544909][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.544922][ T3781] Call Trace: [ 35.544930][ T3781] [ 35.544939][ T3781] __dump_stack+0x1d/0x30 [ 35.544979][ T3781] dump_stack_lvl+0x95/0xd0 [ 35.545004][ T3781] dump_stack+0x15/0x1b [ 35.545023][ T3781] should_fail_ex+0x263/0x280 [ 35.545068][ T3781] should_fail+0xb/0x20 [ 35.545099][ T3781] should_fail_usercopy+0x1a/0x20 [ 35.545135][ T3781] _copy_to_user+0x20/0xa0 [ 35.545165][ T3781] simple_read_from_buffer+0xb5/0x130 [ 35.545203][ T3781] proc_fail_nth_read+0x10e/0x150 [ 35.545303][ T3781] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 35.545398][ T3781] vfs_read+0x1ab/0x7f0 [ 35.545415][ T3781] ? __rcu_read_unlock+0x4e/0x70 [ 35.545446][ T3781] ? __fget_files+0x184/0x1c0 [ 35.545475][ T3781] ? mutex_lock+0x57/0x90 [ 35.545502][ T3781] ksys_read+0xdc/0x1a0 [ 35.545524][ T3781] __x64_sys_read+0x40/0x50 [ 35.545671][ T3781] x64_sys_call+0x2889/0x3000 [ 35.545695][ T3781] do_syscall_64+0xc0/0x2a0 [ 35.545756][ T3781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.545783][ T3781] RIP: 0033:0x7fe92db3b78e [ 35.545800][ T3781] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 35.545816][ T3781] RSP: 002b:00007fe92c5d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.545864][ T3781] RAX: ffffffffffffffda RBX: 00007fe92c5d76c0 RCX: 00007fe92db3b78e [ 35.545881][ T3781] RDX: 000000000000000f RSI: 00007fe92c5d70a0 RDI: 0000000000000005 [ 35.545896][ T3781] RBP: 00007fe92c5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.545935][ T3781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.546020][ T3781] R13: 00007fe92ddf6038 R14: 00007fe92ddf5fa0 R15: 00007ffdd73419e8 [ 35.546076][ T3781] [ 35.547532][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.613891][ T3764] Buffer I/O error on dev loop0, logical block 305, async page read [ 35.760067][ T55] IPVS: stop unused estimator thread 0... [ 35.763298][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 35.763315][ T29] audit: type=1400 audit(1769724266.986:257): avc: denied { create } for pid=3797 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.767605][ T3764] Buffer I/O error on dev loop0, logical block 306, async page read [ 35.800525][ T3764] Buffer I/O error on dev loop0, logical block 307, async page read [ 35.813903][ T3650] team0: Port device team_slave_0 added [ 35.819886][ T3764] Buffer I/O error on dev loop0, logical block 308, async page read [ 35.830857][ T3650] team0: Port device team_slave_1 added [ 35.847613][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.855101][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.882041][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.901590][ T3764] Buffer I/O error on dev loop0, logical block 309, async page read [ 35.920338][ T3764] Buffer I/O error on dev loop0, logical block 310, async page read [ 35.923238][ T29] audit: type=1400 audit(1769724267.146:258): avc: denied { setopt } for pid=3814 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.928440][ T3764] Buffer I/O error on dev loop0, logical block 311, async page read [ 35.956524][ T3764] Buffer I/O error on dev loop0, logical block 312, async page read [ 35.971942][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.978956][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.005013][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.026296][ T3766] Buffer I/O error on dev loop0, logical block 305, async page read [ 36.034691][ T3766] Buffer I/O error on dev loop0, logical block 306, async page read [ 36.089124][ T3650] hsr_slave_0: entered promiscuous mode [ 36.096270][ T3650] hsr_slave_1: entered promiscuous mode [ 36.108467][ T3830] set_capacity_and_notify: 5 callbacks suppressed [ 36.108501][ T3830] loop1: detected capacity change from 0 to 512 [ 36.128997][ T3830] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 36.129754][ T29] audit: type=1400 audit(1769724267.346:259): avc: denied { module_request } for pid=3650 comm="syz-executor" kmod="rtnl-link-virt_wifi" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.179165][ T3830] EXT4-fs (loop1): 1 truncate cleaned up [ 36.185730][ T3830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.236815][ T29] audit: type=1400 audit(1769724267.456:260): avc: denied { bind } for pid=3836 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.256547][ T29] audit: type=1400 audit(1769724267.456:261): avc: denied { write } for pid=3836 comm="syz.4.82" path="socket:[6518]" dev="sockfs" ino=6518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.303933][ T29] audit: type=1400 audit(1769724267.526:262): avc: denied { create } for pid=3829 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 36.323365][ T29] audit: type=1400 audit(1769724267.526:263): avc: denied { bind } for pid=3829 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 36.365936][ T3650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.379683][ T3650] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.389561][ T3650] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.399953][ T3650] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.435001][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.446380][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.456451][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.463626][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.476811][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.484027][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.492662][ T3850] __nla_validate_parse: 4 callbacks suppressed [ 36.492681][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 36.515539][ T3850] vxlan0: entered promiscuous mode [ 36.521467][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.539930][ T42] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.539989][ T42] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.540115][ T42] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.540350][ T42] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.543442][ T3650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.552714][ T29] audit: type=1400 audit(1769724267.756:264): avc: denied { bind } for pid=3851 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.558035][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.575719][ T29] audit: type=1400 audit(1769724267.806:265): avc: denied { listen } for pid=3851 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.652383][ T29] audit: type=1400 audit(1769724267.836:266): avc: denied { connect } for pid=3851 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.673219][ T3854] FAULT_INJECTION: forcing a failure. [ 36.673219][ T3854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.686539][ T3854] CPU: 0 UID: 0 PID: 3854 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.686566][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.686634][ T3854] Call Trace: [ 36.686641][ T3854] [ 36.686650][ T3854] __dump_stack+0x1d/0x30 [ 36.686678][ T3854] dump_stack_lvl+0x95/0xd0 [ 36.686699][ T3854] dump_stack+0x15/0x1b [ 36.686772][ T3854] should_fail_ex+0x263/0x280 [ 36.686820][ T3854] should_fail+0xb/0x20 [ 36.686846][ T3854] should_fail_usercopy+0x1a/0x20 [ 36.686880][ T3854] _copy_from_user+0x1c/0xb0 [ 36.686899][ T3854] __sys_bpf+0x183/0x7b0 [ 36.686980][ T3854] __x64_sys_bpf+0x41/0x50 [ 36.687065][ T3854] x64_sys_call+0x28e1/0x3000 [ 36.687088][ T3854] do_syscall_64+0xc0/0x2a0 [ 36.687121][ T3854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.687156][ T3854] RIP: 0033:0x7f468d19aeb9 [ 36.687175][ T3854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.687202][ T3854] RSP: 002b:00007f468bbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.687223][ T3854] RAX: ffffffffffffffda RBX: 00007f468d415fa0 RCX: 00007f468d19aeb9 [ 36.687236][ T3854] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 36.687259][ T3854] RBP: 00007f468bbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.687343][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.687355][ T3854] R13: 00007f468d416038 R14: 00007f468d415fa0 R15: 00007ffccd430e18 [ 36.687373][ T3854] [ 36.933533][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.967142][ T3878] kthread_run failed with err -4 [ 37.049613][ T3896] loop3: detected capacity change from 0 to 1024 [ 37.076548][ T3896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.091261][ T3896] EXT4-fs (loop3): shut down requested (0) [ 37.125917][ T3896] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 37.138190][ C1] hrtimer: interrupt took 47470 ns [ 37.145424][ T3909] FAULT_INJECTION: forcing a failure. [ 37.145424][ T3909] name failslab, interval 1, probability 0, space 0, times 0 [ 37.151241][ T3650] veth0_vlan: entered promiscuous mode [ 37.158156][ T3909] CPU: 1 UID: 0 PID: 3909 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.158227][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.158242][ T3909] Call Trace: [ 37.158248][ T3909] [ 37.158256][ T3909] __dump_stack+0x1d/0x30 [ 37.158283][ T3909] dump_stack_lvl+0x95/0xd0 [ 37.158306][ T3909] dump_stack+0x15/0x1b [ 37.158399][ T3909] should_fail_ex+0x263/0x280 [ 37.158507][ T3909] should_failslab+0x8c/0xb0 [ 37.158532][ T3909] __kmalloc_noprof+0xb8/0x580 [ 37.158577][ T3909] ? bpf_test_init+0x86/0x130 [ 37.158636][ T3909] bpf_test_init+0x86/0x130 [ 37.158731][ T3909] bpf_prog_test_run_xdp+0x306/0xa10 [ 37.158765][ T3909] ? __rcu_read_unlock+0x4e/0x70 [ 37.158799][ T3909] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 37.158961][ T3909] bpf_prog_test_run+0x204/0x340 [ 37.159034][ T3909] __sys_bpf+0x4c0/0x7b0 [ 37.159067][ T3909] __x64_sys_bpf+0x41/0x50 [ 37.159131][ T3909] x64_sys_call+0x28e1/0x3000 [ 37.159157][ T3909] do_syscall_64+0xc0/0x2a0 [ 37.159189][ T3909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.159273][ T3909] RIP: 0033:0x7f468d19aeb9 [ 37.159324][ T3909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.159340][ T3909] RSP: 002b:00007f468bbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 37.159359][ T3909] RAX: ffffffffffffffda RBX: 00007f468d415fa0 RCX: 00007f468d19aeb9 [ 37.159372][ T3909] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 37.159386][ T3909] RBP: 00007f468bbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.159400][ T3909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.159414][ T3909] R13: 00007f468d416038 R14: 00007f468d415fa0 R15: 00007ffccd430e18 [ 37.159507][ T3909] [ 37.213301][ T3908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.222444][ T3650] veth1_vlan: entered promiscuous mode [ 37.257405][ T3908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.274175][ T3650] veth0_macvtap: entered promiscuous mode [ 37.310895][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.319742][ T3650] veth1_macvtap: entered promiscuous mode [ 37.327704][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.343020][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.343716][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.348562][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.355068][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.355094][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.382516][ T3914] xt_hashlimit: size too large, truncated to 1048576 [ 37.387320][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.432136][ T3917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 37.438122][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.462434][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.462461][ T3386] hid-generic 5D36:0004:0000.0001: unknown main item tag 0x0 [ 37.478237][ T3386] hid-generic 5D36:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.515476][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.549948][ T3908] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.594184][ T3924] loop3: detected capacity change from 0 to 128 [ 37.620872][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.630337][ T3916] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 37.649574][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.658044][ T3926] Illegal XDP return value 225818104 on prog (id 22) dev N/A, expect packet loss! [ 37.667828][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.694350][ T3917] bond1: option ad_user_port_key: invalid value (1136) [ 37.701451][ T3917] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 37.718541][ T3917] bond1 (unregistering): Released all slaves [ 37.740151][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.784665][ T3908] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.930311][ T3947] loop1: detected capacity change from 0 to 1024 [ 37.948460][ T3908] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.986958][ T3949] FAULT_INJECTION: forcing a failure. [ 37.986958][ T3949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.988184][ T3947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.000161][ T3949] CPU: 0 UID: 0 PID: 3949 Comm: syz.3.106 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.000268][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.000311][ T3949] Call Trace: [ 38.000318][ T3949] [ 38.000328][ T3949] __dump_stack+0x1d/0x30 [ 38.000354][ T3949] dump_stack_lvl+0x95/0xd0 [ 38.000377][ T3949] dump_stack+0x15/0x1b [ 38.000426][ T3949] should_fail_ex+0x263/0x280 [ 38.000458][ T3949] should_fail+0xb/0x20 [ 38.000486][ T3949] should_fail_usercopy+0x1a/0x20 [ 38.000529][ T3949] _copy_from_user+0x1c/0xb0 [ 38.000551][ T3949] bpf_test_init+0xb9/0x130 [ 38.000584][ T3949] bpf_prog_test_run_xdp+0x306/0xa10 [ 38.000643][ T3949] ? __rcu_read_unlock+0x4e/0x70 [ 38.000701][ T3949] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 38.000734][ T3949] bpf_prog_test_run+0x204/0x340 [ 38.000820][ T3949] __sys_bpf+0x4c0/0x7b0 [ 38.000874][ T3949] __x64_sys_bpf+0x41/0x50 [ 38.000900][ T3949] x64_sys_call+0x28e1/0x3000 [ 38.000992][ T3949] do_syscall_64+0xc0/0x2a0 [ 38.001088][ T3949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.001142][ T3949] RIP: 0033:0x7fe92db7aeb9 [ 38.001160][ T3949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.001178][ T3949] RSP: 002b:00007fe92c5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.001200][ T3949] RAX: ffffffffffffffda RBX: 00007fe92ddf5fa0 RCX: 00007fe92db7aeb9 [ 38.001215][ T3949] RDX: 000000000000004c RSI: 0000200000000340 RDI: 000000000000000a [ 38.001289][ T3949] RBP: 00007fe92c5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.001329][ T3949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.001342][ T3949] R13: 00007fe92ddf6038 R14: 00007fe92ddf5fa0 R15: 00007ffdd73419e8 [ 38.001363][ T3949] [ 38.228748][ T3908] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.275354][ T3967] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.284691][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.295514][ T3967] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.406090][ T3981] loop0: detected capacity change from 0 to 512 [ 38.413794][ T3981] EXT4-fs: Ignoring removed oldalloc option [ 38.423747][ T3981] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.442793][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.470355][ T3984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'. [ 38.483957][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 38.507290][ T3981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.523344][ T3981] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.539295][ T3984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3984 comm=syz.1.116 [ 38.540699][ T3981] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.115: corrupted inode contents [ 38.563563][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.572191][ T3981] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.115: mark_inode_dirty error [ 38.585182][ T3990] loop3: detected capacity change from 0 to 128 [ 38.585496][ T3981] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.115: corrupted inode contents [ 38.603884][ T3981] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.115: mark_inode_dirty error [ 38.641875][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.656844][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.705778][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.784259][ T4000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 38.784535][ T4002] loop0: detected capacity change from 0 to 1024 [ 38.819130][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.854328][ T4009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.125'. [ 38.876231][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.914143][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 38.946007][ T4017] loop0: detected capacity change from 0 to 1024 [ 38.959230][ T4017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.967748][ T4017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.988265][ T4017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.058809][ T4027] loop1: detected capacity change from 0 to 1024 [ 39.070862][ T4027] EXT4-fs: test_dummy_encryption option not supported [ 39.112078][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.176363][ T4031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 39.210851][ T4031] loop3: detected capacity change from 0 to 1024 [ 39.233795][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.261070][ T4027] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.269943][ T4031] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.279702][ T4027] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.333143][ T4027] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.420080][ T4027] EXT4-fs (loop1): 1 truncate cleaned up [ 39.445201][ T4027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.502122][ T4030] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 3: comm syz.3.134: lblock 3 mapped to illegal pblock 3 (length 2) [ 39.523704][ T3393] IPVS: starting estimator thread 0... [ 39.561876][ T4030] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.134: lblock 0 mapped to illegal pblock 0 (length 3) [ 39.576269][ T4030] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 39.588585][ T4030] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.588585][ T4030] [ 39.609857][ T4049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.133'. [ 39.611695][ T4046] IPVS: using max 2544 ests per chain, 127200 per kthread [ 39.653459][ T3309] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 39.665708][ T3309] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 39.725740][ T381] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:5: lblock 4 mapped to illegal pblock 4 (length 1) [ 39.756625][ T31] kworker/u8:1 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 39.770270][ T31] CPU: 0 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.770321][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 39.770336][ T31] Workqueue: loop3 loop_rootcg_workfn [ 39.770457][ T31] Call Trace: [ 39.770464][ T31] [ 39.770472][ T31] __dump_stack+0x1d/0x30 [ 39.770493][ T31] dump_stack_lvl+0x95/0xd0 [ 39.770542][ T31] dump_stack+0x15/0x1b [ 39.770565][ T31] dump_header+0x80/0x240 [ 39.770587][ T31] oom_kill_process+0x295/0x350 [ 39.770611][ T31] out_of_memory+0x97d/0xb80 [ 39.770719][ T31] try_charge_memcg+0x62e/0xa10 [ 39.770749][ T31] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 39.770781][ T31] __read_swap_cache_async+0x17b/0x2d0 [ 39.770871][ T31] swap_cluster_readahead+0x262/0x3c0 [ 39.770966][ T31] shmem_swapin_folio+0x941/0x1210 [ 39.771002][ T31] ? filemap_get_entry+0x392/0x3d0 [ 39.771081][ T31] shmem_get_folio_gfp+0x278/0xd60 [ 39.771179][ T31] ? __rb_insert_augmented+0x76/0x2c0 [ 39.771203][ T31] ? update_curr+0x9c/0x150 [ 39.771224][ T31] shmem_write_begin+0xfc/0x1f0 [ 39.771257][ T31] generic_perform_write+0x183/0x490 [ 39.771356][ T31] shmem_file_write_iter+0xc5/0xf0 [ 39.771461][ T31] lo_rw_aio+0x67d/0x730 [ 39.771483][ T31] ? kthread_data+0x52/0x70 [ 39.771595][ T31] ? wq_worker_running+0x6f/0x120 [ 39.771622][ T31] loop_process_work+0x56c/0xac0 [ 39.771649][ T31] ? __rcu_read_unlock+0x4e/0x70 [ 39.771682][ T31] ? __perf_event_task_sched_in+0xa65/0xad0 [ 39.771715][ T31] ? __list_add_valid_or_report+0x38/0xe0 [ 39.771741][ T31] ? __perf_event_task_sched_out+0x192/0x710 [ 39.771832][ T31] loop_rootcg_workfn+0x22/0x30 [ 39.771861][ T31] process_scheduled_works+0x4cd/0x9d0 [ 39.771939][ T31] worker_thread+0x6bc/0x8b0 [ 39.771962][ T31] kthread+0x488/0x510 [ 39.771985][ T31] ? __pfx_worker_thread+0x10/0x10 [ 39.772081][ T31] ? __pfx_kthread+0x10/0x10 [ 39.772104][ T31] ret_from_fork+0x148/0x280 [ 39.772129][ T31] ? __pfx_kthread+0x10/0x10 [ 39.772159][ T31] ret_from_fork_asm+0x1a/0x30 [ 39.772250][ T31] [ 39.979677][ T31] memory: usage 307200kB, limit 307200kB, failcnt 282 [ 39.986606][ T31] memory+swap: usage 307996kB, limit 9007199254740988kB, failcnt 0 [ 39.994540][ T31] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 40.001844][ T31] Memory cgroup stats for /syz3: [ 40.005591][ T31] cache 12288 [ 40.013857][ T31] rss 0 [ 40.016609][ T31] shmem 0 [ 40.019602][ T31] mapped_file 0 [ 40.023239][ T31] dirty 4096 [ 40.026468][ T31] writeback 0 [ 40.029747][ T31] workingset_refault_anon 81 [ 40.034383][ T31] workingset_refault_file 0 [ 40.034615][ T4055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.039006][ T31] swap 815104 [ 40.039017][ T31] swapcached 0 [ 40.039023][ T31] pgpgin 6936 [ 40.039030][ T31] pgpgout 6933 [ 40.066089][ T31] pgfault 7317 [ 40.069456][ T31] pgmajfault 39 [ 40.072955][ T31] inactive_anon 0 [ 40.076588][ T31] active_anon 0 [ 40.080107][ T31] inactive_file 12288 [ 40.084144][ T31] active_file 0 [ 40.084396][ T4055] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.087592][ T31] unevictable 0 [ 40.087602][ T31] hierarchical_memory_limit 314572800 [ 40.087611][ T31] hierarchical_memsw_limit 9223372036854771712 [ 40.087621][ T31] total_cache 12288 [ 40.116757][ T31] total_rss 0 [ 40.120103][ T31] total_shmem 0 [ 40.123733][ T31] total_mapped_file 0 [ 40.123796][ T4064] netlink: 56 bytes leftover after parsing attributes in process `syz.5.143'. [ 40.127990][ T31] total_dirty 4096 [ 40.140380][ T31] total_writeback 0 [ 40.144241][ T31] total_workingset_refault_anon 81 [ 40.149353][ T31] total_workingset_refault_file 0 [ 40.154467][ T31] total_swap 815104 [ 40.158450][ T31] total_swapcached 0 [ 40.162388][ T31] total_pgpgin 6936 [ 40.165244][ T4055] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.141: iget: bad i_size value: 2533274857506816 [ 40.166195][ T31] total_pgpgout 6933 [ 40.166205][ T31] total_pgfault 7317 [ 40.186328][ T31] total_pgmajfault 39 [ 40.190035][ T4055] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.141: iget: bad i_size value: 2533274857506816 [ 40.190370][ T31] total_inactive_anon 0 [ 40.206810][ T31] total_active_anon 0 [ 40.210858][ T31] total_inactive_file 12288 [ 40.215460][ T31] total_active_file 0 [ 40.219569][ T31] total_unevictable 0 [ 40.223603][ T31] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.134,pid=4028,uid=0 [ 40.224374][ T4055] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.141: iget: bad i_size value: 2533274857506816 [ 40.238273][ T31] Memory cgroup out of memory: Killed process 4028 (syz.3.134) total-vm:94264kB, anon-rss:1332kB, file-rss:22564kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 40.268784][ T381] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 40.271837][ T4028] syz.3.134 (4028) used greatest stack depth: 10056 bytes left [ 40.281139][ T381] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.281139][ T381] [ 40.305876][ T4030] syz.3.134 (4030) used greatest stack depth: 9768 bytes left [ 40.333674][ T4029] syz.3.134 (4029) used greatest stack depth: 7040 bytes left [ 40.344928][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.355086][ T4051] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.391987][ T4072] FAULT_INJECTION: forcing a failure. [ 40.391987][ T4072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.405209][ T4072] CPU: 1 UID: 0 PID: 4072 Comm: syz.5.146 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.405241][ T4072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.405256][ T4072] Call Trace: [ 40.405264][ T4072] [ 40.405273][ T4072] __dump_stack+0x1d/0x30 [ 40.405377][ T4072] dump_stack_lvl+0x95/0xd0 [ 40.405402][ T4072] dump_stack+0x15/0x1b [ 40.405425][ T4072] should_fail_ex+0x263/0x280 [ 40.405508][ T4072] should_fail+0xb/0x20 [ 40.405547][ T4072] should_fail_usercopy+0x1a/0x20 [ 40.405586][ T4072] _copy_from_iter+0xcf/0xea0 [ 40.405627][ T4072] ? __alloc_frozen_pages_noprof+0x161/0x350 [ 40.405681][ T4072] copy_page_from_iter+0x178/0x2a0 [ 40.405699][ T4072] skb_copy_datagram_from_iter+0x22d/0x480 [ 40.405720][ T4072] skb_copy_datagram_from_iter_full+0x8e/0xe0 [ 40.405813][ T4072] virtio_transport_alloc_skb+0x448/0x700 [ 40.405845][ T4072] virtio_transport_send_pkt_info+0x478/0x850 [ 40.405965][ T4072] virtio_transport_seqpacket_enqueue+0xc9/0x100 [ 40.406026][ T4072] vsock_connectible_sendmsg+0x776/0x9a0 [ 40.406123][ T4072] ? __pfx_woken_wake_function+0x10/0x10 [ 40.406149][ T4072] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 40.406257][ T4072] ____sys_sendmsg+0x5af/0x600 [ 40.406275][ T4072] ___sys_sendmsg+0x195/0x1e0 [ 40.406298][ T4072] __sys_sendmmsg+0x185/0x320 [ 40.406402][ T4072] __x64_sys_sendmmsg+0x57/0x70 [ 40.406424][ T4072] x64_sys_call+0x1e28/0x3000 [ 40.406525][ T4072] do_syscall_64+0xc0/0x2a0 [ 40.406560][ T4072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.406638][ T4072] RIP: 0033:0x7f4cfa92aeb9 [ 40.406655][ T4072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.406675][ T4072] RSP: 002b:00007f4cf9387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 40.406725][ T4072] RAX: ffffffffffffffda RBX: 00007f4cfaba5fa0 RCX: 00007f4cfa92aeb9 [ 40.406741][ T4072] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 40.406755][ T4072] RBP: 00007f4cf9387090 R08: 0000000000000000 R09: 0000000000000000 [ 40.406767][ T4072] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000001 [ 40.406815][ T4072] R13: 00007f4cfaba6038 R14: 00007f4cfaba5fa0 R15: 00007fff1218c338 [ 40.406885][ T4072] [ 40.683840][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.767313][ T4076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.799146][ T4093] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 40.812395][ T4076] EXT4-fs error (device loop0): ext4_readdir:224: inode #12: comm syz.0.149: path /36/file0/file0: directory fails checksum at offset 0 [ 40.902944][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.936865][ T4074] chnl_net:caif_netlink_parms(): no params data found [ 41.016469][ T4074] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.023892][ T4074] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.071436][ T4074] bridge_slave_0: entered allmulticast mode [ 41.076392][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 41.076409][ T29] audit: type=1400 audit(1769724272.296:344): avc: denied { create } for pid=4117 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.078943][ T4074] bridge_slave_0: entered promiscuous mode [ 41.087478][ T4118] 9p: Bad value for 'rfdno' [ 41.106743][ T4074] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.122929][ T4074] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.130346][ T29] audit: type=1400 audit(1769724272.316:345): avc: denied { mounton } for pid=4116 comm="syz.4.157" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 41.141865][ T4074] bridge_slave_1: entered allmulticast mode [ 41.160779][ T4074] bridge_slave_1: entered promiscuous mode [ 41.184630][ T29] audit: type=1400 audit(1769724272.386:346): avc: denied { connect } for pid=4117 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.216473][ T4074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.242711][ T4074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.265925][ T4074] team0: Port device team_slave_0 added [ 41.272945][ T4074] team0: Port device team_slave_1 added [ 41.297693][ T4130] set_capacity_and_notify: 5 callbacks suppressed [ 41.297711][ T4130] loop4: detected capacity change from 0 to 512 [ 41.305121][ T4074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.317596][ T4074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.343591][ T4074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.362866][ T4074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.370053][ T4074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.396236][ T4074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.409285][ T4130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.421071][ T4130] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.160: bg 0: block 384: padding at end of block bitmap is not set [ 41.435852][ T4130] EXT4-fs (loop4): Remounting filesystem read-only [ 41.442487][ T4130] EXT4-fs (loop4): 1 truncate cleaned up [ 41.448634][ T4130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.452534][ T4074] hsr_slave_0: entered promiscuous mode [ 41.468001][ T4130] xt_hashlimit: max too large, truncated to 1048576 [ 41.469181][ T4074] hsr_slave_1: entered promiscuous mode [ 41.483402][ T4074] debugfs: 'hsr0' already exists in 'hsr' [ 41.486642][ T4130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.489257][ T4074] Cannot create hsr debugfs directory [ 41.548459][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.605166][ T4074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 41.616298][ T29] audit: type=1400 audit(1769724272.836:347): avc: denied { setopt } for pid=4147 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.616417][ T4074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 41.642444][ T29] audit: type=1400 audit(1769724272.866:348): avc: denied { bind } for pid=4147 comm="syz.0.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.665265][ T4074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 41.675191][ T4074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.728411][ T4159] __nla_validate_parse: 4 callbacks suppressed [ 41.728428][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.166'. [ 41.739091][ T4074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.763234][ T4074] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.790563][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.797744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.810839][ T4165] loop5: detected capacity change from 0 to 256 [ 41.822730][ T4165] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.837714][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.845080][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.861350][ T4165] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 41.869285][ T4165] FAT-fs (loop5): Filesystem has been set read-only [ 41.894642][ T4074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.908623][ T4074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.971230][ T4074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.056861][ T29] audit: type=1400 audit(1769724273.276:349): avc: denied { create } for pid=4188 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.076257][ T29] audit: type=1400 audit(1769724273.276:350): avc: denied { read } for pid=4188 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 42.167702][ T4074] veth0_vlan: entered promiscuous mode [ 42.190850][ T4205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.176'. [ 42.208138][ T4074] veth1_vlan: entered promiscuous mode [ 42.235792][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 42.249000][ T4205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.176'. [ 42.271381][ T4074] veth0_macvtap: entered promiscuous mode [ 42.288104][ T4216] netlink: 'syz.3.180': attribute type 29 has an invalid length. [ 42.291796][ T4074] veth1_macvtap: entered promiscuous mode [ 42.305310][ T4205] loop0: detected capacity change from 0 to 2048 [ 42.309783][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.330551][ T4074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.342294][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.353023][ T4218] loop5: detected capacity change from 0 to 128 [ 42.379583][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.401350][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.416606][ T29] audit: type=1400 audit(1769724273.626:351): avc: denied { watch watch_reads } for pid=4217 comm="syz.5.182" path="/17/file1" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 42.464814][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.509413][ T4230] loop6: detected capacity change from 0 to 128 [ 42.550441][ T4230] EXT4-fs: Ignoring removed oldalloc option [ 42.556635][ T4230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.607159][ T29] audit: type=1400 audit(1769724273.806:352): avc: denied { write } for pid=4225 comm="syz.5.185" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.640352][ T4230] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.662190][ T4230] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.715409][ T29] audit: type=1400 audit(1769724273.926:353): avc: denied { associate } for pid=4236 comm="syz.3.187" name="blkio.bfq.time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.740606][ T4239] loop4: detected capacity change from 0 to 2048 [ 42.759344][ T3310] cgroup: fork rejected by pids controller in /syz3 [ 42.799163][ T4239] msdos: Unknown parameter 'Í»y\9Nõá#%`]º7ˆZ' [ 42.871251][ T4239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.909151][ T4074] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.930832][ T4249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.190'. [ 43.022983][ T4261] SET target dimension over the limit! [ 43.030807][ T4256] loop5: detected capacity change from 0 to 2048 [ 43.062964][ T4256] ext4: Unknown parameter '' [ 43.075450][ T3453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.087777][ T4256] : Can't lookup blockdev [ 43.121227][ T4273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.200'. [ 43.135533][ T4273] loop4: detected capacity change from 0 to 512 [ 43.142603][ T4273] EXT4-fs: Ignoring removed orlov option [ 43.149856][ T4273] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 43.161294][ T3453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.207128][ T3453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.279345][ T4273] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.200: casefold flag without casefold feature [ 43.311861][ T4273] EXT4-fs (loop4): get root inode failed [ 43.317560][ T4273] EXT4-fs (loop4): mount failed [ 43.324331][ T4282] xt_hashlimit: max too large, truncated to 1048576 [ 43.361149][ T3453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.364347][ T4282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.403951][ T4296] FAULT_INJECTION: forcing a failure. [ 43.403951][ T4296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.417254][ T4296] CPU: 1 UID: 0 PID: 4296 Comm: syz.5.204 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.417292][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.417304][ T4296] Call Trace: [ 43.417311][ T4296] [ 43.417320][ T4296] __dump_stack+0x1d/0x30 [ 43.417362][ T4296] dump_stack_lvl+0x95/0xd0 [ 43.417422][ T4296] dump_stack+0x15/0x1b [ 43.417443][ T4296] should_fail_ex+0x263/0x280 [ 43.417473][ T4296] should_fail+0xb/0x20 [ 43.417503][ T4296] should_fail_usercopy+0x1a/0x20 [ 43.417705][ T4296] _copy_from_iter+0xcf/0xea0 [ 43.417738][ T4296] ? __alloc_frozen_pages_noprof+0x161/0x350 [ 43.417855][ T4296] copy_page_from_iter+0x178/0x2a0 [ 43.417874][ T4296] skb_copy_datagram_from_iter+0x22d/0x480 [ 43.417960][ T4296] skb_copy_datagram_from_iter_full+0x8e/0xe0 [ 43.417981][ T4296] virtio_transport_alloc_skb+0x448/0x700 [ 43.418020][ T4296] virtio_transport_send_pkt_info+0x478/0x850 [ 43.418077][ T4296] virtio_transport_seqpacket_enqueue+0xc9/0x100 [ 43.418105][ T4296] vsock_connectible_sendmsg+0x776/0x9a0 [ 43.418166][ T4296] ? __pfx_woken_wake_function+0x10/0x10 [ 43.418193][ T4296] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 43.418259][ T4296] ____sys_sendmsg+0x5af/0x600 [ 43.418350][ T4296] ___sys_sendmsg+0x195/0x1e0 [ 43.418383][ T4296] __sys_sendmmsg+0x185/0x320 [ 43.418408][ T4296] __x64_sys_sendmmsg+0x57/0x70 [ 43.418426][ T4296] x64_sys_call+0x1e28/0x3000 [ 43.418475][ T4296] do_syscall_64+0xc0/0x2a0 [ 43.418508][ T4296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.418529][ T4296] RIP: 0033:0x7f4cfa92aeb9 [ 43.418547][ T4296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.418567][ T4296] RSP: 002b:00007f4cf9387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 43.418634][ T4296] RAX: ffffffffffffffda RBX: 00007f4cfaba5fa0 RCX: 00007f4cfa92aeb9 [ 43.418702][ T4296] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 43.418717][ T4296] RBP: 00007f4cf9387090 R08: 0000000000000000 R09: 0000000000000000 [ 43.418732][ T4296] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000002 [ 43.418746][ T4296] R13: 00007f4cfaba6038 R14: 00007f4cfaba5fa0 R15: 00007fff1218c338 [ 43.418764][ T4296] [ 43.668771][ T3453] bridge_slave_1: left allmulticast mode [ 43.674560][ T3453] bridge_slave_1: left promiscuous mode [ 43.680251][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.689271][ T3453] bridge_slave_0: left allmulticast mode [ 43.694960][ T3453] bridge_slave_0: left promiscuous mode [ 43.700707][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.922577][ T4329] loop6: detected capacity change from 0 to 512 [ 43.930506][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.952701][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.973019][ T3453] bond0 (unregistering): Released all slaves [ 44.017692][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 44.057414][ T3453] hsr_slave_0: left promiscuous mode [ 44.081611][ T3453] hsr_slave_1: left promiscuous mode [ 44.091598][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.099078][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.140895][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.148977][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.194757][ T3453] veth1_macvtap: left promiscuous mode [ 44.200252][ T3453] veth0_macvtap: left promiscuous mode [ 44.216252][ T3453] veth1_vlan: left promiscuous mode [ 44.231801][ T3453] veth0_vlan: left promiscuous mode [ 44.245596][ T4350] loop6: detected capacity change from 0 to 1024 [ 44.342665][ T4334] vfat: Unknown parameter '' [ 44.371643][ T4350] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.418054][ T3453] team0 (unregistering): Port device team_slave_1 removed [ 44.438284][ T3453] team0 (unregistering): Port device team_slave_0 removed [ 44.515235][ T4074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.614162][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.619125][ T4369] netlink: 'syz.6.216': attribute type 3 has an invalid length. [ 44.621469][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.629039][ T4369] netlink: 132 bytes leftover after parsing attributes in process `syz.6.216'. [ 44.663457][ T4374] futex_wake_op: syz.0.217 tries to shift op by -3; fix this program [ 44.705667][ T4276] bridge_slave_0: entered allmulticast mode [ 44.726892][ T4276] bridge_slave_0: entered promiscuous mode [ 44.740734][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.747913][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.771969][ T4276] bridge_slave_1: entered allmulticast mode [ 44.782425][ T4276] bridge_slave_1: entered promiscuous mode [ 44.793241][ T4379] netlink: 32 bytes leftover after parsing attributes in process `syz.5.218'. [ 44.801898][ T4381] Attempt to read inode for relocated directory [ 44.826187][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.849906][ T4388] msdos: Bad value for 'gid' [ 44.854663][ T4388] msdos: Bad value for 'gid' [ 44.874524][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.953328][ T4276] team0: Port device team_slave_0 added [ 44.996536][ T4403] bridge_slave_0: left allmulticast mode [ 45.002449][ T4403] bridge_slave_0: left promiscuous mode [ 45.008109][ T4403] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.042254][ T4403] bridge_slave_1: left allmulticast mode [ 45.047948][ T4403] bridge_slave_1: left promiscuous mode [ 45.053717][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.075303][ T4403] bond0: (slave bond_slave_0): Releasing backup interface [ 45.105086][ T4403] bond0: (slave bond_slave_1): Releasing backup interface [ 45.110296][ T3640] loop0: p4 < > [ 45.121357][ T4403] team0: Port device team_slave_0 removed [ 45.128755][ T4419] loop0: p4 < > [ 45.136745][ T4403] team0: Port device team_slave_1 removed [ 45.162896][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.170322][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.191359][ T3640] udevd[3640]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 45.222074][ T4403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.229477][ T4403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.251964][ T4433] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.270824][ T4433] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.277504][ T4433] EXT4-fs (loop0): 1 truncate cleaned up [ 45.279563][ T4403] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.283945][ T4433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 45.300267][ T4276] team0: Port device team_slave_1 added [ 45.334935][ T381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.368352][ T3386] syz1: Port: 1 Link DOWN [ 45.389517][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.404049][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.411041][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.437141][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.473979][ T381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.505355][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.512356][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.538475][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.615354][ T381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.701576][ T4454] netlink: 'syz.4.232': attribute type 4 has an invalid length. [ 45.734013][ T381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.749959][ T4276] hsr_slave_0: entered promiscuous mode [ 45.757171][ T4276] hsr_slave_1: entered promiscuous mode [ 45.767426][ T4276] debugfs: 'hsr0' already exists in 'hsr' [ 45.773266][ T4276] Cannot create hsr debugfs directory [ 45.988924][ T4487] msdos: Unknown parameter '01777777777777777777777' [ 46.021573][ T4490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 46.041239][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 46.050105][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.067033][ T4490] geneve2: entered promiscuous mode [ 46.085261][ T4492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.085348][ T4487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.121888][ T4487] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.139890][ T381] bridge_slave_1: left allmulticast mode [ 46.145628][ T381] bridge_slave_1: left promiscuous mode [ 46.151311][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.241996][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.242'. [ 46.251052][ T381] bridge_slave_0: left allmulticast mode [ 46.256781][ T381] bridge_slave_0: left promiscuous mode [ 46.262474][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.262629][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 46.262641][ T29] audit: type=1400 audit(1769724277.486:431): avc: denied { create } for pid=4506 comm="syz.6.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.271526][ T4487] EXT4-fs error (device loop5): ext4_get_first_dir_block:3527: inode #12: comm syz.5.242: Attempting to read directory block (0) that is past i_size (3) [ 46.276788][ T4510] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.243: corrupted in-inode xattr: e_name out of bounds [ 46.311816][ T4487] EXT4-fs (loop5): Remounting filesystem read-only [ 46.324839][ T29] audit: type=1400 audit(1769724277.486:432): avc: denied { reparent } for pid=4485 comm="syz.5.242" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.353020][ T29] audit: type=1400 audit(1769724277.486:433): avc: denied { add_name } for pid=4485 comm="syz.5.242" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.401611][ T29] audit: type=1400 audit(1769724277.556:434): avc: denied { bind } for pid=4506 comm="syz.6.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.420720][ T29] audit: type=1400 audit(1769724277.576:435): avc: denied { write } for pid=4506 comm="syz.6.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.444191][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.463107][ T55] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.473716][ T55] Quota error (device loop5): write_blk: dquota write failed [ 46.481184][ T55] Quota error (device loop5): free_dqentry: Can't write quota data block 5 [ 46.513701][ T29] audit: type=1400 audit(1769724277.736:436): avc: denied { bind } for pid=4515 comm="syz.5.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.535333][ T381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.546520][ T381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.564870][ T381] bond0 (unregistering): Released all slaves [ 46.565541][ T29] audit: type=1400 audit(1769724277.786:437): avc: denied { read } for pid=4515 comm="syz.5.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.591955][ T4503] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.614642][ T4509] can0: slcan on ttyS3. [ 46.645520][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.653117][ T381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.669911][ T381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.677410][ T381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.677418][ T4511] can0 (unregistered): slcan off ttyS3. [ 46.685022][ T4522] xt_l2tp: invalid flags combination: 4 [ 46.704321][ T381] veth1_macvtap: left promiscuous mode [ 46.711111][ T381] veth0_macvtap: left promiscuous mode [ 46.728016][ T381] veth1_vlan: left promiscuous mode [ 46.734642][ T381] veth0_vlan: left promiscuous mode [ 46.740746][ T29] audit: type=1400 audit(1769724277.956:438): avc: denied { mounton } for pid=4523 comm="syz.0.250" path="/63/file1" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.810914][ T4528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4528 comm=syz.0.251 [ 46.825320][ T4527] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4527 comm=syz.0.251 [ 46.842590][ T4527] set_capacity_and_notify: 9 callbacks suppressed [ 46.842606][ T4527] loop0: detected capacity change from 0 to 1024 [ 46.862823][ T4527] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.887650][ T381] team0 (unregistering): Port device team_slave_1 removed [ 46.895489][ T4527] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.903639][ T4527] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.918885][ T381] team0 (unregistering): Port device team_slave_0 removed [ 46.922181][ T4527] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.251: Failed to acquire dquot type 0 [ 46.952101][ T4527] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.251: Failed to acquire dquot type 0 [ 46.984085][ T4527] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.251: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.998014][ T4527] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.251: Failed to acquire dquot type 0 [ 47.009625][ T4527] EXT4-fs (loop0): 1 orphan inode deleted [ 47.017451][ T4527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.085295][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.099520][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.713457][ T4585] ================================================================== [ 47.721565][ T4585] BUG: KCSAN: data-race in copy_creds / prepare_creds [ 47.728349][ T4585] [ 47.730658][ T4585] write to 0xffff8881034a4228 of 4 bytes by task 4584 on cpu 0: [ 47.738270][ T4585] copy_creds+0x78/0x340 [ 47.742510][ T4585] copy_process+0x639/0x1f10 [ 47.747084][ T4585] kernel_clone+0x16b/0x5b0 [ 47.751573][ T4585] __se_sys_clone3+0x1f5/0x230 [ 47.756324][ T4585] __x64_sys_clone3+0x31/0x40 [ 47.760986][ T4585] x64_sys_call+0x2c0f/0x3000 [ 47.765644][ T4585] do_syscall_64+0xc0/0x2a0 [ 47.770137][ T4585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.776012][ T4585] [ 47.778322][ T4585] read to 0xffff8881034a4180 of 184 bytes by task 4585 on cpu 1: [ 47.786022][ T4585] prepare_creds+0x6d/0x550 [ 47.790512][ T4585] prepare_exec_creds+0x14/0xe0 [ 47.795359][ T4585] bprm_execve+0x6f/0x9b0 [ 47.799809][ T4585] do_execveat_common+0x6cf/0x740 [ 47.804814][ T4585] __x64_sys_execve+0x5c/0x70 [ 47.809482][ T4585] x64_sys_call+0x271d/0x3000 [ 47.814146][ T4585] do_syscall_64+0xc0/0x2a0 [ 47.818643][ T4585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.824535][ T4585] [ 47.826853][ T4585] Reported by Kernel Concurrency Sanitizer on: [ 47.832996][ T4585] CPU: 1 UID: 0 PID: 4585 Comm: syz.5.260 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.842613][ T4585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.852651][ T4585] ================================================================== [ 47.879960][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.908389][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.922466][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.936740][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.975641][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.988188][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.997473][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.004593][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.018286][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.025376][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.091022][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.160082][ T4276] veth0_vlan: entered promiscuous mode [ 48.169977][ T4276] veth1_vlan: entered promiscuous mode [ 48.184548][ T4276] veth0_macvtap: entered promiscuous mode [ 48.192096][ T4276] veth1_macvtap: entered promiscuous mode [ 48.202395][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.211209][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.226606][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.238089][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.250076][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.264312][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0