last executing test programs: 14.319906871s ago: executing program 0 (id=200): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) socket(0x11, 0x3, 0x8) socket(0x11, 0xa, 0x8) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xd}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006b000000760000000000000027050000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 14.269721193s ago: executing program 0 (id=201): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xb}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x200808, &(0x7f0000000200), 0x4, 0x52d, &(0x7f00000007c0)="$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") syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket(0x2, 0x3, 0xff) socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r6, &(0x7f0000000000)='\"', 0xfdef) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 13.232423889s ago: executing program 0 (id=205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x20000400) r2 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback, 0x6}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000000500000095003300000000009500a50500000000e4c0e32ce895e9f07de888b157d5d70b9421ca4a1fe43ed304086a043e7c184c4375"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 7.242034518s ago: executing program 2 (id=219): pread64(0xffffffffffffffff, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r0 = socket(0x10, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000019440)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030034c6d1f5abb6c7ab00002e0001006e657464657673696d0000000f0002006e657c64657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8a, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x451, &(0x7f0000000d80)="$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") write(r6, &(0x7f0000004200)='t', 0x1) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f00000010c0)=[{{&(0x7f0000000c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @dev}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/125}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x0, &(0x7f0000000d40)=""/19}, 0x4}, {{&(0x7f0000000d80)=@ethernet={0x0, @remote}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001b00)=""/4096}, {&(0x7f0000000e00)=""/69}, {&(0x7f0000000e80)=""/252}], 0x0, &(0x7f0000000fc0)=""/193}}], 0x3fffffffffffe10, 0x4000002b, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f000001b9c0), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f000001bd80)={&(0x7f000001b980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f000001ba40)={&(0x7f000001ba00)={0x38, r8, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendfile(r6, r5, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r9 = socket(0x2d, 0x2, 0x0) recvmsg$kcm(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x140) openat(0xffffffffffffffff, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f00000190c0)=""/160, 0xa0}, {&(0x7f0000019180)=""/46, 0x2e}, {&(0x7f00000191c0)=""/19, 0x13}, {&(0x7f0000019200)=""/249, 0xf9}, {&(0x7f0000019300)=""/182, 0xb6}, {&(0x7f00000193c0)=""/103, 0x67}, {&(0x7f0000019440)}, {&(0x7f0000019480)=""/252, 0xfc}, {&(0x7f0000019580)=""/188, 0xbc}, {&(0x7f0000019640)=""/90, 0x5a}], 0xa, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001a780)=""/4096, 0x1000}, {&(0x7f000001b780)=""/148, 0x94}, {&(0x7f000001b840)=""/102, 0x66}], 0x3, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, &(0x7f000001b900)=0xcf61, &(0x7f000001b940), 0x1, 0x6, 0x9, 0x200, 0x14, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f000001bac0), &(0x7f000001bb00)=0x1, 0x0, 0x3, 0xffff, 0x7, 0x20}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x8}, &(0x7f000001bb40)=0x8000, &(0x7f000001bb80)=0x2, 0x1000, 0x3, 0xffffffffffffff65, 0x6, 0x2a, 0x3}}], 0x180, 0x8004}, 0x80c0) 6.947385948s ago: executing program 4 (id=220): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x8, 0xdc66}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') lseek(r2, 0x10001, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0xff, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x1, 0xc24, 0x9, 0xfffffffb}}, 0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7c, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) syz_emit_ethernet(0x6a, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd60fc414a00343c0020010000000000000000000000000001fe8000000000000000000000000000aa6203000000000000c9100000000000000000000002"], 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r1, 0x0, 0x0, 0x3, 0xe, 0xd, @private2, @loopback, 0x40, 0x1, 0xfffffffc}}) 5.245778998s ago: executing program 4 (id=223): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/40, 0x28}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = accept(r2, &(0x7f0000000440)=@nfc_llcp, &(0x7f00000004c0)=0x80) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)={0x9000000d}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbde, &(0x7f0000001f40)="$eJzs3N1rXGUaAPDnnEw+2mZ30mVZtnuzXZalhWWnSZeUbVnYdumyN14Ieis0ppMSMv0gidSkuZjoP+DXteCNoBbFC3vdG0VvvdH2VvFCKBIbBRGNnPlIYjOTpGYmJ6a/H7yZ9z3vJM/z5CRz3hfmTACPrKPZlzTiSERcSCKKjeNpRPTVegMR1frzlpcWxr9dWhhPYmXlia+SSCLi/tLCePNnJY3HQ43BQER8/N8kfvf8xrgzc/NTY5VKeboxPjF7+dqJmbn5f0xeHrtUvlS+MnLqX6MnR08Nnx7tWK3ffXb21jd/+f8X1e/f/OHm1y+/nsTZGGzMra+jQway31rSYqIQEWMdDpaXnkY96+tMClt809ofFwAAuyxdt4b7QxSjJ9YWb8V4/5NckwMAAAA6YqUnYgUAAADY5xL7fwAAANjnmu8DuL+0MN5s+b4jYXfdOxcRQ/X6lxutPlOIau1xIHoj4uD9JNbf1prUv23HjkbE53dPv5O16M59yJuqLkbEH1ud/6RW/1DtLu6N9acRMdyB+EcfGK/G3+oe4g7ZSf1nOxC/bf0A0EW3z9UvZBuvf+nq+idaXP8KLa5dv0Te17/m+m95w/pvrf6eNuu/x7cZ48Ybr15vN5fV/+9b/3u72bL42eOOinoI9xYj/lRoVX+yWn/Spv4L24xR/PF6ud1c3vWvvBZxLFrX35Rs/vlEJyYmK+Xh+teWMRY/Gn2rXfy868/O/8E29Tc//6nd+b+2zRhPnT//7oaDd9e6m9efftmXPFnrNT8y6Nmx2dnpkYi+5LGNx09unkvzOc2fkdV//K+b//+3qj97Tag2fg/ZXmCx8ZiNn3sg5n9u3nivXT7N/V+e5/9im/O/vv4PCxvP/wvbjPG3D1463m5u/f43a1n85l4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrSiBiMJC2t9tO0VIo4FBG/j4Np5erM7N8nrj5z5WI2FzEUvenEZKU8HBHF+jjJxiO1/tr45APjf0bE4Yh4pXigNi6NX61czLt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVh2KiMFI0lJEpBGxXEzTUinvrAAAAICOG8o7AQAAAKDr7P8BAABg/7P/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMsO//n2nSQiqmcO1FqmrzHXm2tmQLeleScA5KYn7wSA3BTyTgDIzUPu8S0XYB9KtpgfaDvT3/FcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANi7jh25fSeJiOqZA7WW6WvM9eaaGdBt6bp+kmMewO7r2WyysHt5ALvvIf/FN325AH5lLPrhkbfVy8DA2nOqP5/p71pOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOw9g7WWpKWI6GscK5UifhMRQ9GbTExWysMR8duI+LTY25+NR3LOGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM6bmZufGqtUytNZJ41GZ/VIFzo9jchdDNGdTlLPu7pX8tnfnf4Xt3rO07HDEH2xJyrdo508X5UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjLzNz81FilUp6eyTsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG8zc/NTY5VKebqLnbxrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPz8FAAD//9r4Bjg=") mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x193, 0x0, &(0x7f0000000680)="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", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000008}, 0x50) r9 = syz_open_dev$sg(&(0x7f00000001c0), 0xffffffffffffff50, 0x3) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x85) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r10, &(0x7f0000000180), 0x4000190, 0x0) 5.116291032s ago: executing program 2 (id=224): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") pipe2(&(0x7f0000000240), 0x880) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x4, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r3, 0x0, &(0x7f0000019440)=0x3) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010003000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7fffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, @loopback, 0x0, 0x0, 0x0, 0x4007}}) r11 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) sendmsg$rds(r0, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f00000190c0)=""/160, 0xa0}, {&(0x7f0000019180)=""/46, 0x2e}, {&(0x7f00000191c0)=""/19, 0x13}, {&(0x7f000001bd80)=""/265, 0x109}, {&(0x7f0000019300)=""/182, 0xb6}, {&(0x7f00000193c0)=""/103, 0x67}, {&(0x7f0000019440)}, {&(0x7f0000019480)=""/252, 0xfc}, {&(0x7f0000019580)=""/188, 0xbc}, {&(0x7f0000019640)=""/90, 0x5a}], 0xa, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001a780)=""/4096, 0x1000}, {&(0x7f000001b780)=""/148, 0x94}, {&(0x7f000001b840)=""/102, 0x66}], 0x3, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, &(0x7f000001b900)=0xcf61, &(0x7f000001b940), 0x1, 0x6, 0x9, 0x200, 0x14, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f000001bac0), &(0x7f000001bb00)=0x1, 0x3, 0x3, 0xffff, 0x7, 0x20}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x8}, &(0x7f000001bb40)=0x8000, &(0x7f000001bb80)=0x2, 0x1000, 0x3, 0xffffffffffffff65, 0x6, 0x2a, 0x3}}], 0x180, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r11, 0x8004f50c, &(0x7f0000019080)) 3.585548216s ago: executing program 4 (id=227): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xc, 0x7, 0x0, 0x0, r0, 0xb, '\x00', r1, r2, 0x1, 0x4, 0x4, 0xa}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r5, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 3.154614851s ago: executing program 1 (id=229): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SRC={0x8, 0x2, @private=0xa010102}]}, 0x24}}, 0x20000050) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) ioctl$FITHAW(r0, 0xc0045878) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xf) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000080)=0x1000) r6 = gettid() r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r7, 0x10c, 0x4, &(0x7f0000000080)=0x400047, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) accept(r2, 0x0, 0x0) 3.010325806s ago: executing program 2 (id=230): r0 = socket$inet6(0xa, 0x2, 0x401) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x101, {{0xa, 0x4e22, 0x9, @mcast2, 0x2a4c}}, 0x0, 0x4, [{{0xa, 0x4e23, 0x2, @loopback, 0x3869}}, {{0xa, 0x4e20, 0x5, @private0, 0x4}}, {{0xa, 0x4e20, 0xfffffffa, @mcast1, 0x5}}, {{0xa, 0x4e23, 0x82, @local, 0x8}}]}, 0x290) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000300)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getpeername$l2tp6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @local}, &(0x7f00000003c0)=0x20) r2 = accept$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000440)=0x1c) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xcf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000005c0), 0x4) getpeername$l2tp6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000640)=0x20) r4 = socket(0x21, 0x3, 0x1) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000680)=""/64, &(0x7f00000006c0)=0x40) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x410000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd25, 0x25dfdbfb, {0xa, 0x80, 0x0, 0x3, 0xe1, 0x0, 0x0, 0x4, 0x1}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000855}, 0x20000000) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0xee00, &(0x7f0000000840)={0x2, 0x5, 0x1, 0x6}) fcntl$getownex(r2, 0x10, &(0x7f0000000880)={0x0, 0x0}) timer_create(0x2, &(0x7f00000008c0)={0x0, 0x20, 0x2, @tid=r6}, &(0x7f0000000900)) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/attr/fscreate\x00', 0x2, 0x0) umount2(&(0x7f0000000980)='./file0\x00', 0x1d) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000a00)={{r8, r9+10000000}, {0x77359400}}, &(0x7f0000000a40)) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000a80)={'vcan0\x00', 0xe7f9}) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000b40)={'filter\x00', 0x0, 0x4, 0x2c, [0xe, 0x5fda, 0x0, 0x41, 0xd505, 0x1a], 0x2, &(0x7f0000000ac0)=[{}, {}], &(0x7f0000000b00)=""/44}, &(0x7f0000000bc0)=0x78) ioctl$FIOCLEX(r7, 0x5451) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x58, 0x0, 0x520, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket(0x1a, 0x6, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0xf, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x20008014) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000e40), &(0x7f0000000e80), 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000ec0)={@loopback, 0xf, 0x0, 0x0, 0x0, 0x3, 0xaaab}, 0x20) 3.009672746s ago: executing program 4 (id=231): r0 = syz_clone(0x9080280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket(0x2b, 0x80801, 0x1) listen(r1, 0x9) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x2000000000000) ptrace(0x8, r0) wait4(0x0, 0x0, 0x0, 0x0) getrusage(0x1, &(0x7f0000000000)) 2.928432629s ago: executing program 4 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000440)={&(0x7f00000003c0)='\x00', &(0x7f0000000400)='syzkaller\x00', 0x9}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r0, 0x3, 0x8, 0x4}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000020) mount_setattr(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x8100, &(0x7f0000000580)={0x100078, 0x2, 0x40000, {r4}}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x104804, 0x0, 0x7, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x480, &(0x7f0000002040)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') unlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') listxattr(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x2a, 0x1, 0x3, 0xe, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x8, 0x43a1bd76, 0x2, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x92c}, 0xffffffffffffffff, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6c040000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 2.8971827s ago: executing program 1 (id=233): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) io_uring_setup(0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43b1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x5, 0x5, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x9, 0x0}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c69"], 0x65) 2.808381293s ago: executing program 2 (id=234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x1658, 0x12a0, 0x1168, 0x12a0, 0x12a0, 0x0, 0x1588, 0x1588, 0x1588, 0x1588, 0x1588, 0x6, &(0x7f0000000280), {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xff, 0xffffffff], 'syzkaller1\x00', 'batadv0\x00', {}, {0xff}, 0x67, 0x1, 0x4, 0x14}, 0x0, 0x1120, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x20, 0x0, 0x1, './cgroup.cpu/syz1\x00', 0x7f, {0x7e}}}, @common=@dst={{0x48}, {0xaf80, 0x5, 0x0, [0x8000, 0xa, 0x9, 0xff01, 0x1, 0x8, 0x1, 0x3, 0xf55c, 0x4, 0x3, 0x66e, 0x5, 0xa87, 0x2b, 0x8], 0x5}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010101, @ipv4=@rand_addr=0x64010102, 0x33, 0x17, 0x20}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x80000000, 0x1, 0x0, [0x3, 0xc, 0x2, 0x5, 0x1, 0x7, 0x20a1, 0x5, 0xe72, 0x3, 0x8, 0xffff, 0x2, 0xfffa, 0xcc93, 0x9], 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@empty, 0x2e, 0x3f, 0x6}}}, {{@ipv6={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xffffffff], 'pimreg0\x00', 'bond_slave_1\x00', {}, {}, 0xc, 0xc, 0x7, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xff}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 'bridge_slave_0\x00', 'tunl0\x00', {}, {0xff}, 0x3b, 0x6, 0x1, 0x43}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x3, 0xf3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@remote, 0x1a, 0x3b, 0x4aa}}}, {{@ipv6={@mcast1, @mcast1, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x16b8) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) close(r2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x20000000, &(0x7f0000000480)={0xa, 0x4e23, 0x1c, @loopback, 0x1}, 0x1c) 2.710285406s ago: executing program 1 (id=235): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x458, 0x4018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x0, 0xf1, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x149}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x7f, 0xfa}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0xd, 0xb, 0x8}, 0x4b, &(0x7f0000000140)={0x5, 0xf, 0x4b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x4, 0x8, 0x7945}, @wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x9, 0x10, 0x0, 0x7}, @generic={0x30, 0x10, 0x1, "d39ed42864c592a0994d3e698edbdb9e7f704ae09e58c1aa7ff99327a5ccf143480f39c74a0ab92a793d819d02"}]}, 0x5, [{0xe8, &(0x7f00000001c0)=@string={0xe8, 0x3, "8ed9bbdaeea85bfa17a58b9e0791785a68b0486482c2a3158acdc73ce92af5086536c7d52709932b128299f7779bbe7f5890d408a1787f0e94e1aeda53ec3efb756dee9950f1392592e1ac53ea31333876a9bd850fe7ccc24fc62ae0efc78b85801cc6f4daf75537a84314c2716a255695c50bc9b2cc8f39f6444e3deb201ccaa3d170dc580f4a7d0ddc00beb672e204a0e005cb83e30ffd63d9e81b504e7f180c069a93f660f01cd1b9d8089f0cc3bbfb554bb27022289d894875376c20ec31eb40dba84bf4e84489bffd14a460ff5762da489c3de6e29997f06e47e4e2e0d10d3afdc3c95a"}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "083d08b20a829cecfeca6e9751e903ba24d0ebee8a75403f151b446648a1616ccf33c29afa4df34ae03cdd914c47d7d227d48b60ff4338f52baa123906e33f2ef5274e21ef675e6cbc74c4e06d61205ee5c3cf65b801377cd569f636ae0db31abe74a397d9906a4340c2401e51d9008df7c00497f812fd"}}, {0x71, &(0x7f0000000340)=@string={0x71, 0x3, "c95b9dbab05aa8a37a168e8a5c48b682aadbedc3291a2db7aa1ae9679d313d2d22e5b0783495ce4ddc8351051dbe3d190ef72db0fb6b4ceb8c63b950f620c2a438aeeb4bbaaf7f655c09bd577d40f2ad361b17eeefbbeb92bb3e8afcead3bda7e4657954a9b8a937d7bf7b89457a7c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x22}}]}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x458, 0x4018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x0, 0xf1, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x149}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x7f, 0xfa}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x9, 0xd, 0xb, 0x8}, 0x4b, &(0x7f0000000140)={0x5, 0xf, 0x4b, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x4, 0x8, 0x7945}, @wireless={0xb, 0x10, 0x1, 0x8, 0x28, 0x9, 0x10, 0x0, 0x7}, @generic={0x30, 0x10, 0x1, "d39ed42864c592a0994d3e698edbdb9e7f704ae09e58c1aa7ff99327a5ccf143480f39c74a0ab92a793d819d02"}]}, 0x5, [{0xe8, &(0x7f00000001c0)=@string={0xe8, 0x3, "8ed9bbdaeea85bfa17a58b9e0791785a68b0486482c2a3158acdc73ce92af5086536c7d52709932b128299f7779bbe7f5890d408a1787f0e94e1aeda53ec3efb756dee9950f1392592e1ac53ea31333876a9bd850fe7ccc24fc62ae0efc78b85801cc6f4daf75537a84314c2716a255695c50bc9b2cc8f39f6444e3deb201ccaa3d170dc580f4a7d0ddc00beb672e204a0e005cb83e30ffd63d9e81b504e7f180c069a93f660f01cd1b9d8089f0cc3bbfb554bb27022289d894875376c20ec31eb40dba84bf4e84489bffd14a460ff5762da489c3de6e29997f06e47e4e2e0d10d3afdc3c95a"}}, {0x79, &(0x7f00000002c0)=@string={0x79, 0x3, "083d08b20a829cecfeca6e9751e903ba24d0ebee8a75403f151b446648a1616ccf33c29afa4df34ae03cdd914c47d7d227d48b60ff4338f52baa123906e33f2ef5274e21ef675e6cbc74c4e06d61205ee5c3cf65b801377cd569f636ae0db31abe74a397d9906a4340c2401e51d9008df7c00497f812fd"}}, {0x71, &(0x7f0000000340)=@string={0x71, 0x3, "c95b9dbab05aa8a37a168e8a5c48b682aadbedc3291a2db7aa1ae9679d313d2d22e5b0783495ce4ddc8351051dbe3d190ef72db0fb6b4ceb8c63b950f620c2a438aeeb4bbaaf7f655c09bd577d40f2ad361b17eeefbbeb92bb3e8afcead3bda7e4657954a9b8a937d7bf7b89457a7c"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x22}}]}) (async) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) 2.142185886s ago: executing program 1 (id=236): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async, rerun: 64) r1 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406eb0800000000000000000200000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) (async) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc040ff0b, &(0x7f00000000c0)) (async, rerun: 64) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) (async, rerun: 64) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x4, 0x2b6}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) close(0x3) (async, rerun: 32) recvmsg$kcm(r3, &(0x7f00000011c0)={&(0x7f0000000d00)=@sco, 0x80, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/19, 0x13}, {&(0x7f0000000dc0)=""/25, 0x19}, {&(0x7f0000000e00)=""/115, 0x73}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/239, 0xef}, {&(0x7f0000000fc0)=""/158, 0x9e}], 0x6, &(0x7f0000001100)=""/189, 0xbd}, 0x40003003) (async, rerun: 64) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) (rerun: 64) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x10, 0x0, @fd=r8, 0x1, 0x0, 0x7, 0x4, 0x0, {0x0, r12}}) io_uring_enter(r8, 0x1, 0x21, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") (async) r13 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) open_by_handle_at(r13, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x531500) (async) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000010000001d"], 0x0) 2.078613498s ago: executing program 2 (id=237): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x501, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2, 0x801, 0x11c7, 0x8, 0x7, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 2.072158638s ago: executing program 1 (id=238): setxattr$incfs_metadata(0x0, &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8", 0xf, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x32038, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clock_nanosleep(0x1, 0x0, &(0x7f0000000340), &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@debug}]}, 0x0, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(0x0, 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) r7 = add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000000)='\x00', r7) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 2.070910918s ago: executing program 3 (id=239): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x409, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r2 = syz_io_uring_setup(0x48ed, &(0x7f0000000380)={0x0, 0xa352, 0x4000, 0x0, 0x3d5}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x5}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xff, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') read$watch_queue(r8, &(0x7f0000001080)=""/4088, 0xff8) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="640101007f0000010100000008000000fffffffff0000002ac141413e000000100000000ac14143ee0000002ac141432"], 0x30) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r9, 0x4b72, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="dcd1000000000000df2501000000140002007767320000000000000000000000000064f83eb04b410761ed4077fe8a22d588edd45bd39ac6f98c4894d26811183e996e4f7da40813effdf62d3cd80de40c6bbb93e1da5bb5a73b38"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.657889453s ago: executing program 4 (id=240): mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="9c8979d49f9d77b1a061dbdd38c5132b27160e98b4d12e043b4a062121f5cd148b3802bc9441cc92b31c2034876a79c03eb131b8fc75d9cf6649a7e97fff4e419587157da06f40b3d75ae7cf75c37d19f0caa1d1b76ef1f6bd01995579b5dfa6f73ba92a4767daf5a4edc9e3042d1da9452e68a2a5d1e39ac558f9ae0f2e2e0c00946bd548bb21ce78f6f3911425467280c7ac52fc477c53f3d4a864f542491619b8d28b6e", @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x400001, 0x0, 0xa, "ff00f7000000000000000020af88008300"}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='./bus/file0\x00', &(0x7f00000002c0), 0x20000, &(0x7f0000000300)={'trans=unix,', {[{@ignoreqv}, {@posixacl}], [{@fsname={'fsname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '\xc5\']'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 1.072520313s ago: executing program 0 (id=241): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x5, [@var={0xc, 0x0, 0x0, 0xe, 0x3, 0x2}, @union={0x10, 0x5, 0x0, 0x5, 0x1, 0x7fffffff, [{0x6, 0x3, 0x3}, {0xa, 0x1}, {0x1, 0x0, 0x2}, {0x5, 0x4, 0x8}, {0x3, 0x5}]}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0xd, 0xfffffffb}, {0x9, 0x706}, {0xc, 0x5}, {0x7, 0x7}, {0x4, 0x4}, {0x3, 0x8}]}, @struct={0x2, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x9, 0x3, 0xc}, {0x8, 0x4, 0x9}]}, @const={0x5, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x61, 0x30]}}, &(0x7f0000000100)=""/172, 0xe1, 0xac, 0x1, 0x3, 0x10000}, 0x28) cachestat(r0, &(0x7f0000000200)={0x7f}, &(0x7f0000000240), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa2}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x6e}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400}, 0x80000) socket$packet(0x11, 0x3, 0x300) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x0, @initdev}, &(0x7f0000000400)=0x10) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000440)=""/37, &(0x7f0000000480)=0x25) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000004c0)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={'team_slave_0\x00', {0x2, 0x4e23, @multicast2}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000540), &(0x7f0000000580)=0x4) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000005) setsockopt$IP_VS_SO_SET_EDIT(r5, 0x0, 0x483, &(0x7f00000005c0)={0x2, @multicast2, 0x4e20, 0x4, 'nq\x00', 0x0, 0x3, 0x3}, 0x2c) getpgid(0xffffffffffffffff) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000006c0)={@loopback, @dev, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x7, 0x0, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x40, 0x8001, 0x1ff}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0x237f, 0x5c3, {{0x6, 0x4, 0x1, 0x37, 0x18, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x3f}, {[@noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x4, 0x2, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x10, 0x8001, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0x6, 0x2, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x68, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @empty, {[@noop, @cipso={0x86, 0x29, 0x1, [{0x6, 0xf, "1ad0577c96caf62ad92ffee1ca"}, {0x5, 0xf, "389bae71cb2801141f1e71981f"}, {0x7, 0x5, "1d27c9"}]}, @timestamp={0x44, 0x18, 0x38, 0x0, 0x7, [0x1d, 0x44, 0x9, 0xea, 0x3]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000d40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b00)={0x1f8, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xac, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x8040}, 0x8084) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r15, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, r16, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffb}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048080}, 0xc000) mount$9p_fd(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x1000000, &(0x7f0000000f80)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}, {@cache_none}, {@access_any}, {@fscache}, {@ignoreqv}, {@access_user}, {@version_L}, {@afid={'afid', 0x3d, 0xba0000000000000}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 990.215686ms ago: executing program 3 (id=242): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20005, 0x4, 0x0, 0x8, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x1000000) 819.940842ms ago: executing program 0 (id=243): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000150000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000150000000800000002"], 0x50) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) (async) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) 816.985542ms ago: executing program 3 (id=244): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r2, 0x0, 0x90000000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0xf9, 0x1, 0x1, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8720, 0x4, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2) sendmsg$can_raw(r0, &(0x7f0000000040)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x4) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendfile(r0, r2, 0x0, 0x90000000000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0xf9, 0x1, 0x1, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8720, 0x4, 0x2}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00'}) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2) (async) sendmsg$can_raw(r0, &(0x7f0000000040)={&(0x7f0000000580)={0x1d, r3}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x4) (async) 783.944793ms ago: executing program 2 (id=245): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40880}, 0x60048000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x40007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone3(&(0x7f0000000b40)={0x82084400, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000003c0), {0x8}, &(0x7f00000005c0)=""/109, 0x6d, &(0x7f0000001980)=""/4096, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8001, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) 690.215477ms ago: executing program 0 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000840)='net\x00') socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") r1 = gettid() tkill(r1, 0x12) syz_open_procfs(r1, &(0x7f0000000180)='net/vlan/vlan0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xfffffffffffffffc, 0x0, 0xe45}, {0xffffffff, 0x4, 0x9, 0xa, 0x6}]}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) remap_file_pages(&(0x7f0000ca4000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffe, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x40000100) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 689.405667ms ago: executing program 3 (id=247): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80"], 0x24}], 0x1}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESDEC]) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, 0x3ed, 0x100, 0x70bd26, 0x25dfdbfc, "fcec5387e77775db237cbaa31f609df3307065c1a9a63f72955400710edfb5041f2303d03add717b69a9d01f74d16348202d42caa3cbf357626c081c13b1588b13ad4f93083042f4f17e4df6cc467fcce9a846ee25a93a9496cea7c3d00003a1aafd3d622d03832ca79f2fda7d75ba536419cbe6cdaf62d9045f32f992a9396a1cb2aa6334", ["", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400c0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) readv(r0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) (async, rerun: 64) setuid(0xee00) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prlimit64(0x0, 0x8, &(0x7f0000002000)={0x7, 0x9}, 0x0) (async) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) (async) r2 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv2(r5, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) lseek(r5, 0xf5, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) shmctl$SHM_LOCK(r1, 0xb) (async, rerun: 32) socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000980)={0x2d, 0x7, 0x2, {{0x15, '/dev/bus/usb/00#/00#\x00'}, 0x7f}}, 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) ioperm(0x1, 0xfffffffffffffffe, 0x8001) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x8000000, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48}, 0x4800) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) 523.793293ms ago: executing program 3 (id=248): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="8c000000100001042abd7000feffffff00000000", @ANYRES32=r3, @ANYBLOB="82490000ca010700540037800e000100697036677265746170000000400002"], 0x8c}, 0x1, 0x0, 0x0, 0xc10}, 0x48000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x8, 0x200, 0x1e, 0x14, 0x0, 0x7ffd, 0x6, 0x0, 0x1}}) socket$inet6(0xa, 0x2, 0x20e5) 356.220148ms ago: executing program 3 (id=249): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000d0ed68936f5a57c47629e0cb965a33e2b96a8f25c898a12bfcc576fdb84d41f8bc4addc98fdf1533c6e7709995ec35ff6d5c2755fc58916d20306ca64c48671416b9f0964ce02594146acfda0f52d1"], &(0x7f0000000000)='syzkaller\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000001, 0xf67, &(0x7f00000002c0)=0x5) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) (async, rerun: 64) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/cpu_byteorder', 0x140, 0x110) read$hiddev(r8, &(0x7f0000000000)=""/124, 0x7c) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x7, 0xfff2}, {0x0, 0xa}}}, 0xffffffeb}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES16=r2, @ANYBLOB="01002dbd700000000000220000000c00018008000100", @ANYRES32=r3, @ANYBLOB="cce2f4ce21187fc6a8e7007b1c332209eebd8075c3"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xe) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r10, 0x0, 0xe8, 0x71, &(0x7f0000000400)="b0e7437f6dfc844c601003b292640749f2d7657f1d06e08cc91ee90f8ec3b158a9b918d9ba3a5ccde897851384269517fc486ed3a56f9ea7d5b3b9e558b43dce3fda0014ee074f7aa8c1953058dd9207e47a8f254bda3b6d82512222f187d5bfe2d012fbdd0cb97cc3df304c196fa5dd285316e0410d3540a2995a97737f0677a94de1e17f1d10363afd45bb901a6a3c7a38f6a047dd5f0a2b8d05539db3b535e44285cec9928617898087c5aabafb719ddba4932c865d31de2879e2045be20373f1c2de2c93618741b71e3442326b98dd57cdaffdb3e08370bffbe5eda6842a152f2435a5bf7395", &(0x7f0000000500)=""/113, 0x9546, 0x0, 0x11, 0xa0, &(0x7f0000000580)="e3914d483500bdcf7d6a20f677108bb943", &(0x7f00000006c0)="fe4365f092b0e29ac1e33f5696bbf5376af730e7e4d2da3b631988c1f3f9c5346d3d149c4305c747d6caf17cafbbf3da96f0a179ae5dc88d1184741a93cb16246e744dab59486cf24dd1c1889677963199e9d80f3d7a5d3e9a5be63226cdb3e661e245387462b9da0a73fe1e439cda74060b955b3d704c8146e10d85760937b59e2bb00682da47f913b6a7c63b267e4a9d4f7bce335739c66bb9b04bf587de0d", 0x7, 0x0, 0x4}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r9, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, r9, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2335], &(0x7f00000000c0)='syzkaller\x00', 0x2}, 0x94) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) (async, rerun: 32) r12 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) (rerun: 32) write$vga_arbiter(r12, &(0x7f0000000240), 0xf) (async) write$P9_RFLUSH(r11, &(0x7f0000000100)={0x7, 0x6d, 0x1}, 0x7) 0s ago: executing program 1 (id=250): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) rmdir(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. [ 34.372137][ T28] audit: type=1400 audit(1775123253.776:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.395400][ T28] audit: type=1400 audit(1775123253.796:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.397738][ T3301] cgroup: Unknown subsys name 'net' [ 34.423283][ T28] audit: type=1400 audit(1775123253.826:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.542958][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.549206][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.660714][ T28] audit: type=1400 audit(1775123254.056:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.684739][ T28] audit: type=1400 audit(1775123254.056:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.708778][ T28] audit: type=1400 audit(1775123254.056:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.729989][ T28] audit: type=1400 audit(1775123254.056:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.747747][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.750485][ T28] audit: type=1400 audit(1775123254.086:69): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.779939][ T28] audit: type=1400 audit(1775123254.086:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.804785][ T28] audit: type=1400 audit(1775123254.086:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.824168][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.029361][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 36.108535][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.120274][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.173555][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.180889][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.188278][ T3311] bridge_slave_0: entered allmulticast mode [ 36.195048][ T3311] bridge_slave_0: entered promiscuous mode [ 36.207175][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.214399][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.221564][ T3311] bridge_slave_1: entered allmulticast mode [ 36.228215][ T3311] bridge_slave_1: entered promiscuous mode [ 36.249037][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.268010][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.286576][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.326640][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.333894][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.341016][ T3312] bridge_slave_0: entered allmulticast mode [ 36.347587][ T3312] bridge_slave_0: entered promiscuous mode [ 36.358725][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.365938][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.373202][ T3312] bridge_slave_1: entered allmulticast mode [ 36.380442][ T3312] bridge_slave_1: entered promiscuous mode [ 36.407186][ T3311] team0: Port device team_slave_0 added [ 36.415872][ T3311] team0: Port device team_slave_1 added [ 36.425249][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.434540][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.441805][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.449093][ T3314] bridge_slave_0: entered allmulticast mode [ 36.455647][ T3314] bridge_slave_0: entered promiscuous mode [ 36.462390][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.471625][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.478802][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.486234][ T3314] bridge_slave_1: entered allmulticast mode [ 36.492677][ T3314] bridge_slave_1: entered promiscuous mode [ 36.510300][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.540920][ T3312] team0: Port device team_slave_0 added [ 36.551832][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.558853][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.585361][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.610957][ T3312] team0: Port device team_slave_1 added [ 36.621794][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.628927][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.655024][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.677380][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.692020][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.699866][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.707386][ T3316] bridge_slave_0: entered allmulticast mode [ 36.713960][ T3316] bridge_slave_0: entered promiscuous mode [ 36.721984][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.729173][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.737040][ T3316] bridge_slave_1: entered allmulticast mode [ 36.744238][ T3316] bridge_slave_1: entered promiscuous mode [ 36.755203][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.764711][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.771663][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.797912][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.821607][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.828922][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.855054][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.880893][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.896515][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.914795][ T3314] team0: Port device team_slave_0 added [ 36.922612][ T3311] hsr_slave_0: entered promiscuous mode [ 36.928718][ T3311] hsr_slave_1: entered promiscuous mode [ 36.953066][ T3314] team0: Port device team_slave_1 added [ 36.958781][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.966060][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.973337][ T3321] bridge_slave_0: entered allmulticast mode [ 36.980023][ T3321] bridge_slave_0: entered promiscuous mode [ 36.986817][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.993949][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.001318][ T3321] bridge_slave_1: entered allmulticast mode [ 37.007824][ T3321] bridge_slave_1: entered promiscuous mode [ 37.015520][ T3316] team0: Port device team_slave_0 added [ 37.045312][ T3316] team0: Port device team_slave_1 added [ 37.057863][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.081134][ T3312] hsr_slave_0: entered promiscuous mode [ 37.087420][ T3312] hsr_slave_1: entered promiscuous mode [ 37.093533][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.099278][ T3312] Cannot create hsr debugfs directory [ 37.115728][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.130114][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.137208][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.163518][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.177261][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.184394][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.211091][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.236864][ T3321] team0: Port device team_slave_0 added [ 37.250935][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.258218][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.284937][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.298476][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.305517][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.331528][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.343226][ T3321] team0: Port device team_slave_1 added [ 37.370642][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.377671][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.404044][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.417919][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.424921][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.450961][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.512958][ T3314] hsr_slave_0: entered promiscuous mode [ 37.519026][ T3314] hsr_slave_1: entered promiscuous mode [ 37.525051][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.530792][ T3314] Cannot create hsr debugfs directory [ 37.548502][ T3316] hsr_slave_0: entered promiscuous mode [ 37.554701][ T3316] hsr_slave_1: entered promiscuous mode [ 37.560641][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.566470][ T3316] Cannot create hsr debugfs directory [ 37.631361][ T3321] hsr_slave_0: entered promiscuous mode [ 37.637551][ T3321] hsr_slave_1: entered promiscuous mode [ 37.644419][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.650198][ T3321] Cannot create hsr debugfs directory [ 37.724465][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.734003][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.745989][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.768095][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.824819][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.834376][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.843643][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.853515][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.899855][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.915874][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.924662][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.934735][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.944108][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.975943][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.998788][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.006053][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.014767][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.038060][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.046528][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.053635][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.061741][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.079206][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.088583][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.100015][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.112533][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.134854][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.149936][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.191407][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.209359][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.216541][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.251244][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.261483][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.268713][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.280443][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.305601][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.325836][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.332941][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.346433][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.355580][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.364587][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.371667][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.403203][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.410420][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.427807][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.434913][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.493726][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.528018][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.547550][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.593000][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.600184][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.627209][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.634362][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.659870][ T3311] veth0_vlan: entered promiscuous mode [ 38.676842][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.687913][ T3311] veth1_vlan: entered promiscuous mode [ 38.700657][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.714114][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.753431][ T3311] veth0_macvtap: entered promiscuous mode [ 38.774810][ T3311] veth1_macvtap: entered promiscuous mode [ 38.816092][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.833871][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.861129][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.881015][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.893355][ T3312] veth0_vlan: entered promiscuous mode [ 38.900100][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.909883][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.934175][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945062][ T3312] veth1_vlan: entered promiscuous mode [ 38.992366][ T3312] veth0_macvtap: entered promiscuous mode [ 39.005244][ T3314] veth0_vlan: entered promiscuous mode [ 39.011712][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.028880][ T3312] veth1_macvtap: entered promiscuous mode [ 39.038061][ T3314] veth1_vlan: entered promiscuous mode [ 39.057605][ T3316] veth0_vlan: entered promiscuous mode [ 39.073888][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.090766][ T3479] mmap: syz.1.2 (3479) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.096264][ T3316] veth1_vlan: entered promiscuous mode [ 39.111409][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.133389][ T151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.166199][ T151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.179602][ T151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.189617][ T3314] veth0_macvtap: entered promiscuous mode [ 39.195714][ T3483] loop1: detected capacity change from 0 to 1024 [ 39.206729][ T3483] Zero length message leads to an empty skb [ 39.213385][ T3314] veth1_macvtap: entered promiscuous mode [ 39.235418][ T151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.263912][ T3321] veth0_vlan: entered promiscuous mode [ 39.284033][ T3316] veth0_macvtap: entered promiscuous mode [ 39.291457][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.302296][ T3321] veth1_vlan: entered promiscuous mode [ 39.309836][ T3316] veth1_macvtap: entered promiscuous mode [ 39.330644][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.345025][ T3485] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7'. [ 39.362306][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.390091][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 39.390109][ T28] audit: type=1400 audit(1775123258.786:112): avc: denied { ioctl } for pid=3492 comm="syz.4.8" path="socket:[4083]" dev="sockfs" ino=4083 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.391137][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.430828][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.440111][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.451478][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.460355][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.461935][ T28] audit: type=1400 audit(1775123258.856:113): avc: denied { create } for pid=3492 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.490566][ T28] audit: type=1400 audit(1775123258.876:114): avc: denied { allowed } for pid=3492 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.511250][ T28] audit: type=1400 audit(1775123258.896:115): avc: denied { open } for pid=3492 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.530795][ T28] audit: type=1400 audit(1775123258.896:116): avc: denied { kernel } for pid=3492 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.554700][ T28] audit: type=1400 audit(1775123258.896:117): avc: denied { tracepoint } for pid=3492 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.558760][ C0] hrtimer: interrupt took 124094 ns [ 39.575951][ T28] audit: type=1400 audit(1775123258.946:118): avc: denied { read } for pid=3492 comm="syz.4.8" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.609263][ T3321] veth0_macvtap: entered promiscuous mode [ 39.620072][ T3321] veth1_macvtap: entered promiscuous mode [ 39.628760][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.639100][ T2360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.648150][ T28] audit: type=1400 audit(1775123258.946:119): avc: denied { open } for pid=3492 comm="syz.4.8" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.680311][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.691439][ T28] audit: type=1400 audit(1775123258.946:120): avc: denied { mounton } for pid=3492 comm="syz.4.8" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.702003][ T3496] loop4: detected capacity change from 0 to 512 [ 39.714923][ T28] audit: type=1400 audit(1775123259.026:121): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.725736][ T2360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.757545][ T2360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.763751][ T3496] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 39.779794][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.821585][ T2360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.846263][ T3496] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.847729][ T2360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866109][ T3496] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.8: Block bitmap for bg 0 marked uninitialized [ 39.884785][ T3496] loop4: lost filesystem error report for type 5 error -117 [ 39.891904][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 39.904916][ T2360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.905876][ C1] EXT4-fs (loop4): initial error at time 1775123259: ext4_read_block_bitmap_nowait:517 [ 39.924265][ C1] EXT4-fs (loop4): last error at time 1775123259: ext4_read_block_bitmap_nowait:517 [ 39.928308][ T3496] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 39.948709][ T2360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.958248][ T3496] loop4: lost filesystem error report for type 5 error -117 [ 39.960154][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.965079][ T3496] EXT4-fs (loop4): 1 orphan inode deleted [ 39.983957][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.996521][ T3496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.008107][ T3496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.039819][ T2360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.135400][ T3502] syz.0.1 (3502) used greatest stack depth: 10184 bytes left [ 40.499513][ T3534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 40.508649][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.574073][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.072684][ T3540] loop2: detected capacity change from 0 to 1024 [ 41.084481][ T3540] EXT4-fs: Ignoring removed orlov option [ 41.113332][ T3540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.218870][ T3544] vlan2: entered promiscuous mode [ 41.224166][ T3544] syz_tun: entered promiscuous mode [ 41.326749][ T3546] SELinux: failed to load policy [ 41.341614][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.431955][ T3495] Bluetooth: hci0: command 0x1003 tx timeout [ 41.438050][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.095814][ T3568] loop3: detected capacity change from 0 to 1024 [ 42.331129][ T3574] loop1: detected capacity change from 0 to 1024 [ 42.347959][ T3574] EXT4-fs: Ignoring removed orlov option [ 42.390304][ T3493] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 42.430347][ T3568] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.488592][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.033191][ T3574] syz.1.25 (3574) used greatest stack depth: 9928 bytes left [ 43.049038][ T3568] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 43.083449][ T3568] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: comm syz.3.23: inode #1: comm syz.3.23: iget: illegal inode # [ 43.100566][ T3568] loop3: lost filesystem error report for type 5 error -117 [ 43.102533][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 43.118024][ C1] EXT4-fs (loop3): initial error at time 1775123262: ext4_get_journal_inode:5888 [ 43.128105][ C1] EXT4-fs (loop3): last error at time 1775123262: ext4_get_journal_inode:5888 [ 43.286584][ T3568] EXT4-fs (loop3): no journal found [ 43.298863][ T3568] EXT4-fs (loop3): can't get journal size [ 43.313407][ T3568] EXT4-fs (loop3): failed to initialize system zone (-22) [ 43.715181][ T3590] loop4: detected capacity change from 0 to 512 [ 43.873530][ T3568] EXT4-fs (loop3): mount failed [ 43.954058][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.045575][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.058208][ T3590] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.303307][ T3602] SELinux: failed to load policy [ 44.318388][ T3605] loop1: detected capacity change from 0 to 512 [ 44.405583][ T3609] loop0: detected capacity change from 0 to 128 [ 44.441161][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 44.441176][ T28] audit: type=1400 audit(1775123263.836:179): avc: denied { mount } for pid=3608 comm="syz.0.32" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.496435][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.527895][ T28] audit: type=1400 audit(1775123263.926:180): avc: denied { map } for pid=3610 comm="syz.1.34" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.565734][ T28] audit: type=1400 audit(1775123263.926:181): avc: denied { read write } for pid=3610 comm="syz.1.34" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 44.697695][ T28] audit: type=1400 audit(1775123264.096:182): avc: denied { map } for pid=3608 comm="syz.0.32" path="socket:[4815]" dev="sockfs" ino=4815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.746152][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 44.762901][ T3630] loop3: detected capacity change from 0 to 256 [ 44.795379][ T28] audit: type=1400 audit(1775123264.096:183): avc: denied { read } for pid=3608 comm="syz.0.32" path="socket:[4815]" dev="sockfs" ino=4815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.829980][ T28] audit: type=1400 audit(1775123264.096:184): avc: denied { accept } for pid=3608 comm="syz.0.32" path="socket:[4815]" dev="sockfs" ino=4815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.873134][ T28] audit: type=1400 audit(1775123264.096:185): avc: denied { create } for pid=3608 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.900749][ T28] audit: type=1400 audit(1775123264.156:186): avc: denied { setopt } for pid=3610 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.927488][ T28] audit: type=1400 audit(1775123264.156:187): avc: denied { bind } for pid=3610 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.941132][ T3645] loop2: detected capacity change from 0 to 512 [ 44.950028][ T28] audit: type=1400 audit(1775123264.156:188): avc: denied { setopt } for pid=3628 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.021319][ T3645] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 45.029677][ T3645] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.037193][ T3645] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.39: bg 0: block 248: padding at end of block bitmap is not set [ 45.072782][ T3645] loop2: lost filesystem error report for type 5 error -117 [ 45.081231][ T3645] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.39: Failed to acquire dquot type 1 [ 45.086251][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.086251][ T310] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 45.088882][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 45.120082][ C0] EXT4-fs (loop2): last error at time 1775123264: ext4_validate_block_bitmap:441 [ 45.129638][ T3645] loop2: lost filesystem error report for type 5 error -28 [ 45.129751][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.129751][ T310] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 45.150483][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.150483][ T310] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 45.173341][ T3645] EXT4-fs (loop2): 1 truncate cleaned up [ 45.207295][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.207295][ T310] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 45.225335][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.225335][ T310] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 45.228549][ T3645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.240152][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.240152][ T310] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 45.265289][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.265289][ T310] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 45.279252][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.279252][ T310] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 45.304231][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.304231][ T310] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 45.324573][ T310] kworker/u8:6: attempt to access beyond end of device [ 45.324573][ T310] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 45.374186][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 45.422442][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 45.451208][ T3659] loop3: detected capacity change from 0 to 512 [ 45.463809][ T3659] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.473732][ T3659] EXT4-fs (loop3): 1 truncate cleaned up [ 45.480883][ T3659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.678329][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.770233][ T3645] syz.2.39 (3645) used greatest stack depth: 9160 bytes left [ 45.786972][ T3685] ======================================================= [ 45.786972][ T3685] WARNING: The mand mount option has been deprecated and [ 45.786972][ T3685] and is ignored by this kernel. Remove the mand [ 45.786972][ T3685] option from the mount to silence this warning. [ 45.786972][ T3685] ======================================================= [ 45.822854][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.845281][ T3687] loop2: detected capacity change from 0 to 512 [ 45.849303][ T3685] vlan2: entered allmulticast mode [ 45.857195][ T3685] bridge0: port 3(vlan2) entered blocking state [ 45.865529][ T3685] bridge0: port 3(vlan2) entered disabled state [ 45.888613][ T3685] vlan2: entered promiscuous mode [ 45.896839][ T3688] netlink: 'syz.0.51': attribute type 3 has an invalid length. [ 45.898945][ T3687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.922151][ T3687] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.971310][ T3693] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 46.022875][ T3687] vlan3: entered promiscuous mode [ 46.028067][ T3687] macvlan0: entered promiscuous mode [ 46.032323][ T3694] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 46.047023][ T3702] Cannot find del_set index 1 as target [ 46.124393][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.124366][ T3715] netlink: 68 bytes leftover after parsing attributes in process `syz.4.57'. [ 46.200279][ T3722] loop4: detected capacity change from 0 to 512 [ 46.220209][ T3722] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 46.252666][ T3722] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 46.276373][ T3722] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.60: bad orphan inode 4 [ 46.286680][ T3722] loop4: lost filesystem error report for type 5 error -117 [ 46.287341][ T3722] EXT4-fs (loop4): 1 orphan inode deleted [ 46.295225][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 46.295244][ C0] EXT4-fs (loop4): initial error at time 1775123265: ext4_orphan_get:1423 [ 46.295263][ C0] EXT4-fs (loop4): last error at time 1775123265: ext4_orphan_get:1423 [ 46.324914][ T3722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.484284][ T3737] loop2: detected capacity change from 0 to 128 [ 46.493478][ T3737] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.526898][ T3737] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.544022][ T3737] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.62: bg 0: bad block bitmap checksum [ 46.808371][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.166867][ T3754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.66'. [ 47.177283][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.208403][ T3756] program syz.2.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.299863][ T3763] loop2: detected capacity change from 0 to 512 [ 47.312684][ T3763] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.323319][ T3763] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 47.337934][ T3763] EXT4-fs error (device loop2): __ext4_fill_super:5588: inode #2: comm syz.2.68: iget: special inode unallocated [ 47.395267][ T3763] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 47.395462][ T3763] EXT4-fs (loop2): get root inode failed [ 47.404656][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 47.404680][ C0] EXT4-fs (loop2): initial error at time 1775123266: __ext4_fill_super:5588: inode 2 [ 47.404709][ C0] EXT4-fs (loop2): last error at time 1775123266: __ext4_fill_super:5588: inode 2 [ 47.436619][ T3770] loop1: detected capacity change from 0 to 512 [ 47.443639][ T3770] EXT4-fs: Ignoring removed nobh option [ 47.451136][ T3763] EXT4-fs (loop2): mount failed [ 47.459482][ T3770] ------------[ cut here ]------------ [ 47.465067][ T3770] EA inode 11 i_nlink=1026 [ 47.465101][ T3770] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.69/3770 [ 47.480177][ T3770] Modules linked in: [ 47.484487][ T3770] CPU: 1 UID: 0 PID: 3770 Comm: syz.1.69 Not tainted syzkaller #0 PREEMPT(full) [ 47.493918][ T3770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.504236][ T3770] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 47.510938][ T3770] Code: d4 35 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 54 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 88 c8 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 bf c4 dd 03 66 66 66 66 66 66 2e [ 47.531024][ T3770] RSP: 0018:ffffc9000f73f5a8 EFLAGS: 00010246 [ 47.537711][ T3770] RAX: ffff8881016f0ac8 RBX: ffff88810839cec8 RCX: ffffffff81c02ad8 [ 47.545893][ T3770] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 47.554115][ T3770] RBP: 000000000000000b R08: 000188810839ce7b R09: 0000000000000000 [ 47.562241][ T3770] R10: ffffc9000f73f4d8 R11: 0001c9000f73f4d8 R12: ffff88810839ce78 [ 47.570526][ T3770] R13: ffffffff871dcd00 R14: ffff88810839ce30 R15: 0000000000000001 [ 47.578651][ T3770] FS: 00007fe4e09376c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 47.587691][ T3770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.594472][ T3770] CR2: 00007fe4e1ec5980 CR3: 000000011b688000 CR4: 00000000003506f0 [ 47.603142][ T3770] Call Trace: [ 47.606459][ T3770] [ 47.610032][ T3770] ext4_xattr_set_entry+0x77c/0x1010 [ 47.615497][ T3770] ext4_xattr_ibody_set+0x184/0x3c0 [ 47.620775][ T3770] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 47.626748][ T3770] __ext4_expand_extra_isize+0x246/0x280 [ 47.632568][ T3770] __ext4_mark_inode_dirty+0x29b/0x400 [ 47.638119][ T3770] ext4_evict_inode+0x865/0xe40 [ 47.643137][ T3770] ? __pfx_ext4_evict_inode+0x10/0x10 [ 47.648568][ T3770] evict+0x2af/0x510 [ 47.652684][ T3770] ? __dquot_initialize+0x146/0x7c0 [ 47.658117][ T3770] iput+0x41a/0x580 [ 47.662148][ T3770] ext4_process_orphan+0x1a9/0x1c0 [ 47.667332][ T3770] ext4_orphan_cleanup+0x6a8/0xa00 [ 47.672557][ T3770] ext4_fill_super+0x3414/0x37c0 [ 47.677562][ T3770] ? set_blocksize+0x14c/0x270 [ 47.682563][ T3770] ? setup_bdev_super+0x30e/0x370 [ 47.687689][ T3770] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.693063][ T3770] get_tree_bdev_flags+0x291/0x300 [ 47.698212][ T3770] ? __pfx_ext4_fill_super+0x10/0x10 [ 47.703754][ T3770] get_tree_bdev+0x1f/0x30 [ 47.708230][ T3770] ext4_get_tree+0x1c/0x30 [ 47.713216][ T3770] vfs_get_tree+0x57/0x1d0 [ 47.717855][ T3770] do_new_mount+0x288/0x8d0 [ 47.721133][ T3774] dummy0: entered promiscuous mode [ 47.722439][ T3770] path_mount+0x4d0/0xbc0 [ 47.722468][ T3770] __se_sys_mount+0x28c/0x2e0 [ 47.737365][ T3770] __x64_sys_mount+0x67/0x80 [ 47.742128][ T3770] x64_sys_call+0x2d61/0x3020 [ 47.747189][ T3770] do_syscall_64+0x12c/0x370 [ 47.752110][ T3770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.758773][ T3770] RIP: 0033:0x7fe4e1edda8a [ 47.763408][ T3770] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.764143][ T3774] macsec1: entered allmulticast mode [ 47.783405][ T3770] RSP: 002b:00007fe4e0936e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 47.798329][ T3770] RAX: ffffffffffffffda RBX: 00007fe4e0936ee0 RCX: 00007fe4e1edda8a [ 47.806807][ T3770] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fe4e0936ea0 [ 47.814858][ T3770] RBP: 0000200000000180 R08: 00007fe4e0936ee0 R09: 0000000000800718 [ 47.823049][ T3770] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 47.831479][ T3770] R13: 00007fe4e0936ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 47.839865][ T3770] [ 47.842954][ T3770] ---[ end trace 0000000000000000 ]--- [ 47.849486][ T3774] dummy0: entered allmulticast mode [ 47.856788][ T3763] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.869000][ T3776] SELinux: failed to load policy [ 47.881090][ T3770] EXT4-fs (loop1): 1 orphan inode deleted [ 47.888858][ T3770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.902079][ T3774] dummy0: left allmulticast mode [ 47.910178][ T3770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.919651][ T3774] dummy0: left promiscuous mode [ 47.959299][ T3782] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.994809][ T3782] EXT4-fs (loop4): 1 orphan inode deleted [ 48.001031][ T3782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.013645][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 48.025628][ T36] loop4: lost filesystem error report for type 5 error -117 [ 48.026135][ T3782] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.047920][ T3791] kernel profiling enabled (shift: 9) [ 48.079950][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.72'. [ 48.101328][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.229143][ T3816] SELinux: failed to load policy [ 48.437992][ T3834] EXT4-fs (loop0): 1 orphan inode deleted [ 48.462127][ T36] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 48.497045][ T3834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.548792][ T3829] FAT-fs (loop3): Directory bread(block 199916) failed [ 48.564218][ T36] loop0: lost filesystem error report for type 5 error -117 [ 48.588671][ T3829] FAT-fs (loop3): Directory bread(block 199917) failed [ 48.605803][ T3834] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.635874][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.646203][ T3845] 9p: Could not find request transport: fd^ecdKX9hSZ)O_R"o|i>8) [ 48.651969][ T3829] FAT-fs (loop3): Directory bread(block 199918) failed [ 48.699739][ T3829] FAT-fs (loop3): Directory bread(block 199919) failed [ 48.730716][ T3829] FAT-fs (loop3): Directory bread(block 199920) failed [ 48.752500][ T3829] FAT-fs (loop3): Directory bread(block 199921) failed [ 48.760094][ T3829] FAT-fs (loop3): Directory bread(block 199922) failed [ 48.795107][ T3829] FAT-fs (loop3): Directory bread(block 199923) failed [ 48.817464][ T3855] dvmrp1: entered allmulticast mode [ 48.928211][ T3867] SELinux: failed to load policy [ 49.192483][ T3883] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 49.247435][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.262637][ T3883] bond1: (slave lo): Enslaving as an active interface with an up link [ 49.296333][ T3883] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 49.361561][ T3893] netlink: 332 bytes leftover after parsing attributes in process `syz.3.105'. [ 49.373282][ T3893] netlink: 'syz.3.105': attribute type 9 has an invalid length. [ 49.381006][ T3893] netlink: 160 bytes leftover after parsing attributes in process `syz.3.105'. [ 49.390273][ T3902] set_capacity_and_notify: 7 callbacks suppressed [ 49.390293][ T3902] loop2: detected capacity change from 0 to 4096 [ 49.410005][ T3902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.430333][ T3893] EXT4-fs (loop3): shut down requested (0) [ 49.459530][ T28] kauditd_printk_skb: 258 callbacks suppressed [ 49.459550][ T28] audit: type=1400 audit(1775123268.856:443): avc: denied { remove_name } for pid=3901 comm="syz.2.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.514576][ T3903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 49.556954][ T3910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.110'. [ 49.599582][ T28] audit: type=1400 audit(1775123268.856:444): avc: denied { rename } for pid=3901 comm="syz.2.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.645725][ T28] audit: type=1400 audit(1775123268.866:445): avc: denied { link } for pid=3901 comm="syz.2.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.690018][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.699613][ T28] audit: type=1400 audit(1775123268.936:446): avc: denied { module_request } for pid=3892 comm="syz.3.105" kmod=72746E6C2D6C696E6B2D626F6E64754739B9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 49.723905][ T28] audit: type=1326 audit(1775123268.946:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b537c819 code=0x7ffc0000 [ 49.764364][ T3912] SELinux: failed to load policy [ 49.820067][ T28] audit: type=1326 audit(1775123268.946:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b537c819 code=0x7ffc0000 [ 49.843609][ T3921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3921 comm=syz.4.114 [ 49.891680][ T28] audit: type=1326 audit(1775123268.946:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe2b537c819 code=0x7ffc0000 [ 49.932726][ T28] audit: type=1326 audit(1775123268.946:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b537c819 code=0x7ffc0000 [ 49.972928][ T10] IPVS: starting estimator thread 0... [ 49.991938][ T28] audit: type=1326 audit(1775123268.946:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b537c819 code=0x7ffc0000 [ 50.035258][ T3929] loop1: detected capacity change from 0 to 512 [ 50.049032][ T28] audit: type=1326 audit(1775123268.946:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe2b537c819 code=0x7ffc0000 [ 50.061926][ T3930] IPVS: using max 2256 ests per chain, 112800 per kthread [ 50.083624][ T3929] EXT4-fs (loop1): 1 orphan inode deleted [ 50.100664][ T3938] __nla_validate_parse: 6 callbacks suppressed [ 50.100679][ T3938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'. [ 50.121236][ T151] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:5: Failed to release dquot type 1 [ 50.149112][ T151] loop1: lost filesystem error report for type 5 error -117 [ 50.149305][ T3938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'. [ 50.156714][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 50.156736][ C0] EXT4-fs (loop1): initial error at time 1775123269: ext4_release_dquot:7062 [ 50.156774][ C0] EXT4-fs (loop1): last error at time 1775123269: ext4_release_dquot:7062 [ 50.170335][ T3929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.203466][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.217190][ T3938] erspan0: entered promiscuous mode [ 50.223448][ T3938] gretap0: entered promiscuous mode [ 50.234671][ T3929] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.339639][ T3950] loop0: detected capacity change from 0 to 256 [ 50.362135][ T3952] FAULT_INJECTION: forcing a failure. [ 50.362135][ T3952] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.385886][ T3952] CPU: 1 UID: 0 PID: 3952 Comm: syz.4.123 Tainted: G W syzkaller #0 PREEMPT(full) [ 50.385918][ T3952] Tainted: [W]=WARN [ 50.385925][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.385964][ T3952] Call Trace: [ 50.385973][ T3952] [ 50.385984][ T3952] __dump_stack+0x1d/0x30 [ 50.386019][ T3952] dump_stack_lvl+0x95/0xd0 [ 50.386049][ T3952] dump_stack+0x15/0x1b [ 50.386076][ T3952] should_fail_ex+0x263/0x280 [ 50.386188][ T3952] should_fail+0xb/0x20 [ 50.386335][ T3952] should_fail_usercopy+0x1a/0x20 [ 50.386367][ T3952] _copy_from_user+0x1c/0xb0 [ 50.386402][ T3952] __se_sys_io_uring_setup+0x11f/0x1e0 [ 50.386431][ T3952] __x64_sys_io_uring_setup+0x31/0x40 [ 50.386508][ T3952] x64_sys_call+0x2962/0x3020 [ 50.386544][ T3952] do_syscall_64+0x12c/0x370 [ 50.386573][ T3952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.386603][ T3952] RIP: 0033:0x7fe2b537c819 [ 50.386730][ T3952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.386754][ T3952] RSP: 002b:00007fe2b3dd6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 50.386779][ T3952] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fe2b537c819 [ 50.386796][ T3952] RDX: 0000200000000340 RSI: 0000200000000180 RDI: 00000000000079c1 [ 50.386854][ T3952] RBP: 00007fe2b3dd7090 R08: 0000000000000000 R09: 0000000000000101 [ 50.386873][ T3952] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000340 [ 50.386890][ T3952] R13: 0000200000000000 R14: 00002000000000c0 R15: 00007ffdee9f8da8 [ 50.386917][ T3952] [ 50.617818][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.681587][ T3968] SELinux: failed to load policy [ 50.748472][ T3970] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 50.827636][ T3972] netlink: 'syz.1.128': attribute type 2 has an invalid length. [ 50.845275][ T3972] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 50.877628][ T3972] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 50.897572][ T3977] loop3: detected capacity change from 0 to 512 [ 50.932873][ T3977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.967560][ T3977] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.086454][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.255899][ T3993] Illegal XDP return value 4294967282 on prog (id 34) dev N/A, expect packet loss! [ 51.363594][ T3970] loop0: detected capacity change from 0 to 128 [ 51.376661][ T3970] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.412472][ T3970] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.527357][ T4000] loop2: detected capacity change from 0 to 512 [ 51.548444][ T4000] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.560024][ T3970] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.127: No space for directory leaf checksum. Please run e2fsck -D. [ 51.582699][ T4000] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 51.591350][ T4000] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.134: bad orphan inode 4 [ 51.602628][ T4000] loop2: lost filesystem error report for type 5 error -117 [ 51.605337][ T4000] EXT4-fs (loop2): 1 orphan inode deleted [ 51.612224][ T3970] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.127: Directory block failed checksum [ 51.612837][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 51.637365][ C1] EXT4-fs (loop2): initial error at time 1775123271: ext4_orphan_get:1423 [ 51.645959][ C1] EXT4-fs (loop2): last error at time 1775123271: ext4_orphan_get:1423 [ 51.655025][ T4000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.733609][ T4004] FAULT_INJECTION: forcing a failure. [ 51.733609][ T4004] name failslab, interval 1, probability 0, space 0, times 1 [ 51.761958][ T4004] CPU: 0 UID: 0 PID: 4004 Comm: syz.4.135 Tainted: G W syzkaller #0 PREEMPT(full) [ 51.762067][ T4004] Tainted: [W]=WARN [ 51.762074][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.762086][ T4004] Call Trace: [ 51.762093][ T4004] [ 51.762100][ T4004] __dump_stack+0x1d/0x30 [ 51.762163][ T4004] dump_stack_lvl+0x95/0xd0 [ 51.762194][ T4004] dump_stack+0x15/0x1b [ 51.762231][ T4004] should_fail_ex+0x263/0x280 [ 51.762265][ T4004] ? io_ring_ctx_alloc+0x38/0x670 [ 51.762377][ T4004] should_failslab+0x8c/0xb0 [ 51.762462][ T4004] __kmalloc_cache_noprof+0x5f/0x410 [ 51.762496][ T4004] io_ring_ctx_alloc+0x38/0x670 [ 51.762585][ T4004] ? io_prepare_config+0x5d6/0x600 [ 51.762611][ T4004] io_uring_create+0x50/0x510 [ 51.762644][ T4004] ? memchr_inv+0x30/0x2f0 [ 51.762683][ T4004] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 51.762716][ T4004] __x64_sys_io_uring_setup+0x31/0x40 [ 51.762792][ T4004] x64_sys_call+0x2962/0x3020 [ 51.762825][ T4004] do_syscall_64+0x12c/0x370 [ 51.762924][ T4004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.762947][ T4004] RIP: 0033:0x7fe2b537c819 [ 51.762997][ T4004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.763020][ T4004] RSP: 002b:00007fe2b3dd6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 51.763045][ T4004] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007fe2b537c819 [ 51.763064][ T4004] RDX: 0000200000000340 RSI: 0000200000000180 RDI: 00000000000079c1 [ 51.763082][ T4004] RBP: 00007fe2b3dd7090 R08: 0000000000000000 R09: 0000000000000101 [ 51.763098][ T4004] R10: 0000200000000000 R11: 0000000000000206 R12: 0000200000000340 [ 51.763124][ T4004] R13: 0000200000000000 R14: 00002000000000c0 R15: 00007ffdee9f8da8 [ 51.763142][ T4004] [ 51.983407][ T4008] loop4: detected capacity change from 0 to 512 [ 51.990629][ T3428] IPVS: starting estimator thread 0... [ 52.003747][ T4008] EXT4-fs (loop4): 1 orphan inode deleted [ 52.010182][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.054024][ T4008] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.112108][ T4009] IPVS: using max 2256 ests per chain, 112800 per kthread [ 52.560585][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 1 [ 52.602880][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.612815][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.635467][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.683081][ T4017] SELinux: failed to load policy [ 52.738455][ T4020] loop4: detected capacity change from 0 to 1024 [ 52.749451][ T4020] EXT4-fs (loop4): bad geometry: block count 4096 exceeds size of device (512 blocks) [ 52.803259][ T4020] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.810654][ T4020] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.883895][ T4020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.895962][ T4020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.936103][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.945788][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.958147][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.967456][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.190995][ T4050] SELinux: failed to load policy [ 54.081585][ T4072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4072 comm=syz.2.156 [ 54.100399][ T4074] loop0: detected capacity change from 0 to 512 [ 54.128198][ T4074] EXT4-fs (loop0): 1 orphan inode deleted [ 54.142166][ T310] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:6: Failed to release dquot type 1 [ 54.157515][ T310] loop0: lost filesystem error report for type 5 error -117 [ 54.158122][ T4074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.187476][ T4081] loop2: detected capacity change from 0 to 256 [ 54.199157][ T4079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.204401][ T4081] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.215985][ T4079] block device autoloading is deprecated and will be removed. [ 54.236850][ T4074] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.260240][ T4083] SELinux: failed to load policy [ 54.278178][ T4081] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.303822][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.406079][ T4090] x_tables: duplicate entry at hook 2 [ 54.413302][ T4090] 9p: Bad value for 'rfdno' [ 54.420005][ T4090] netlink: 400 bytes leftover after parsing attributes in process `syz.1.165'. [ 54.493794][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 54.493811][ T28] audit: type=1400 audit(1775123273.896:533): avc: denied { mount } for pid=4099 comm="syz.3.169" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 54.503470][ T4102] loop0: detected capacity change from 0 to 512 [ 54.542238][ T28] audit: type=1326 audit(1775123273.936:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.1.170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4e1edc819 code=0x0 [ 54.558430][ T4102] EXT4-fs (loop0): 1 orphan inode deleted [ 54.575784][ T4102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.618400][ T28] audit: type=1400 audit(1775123274.016:535): avc: denied { read write } for pid=4114 comm="syz.3.171" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.647511][ T28] audit: type=1400 audit(1775123274.016:536): avc: denied { open } for pid=4114 comm="syz.3.171" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.650377][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.722660][ T4128] loop1: detected capacity change from 0 to 512 [ 54.745662][ T4128] EXT4-fs (loop1): 1 orphan inode deleted [ 54.752706][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.766063][ T1613] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.782741][ T4128] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.784728][ T1613] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:7: Failed to release dquot type 1 [ 54.815539][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.859956][ T4141] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 54.871586][ T4141] team0: Device xfrm0 is of different type [ 54.881817][ T4133] loop0: detected capacity change from 0 to 164 [ 54.900076][ T4141] TCP: TCP_TX_DELAY enabled [ 54.909965][ T4141] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 54.918055][ T4141] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.175'. [ 54.959555][ T4145] loop1: detected capacity change from 0 to 128 [ 55.006763][ T4150] loop1: detected capacity change from 0 to 512 [ 55.024677][ T4150] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.032073][ T4150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.044934][ T4150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.057529][ T4150] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.071784][ T28] audit: type=1400 audit(1775123274.466:537): avc: denied { create } for pid=4149 comm="syz.1.177" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.115050][ T4150] x_tables: duplicate underflow at hook 1 [ 55.176110][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.210724][ T4159] loop1: detected capacity change from 0 to 1024 [ 55.221400][ T4159] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 55.261908][ T28] audit: type=1400 audit(1775123274.656:538): avc: denied { bind } for pid=4160 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.302753][ T28] audit: type=1400 audit(1775123274.656:539): avc: denied { setopt } for pid=4160 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.399913][ T4180] loop1: detected capacity change from 0 to 512 [ 55.421103][ T28] audit: type=1400 audit(1775123274.816:540): avc: denied { remount } for pid=4179 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.471426][ T28] audit: type=1400 audit(1775123274.866:541): avc: denied { read write } for pid=4178 comm="syz.2.185" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.519471][ T4181] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 55.578150][ T4194] netlink: 'syz.2.188': attribute type 1 has an invalid length. [ 55.699821][ T4203] syzkaller0: entered promiscuous mode [ 55.705551][ T4203] syzkaller0: entered allmulticast mode [ 56.132348][ T4218] netlink: 292 bytes leftover after parsing attributes in process `syz.3.193'. [ 56.190092][ T4219] loop2: detected capacity change from 0 to 8192 [ 56.467679][ T2360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.515838][ T2360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.595781][ T2360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.634623][ T2360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.694609][ T2360] bridge_slave_1: left allmulticast mode [ 56.700326][ T2360] bridge_slave_1: left promiscuous mode [ 56.707916][ T2360] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.719755][ T2360] bridge_slave_0: left allmulticast mode [ 56.727228][ T2360] bridge_slave_0: left promiscuous mode [ 56.734047][ T2360] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.825278][ T2360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.835721][ T2360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.851310][ T2360] bond0 (unregistering): Released all slaves [ 56.896481][ T2360] hsr_slave_0: left promiscuous mode [ 56.902580][ T2360] hsr_slave_1: left promiscuous mode [ 56.908386][ T2360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.916363][ T2360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.925036][ T2360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.933179][ T2360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.946086][ T2360] veth1_macvtap: left promiscuous mode [ 56.951617][ T2360] veth0_macvtap: left promiscuous mode [ 56.957507][ T2360] veth1_vlan: left promiscuous mode [ 56.962959][ T2360] veth0_vlan: left promiscuous mode [ 57.038968][ T2360] team0 (unregistering): Port device team_slave_1 removed [ 57.049258][ T2360] team0 (unregistering): Port device team_slave_0 removed [ 57.335685][ T2360] IPVS: stop unused estimator thread 0... [ 99.356660][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 99.356682][ T28] audit: type=1400 audit(1775123318.756:551): avc: denied { ioctl } for pid=4351 comm="syz.0.194" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.373053][ T4354] loop1: detected capacity change from 0 to 1764 [ 99.400443][ T4360] loop3: detected capacity change from 0 to 1024 [ 99.405548][ T4359] syz.4.198 uses obsolete (PF_INET,SOCK_PACKET) [ 99.428008][ T4360] EXT4-fs: Ignoring removed bh option [ 99.465550][ T28] audit: type=1400 audit(1775123318.856:552): avc: denied { mount } for pid=4364 comm="syz.0.199" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 99.502393][ T4370] netlink: 'syz.4.198': attribute type 27 has an invalid length. [ 99.530186][ T4360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.562363][ T28] audit: type=1400 audit(1775123318.926:553): avc: denied { write } for pid=4352 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.588744][ T28] audit: type=1400 audit(1775123318.986:554): avc: denied { ioctl } for pid=4355 comm="syz.4.198" path="pid:[4026532373]" dev="nsfs" ino=4026532373 ioctlcmd=0xb709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.623607][ T4359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.198'. [ 99.633930][ T4360] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.642158][ T28] audit: type=1400 audit(1775123319.036:555): avc: denied { add_name } for pid=4358 comm="syz.3.197" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.652386][ T4359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.198'. [ 99.709243][ T4384] netlink: 16 bytes leftover after parsing attributes in process `syz.3.197'. [ 99.756783][ T4383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.820100][ T4383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.910440][ T4366] chnl_net:caif_netlink_parms(): no params data found [ 99.952760][ T4383] loop0: detected capacity change from 0 to 512 [ 99.989781][ T4392] loop4: detected capacity change from 0 to 512 [ 100.031612][ T4383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.046855][ T4383] ext4 filesystem being mounted at /42/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.065353][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.076469][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.094551][ T4366] bridge_slave_0: entered allmulticast mode [ 100.113015][ T4366] bridge_slave_0: entered promiscuous mode [ 100.119470][ T28] audit: type=1400 audit(1775123319.516:556): avc: denied { setattr } for pid=4381 comm="syz.0.201" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.133748][ T4392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.142956][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.161501][ T4392] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.164026][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.181048][ T4366] bridge_slave_1: entered allmulticast mode [ 100.188158][ T4366] bridge_slave_1: entered promiscuous mode [ 100.197668][ T4392] EXT4-fs (loop4): shut down requested (0) [ 100.214222][ T4366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.225902][ T4366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.246447][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.253394][ T4366] team0: Port device team_slave_0 added [ 100.265569][ T4366] team0: Port device team_slave_1 added [ 100.295067][ T28] audit: type=1400 audit(1775123319.696:557): avc: denied { execute } for pid=4403 comm="syz.3.204" name="file0" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.320851][ T4366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.328125][ T4366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.354410][ T4366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.365801][ T4366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.372952][ T4366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.399025][ T4366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.426843][ T4366] hsr_slave_0: entered promiscuous mode [ 100.433205][ T4366] hsr_slave_1: entered promiscuous mode [ 100.439149][ T4366] debugfs: 'hsr0' already exists in 'hsr' [ 100.444942][ T4366] Cannot create hsr debugfs directory [ 100.516839][ T28] audit: type=1400 audit(1775123319.916:558): avc: denied { getattr } for pid=4409 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.553518][ T28] audit: type=1400 audit(1775123319.956:559): avc: denied { read } for pid=4411 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.579206][ T28] audit: type=1400 audit(1775123319.956:560): avc: denied { open } for pid=4411 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.670350][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.688395][ T4422] loop1: detected capacity change from 0 to 128 [ 100.726837][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.795355][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 100.817022][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.859480][ T4366] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.888513][ T4366] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.912983][ T4366] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.944265][ T4366] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.146780][ T4445] loop1: detected capacity change from 0 to 128 [ 101.189438][ T4455] loop3: detected capacity change from 0 to 1024 [ 101.214183][ T4366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.229122][ T4455] EXT4-fs: Ignoring removed orlov option [ 101.248713][ T4366] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.264646][ T4455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.275666][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.284812][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.448632][ T4455] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.209: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 101.464371][ T1613] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.472496][ T1613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.559285][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.569166][ T4366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.593555][ T4366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.599107][ T4471] loop4: detected capacity change from 0 to 128 [ 103.284913][ T4366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.274625][ T4476] loop3: detected capacity change from 0 to 128 [ 105.134465][ T4521] loop3: detected capacity change from 0 to 512 [ 105.171753][ T4366] veth0_vlan: entered promiscuous mode [ 105.205227][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.213'. [ 105.243734][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.280622][ T4366] veth1_vlan: entered promiscuous mode [ 105.393519][ T4521] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.214: bg 0: block 393: padding at end of block bitmap is not set [ 105.457502][ T4366] veth0_macvtap: entered promiscuous mode [ 105.507918][ T4366] veth1_macvtap: entered promiscuous mode [ 105.525710][ T4521] loop3: lost filesystem error report for type 5 error -117 [ 105.529476][ T4521] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 105.536980][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 105.536999][ C1] EXT4-fs (loop3): initial error at time 1775123324: ext4_validate_block_bitmap:441 [ 105.537020][ C1] EXT4-fs (loop3): last error at time 1775123324: ext4_validate_block_bitmap:441 [ 105.625334][ T4366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.683443][ T4366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.708893][ T4521] loop3: lost filesystem error report for type 5 error -117 [ 105.712130][ T4521] EXT4-fs (loop3): 2 truncates cleaned up [ 105.732732][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.741776][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.751080][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 105.751099][ T28] audit: type=1400 audit(1775123325.136:582): avc: denied { getopt } for pid=4502 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.792326][ T4521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.792741][ T4503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.212'. [ 105.835025][ T28] audit: type=1400 audit(1775123325.136:583): avc: denied { write } for pid=4502 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.876763][ T4521] netlink: 'syz.3.214': attribute type 10 has an invalid length. [ 105.892119][ T4521] netlink: 2 bytes leftover after parsing attributes in process `syz.3.214'. [ 105.917289][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.928210][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.950118][ T28] audit: type=1400 audit(1775123325.266:584): avc: denied { bind } for pid=4519 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.973716][ T4521] hsr0: entered promiscuous mode [ 105.997964][ T4521] bridge0: port 3(hsr0) entered blocking state [ 106.021547][ T4521] bridge0: port 3(hsr0) entered disabled state [ 106.051275][ T4521] hsr0: entered allmulticast mode [ 106.074931][ T4521] hsr_slave_0: entered allmulticast mode [ 106.092138][ T4521] hsr_slave_1: entered allmulticast mode [ 106.118424][ T4521] bridge0: port 3(hsr0) entered blocking state [ 106.125614][ T4521] bridge0: port 3(hsr0) entered forwarding state [ 106.216247][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.227127][ T4557] loop4: detected capacity change from 0 to 512 [ 106.255038][ T4557] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.318368][ T4557] loop4: detected capacity change from 0 to 1024 [ 106.325514][ T28] audit: type=1400 audit(1775123325.726:585): avc: denied { setopt } for pid=4560 comm="syz.3.218" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.339448][ T4557] EXT4-fs: Ignoring removed bh option [ 106.395900][ T4557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.401049][ T28] audit: type=1400 audit(1775123325.796:586): avc: denied { getopt } for pid=4551 comm="syz.1.216" lport=52196 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.616960][ T28] audit: type=1400 audit(1775123325.856:587): avc: denied { append } for pid=4556 comm="syz.4.217" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.658620][ T4578] netlink: 5784 bytes leftover after parsing attributes in process `syz.4.217'. [ 106.725046][ T28] audit: type=1400 audit(1775123325.896:588): avc: denied { bind } for pid=4548 comm="syz.2.196" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.746386][ T28] audit: type=1400 audit(1775123325.936:589): avc: denied { create } for pid=4556 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.769111][ T28] audit: type=1400 audit(1775123325.946:590): avc: denied { node_bind } for pid=4548 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 106.806192][ T4578] hsr_slave_1 (unregistering): left promiscuous mode [ 106.943704][ T4581] loop2: detected capacity change from 0 to 4096 [ 106.956931][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.992181][ T28] audit: type=1400 audit(1775123326.006:591): avc: denied { accept } for pid=4556 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.040153][ T4581] EXT4-fs: Ignoring removed bh option [ 107.312360][ T4581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.521136][ T4599] loop1: detected capacity change from 0 to 512 [ 107.549033][ T4600] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 108.298786][ T4599] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 108.799745][ T4611] loop4: detected capacity change from 0 to 4096 [ 108.823628][ T4366] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.874249][ T4611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.002481][ T4621] capability: warning: `syz.4.223' uses 32-bit capabilities (legacy support in use) [ 109.046903][ T4621] program syz.4.223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.601031][ T4647] loop1: detected capacity change from 0 to 128 [ 109.612031][ T4647] loop1: detected capacity change from 0 to 256 [ 109.744663][ T4649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 109.753781][ T4649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.179756][ T4649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.246696][ T4635] loop2: detected capacity change from 0 to 4096 [ 110.254555][ T4635] EXT4-fs: Ignoring removed bh option [ 110.279435][ T4635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.508327][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.614114][ T4654] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 110.693391][ T4654] netlink: 152 bytes leftover after parsing attributes in process `syz.2.224'. [ 110.727738][ T4654] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 110.821971][ T4664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 110.905547][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 110.905562][ T28] audit: type=1400 audit(1775123330.306:597): avc: denied { create } for pid=4659 comm="syz.1.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.953731][ T4366] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.974458][ T28] audit: type=1400 audit(1775123330.326:598): avc: denied { listen } for pid=4671 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.082943][ T4684] SELinux: policydb string SE Li does not match my string SE Linux [ 111.105104][ T4684] SELinux: failed to load policy [ 111.113692][ T4686] x_tables: duplicate underflow at hook 1 [ 111.159579][ T28] audit: type=1400 audit(1775123330.556:599): avc: denied { name_bind } for pid=4685 comm="syz.2.234" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 111.201655][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.246920][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.275559][ T4695] loop4: detected capacity change from 0 to 512 [ 111.367537][ T4695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 111.375764][ T4695] System zones: 1-12 [ 111.443941][ T4695] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.232: corrupted in-inode xattr: e_value size too large [ 111.458762][ T4695] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.459623][ T4695] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.232: couldn't read orphan inode 15 (err -117) [ 111.469019][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 111.469050][ C1] EXT4-fs (loop4): initial error at time 1775123330: ext4_iget_extra_inode:5040: inode 15 [ 111.469103][ C1] EXT4-fs (loop4): last error at time 1775123330: ext4_iget_extra_inode:5040: inode 15 [ 111.507613][ T4695] loop4: lost filesystem error report for type 5 error -117 [ 111.511198][ T4695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.737508][ T28] audit: type=1400 audit(1775123330.576:600): avc: denied { name_connect } for pid=4685 comm="syz.2.234" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 111.762131][ T4700] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 112.198030][ T4725] loop1: detected capacity change from 0 to 512 [ 112.253723][ T4725] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 112.263202][ T4725] System zones: 0-2, 18-18, 34-34 [ 112.287846][ T4725] EXT4-fs (loop1): 1 orphan inode deleted [ 112.305248][ T4725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.321690][ T4725] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.368970][ T3408] IPVS: starting estimator thread 0... [ 112.474138][ T4729] IPVS: using max 1536 ests per chain, 76800 per kthread [ 112.854172][ T4733] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20000 [ 113.001914][ T2360] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 113.017568][ T2360] EXT4-fs error (device loop1): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 113.031954][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.218420][ T28] audit: type=1400 audit(1775123332.616:601): avc: denied { read write } for pid=4767 comm="syz.0.246" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 113.250000][ T4768] loop0: detected capacity change from 0 to 512 [ 113.259445][ T4770] tmpfs: Bad value for 'mpol' [ 113.276647][ T4768] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 113.321628][ T4768] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.246: Invalid inode bitmap blk 4 in block_group 0 [ 113.334582][ T28] audit: type=1400 audit(1775123332.616:602): avc: denied { open } for pid=4767 comm="syz.0.246" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 113.389564][ T4768] loop0: lost filesystem error report for type 5 error -117 [ 113.390202][ T4768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.420819][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 113.433959][ T28] audit: type=1400 audit(1775123332.656:603): avc: denied { mounton } for pid=4769 comm="syz.3.247" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 113.458156][ T4780] macvlan0: entered promiscuous mode [ 113.465839][ T4780] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 113.480351][ T4780] netlink: 'syz.3.248': attribute type 2 has an invalid length. [ 113.510617][ T28] audit: type=1400 audit(1775123332.696:604): avc: denied { ioctl } for pid=4769 comm="syz.3.247" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 113.570161][ T4787] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.620139][ T28] audit: type=1400 audit(1775123332.816:605): avc: denied { read } for pid=4779 comm="syz.3.248" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.007642][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.027871][ T3311] ================================================================== [ 114.036167][ T3311] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 114.043870][ T3311] [ 114.046296][ T3311] read-write to 0xffff888237c26668 of 1 bytes by task 4783 on cpu 0: [ 114.054913][ T3311] folio_add_lru+0xa4/0x1e0 [ 114.059900][ T3311] shmem_get_folio_gfp+0x7b0/0xd60 [ 114.065067][ T3311] shmem_write_begin+0xfc/0x1f0 [ 114.069962][ T3311] generic_perform_write+0x183/0x490 [ 114.075309][ T3311] shmem_file_write_iter+0xc5/0xf0 [ 114.080473][ T3311] __kernel_write_iter+0x319/0x590 [ 114.085609][ T3311] dump_user_range+0xa7d/0xdb0 [ 114.090509][ T3311] elf_core_dump+0x21a2/0x2330 [ 114.095323][ T3311] coredump_write+0xacc/0xdd0 [ 114.100029][ T3311] vfs_coredump+0x26c7/0x3130 [ 114.104920][ T3311] get_signal+0xd80/0xf60 [ 114.109556][ T3311] arch_do_signal_or_restart+0x96/0x450 [ 114.115417][ T3311] exit_to_user_mode_loop+0x6a/0x6f0 [ 114.120841][ T3311] do_syscall_64+0x249/0x370 [ 114.125464][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.131388][ T3311] [ 114.133757][ T3311] read to 0xffff888237c26668 of 1 bytes by task 3311 on cpu 1: [ 114.141665][ T3311] __lru_add_drain_all+0x17e/0x450 [ 114.147243][ T3311] lru_add_drain_all+0x10/0x20 [ 114.152673][ T3311] invalidate_bdev+0x47/0x70 [ 114.157291][ T3311] ext4_put_super+0x610/0x7b0 [ 114.162168][ T3311] generic_shutdown_super+0xee/0x220 [ 114.167488][ T3311] kill_block_super+0x2a/0x70 [ 114.172184][ T3311] ext4_kill_sb+0x42/0x80 [ 114.176542][ T3311] deactivate_locked_super+0x75/0x1c0 [ 114.181940][ T3311] deactivate_super+0x97/0xa0 [ 114.186831][ T3311] cleanup_mnt+0x2bb/0x330 [ 114.191448][ T3311] __cleanup_mnt+0x19/0x20 [ 114.195902][ T3311] task_work_run+0x130/0x1a0 [ 114.200521][ T3311] exit_to_user_mode_loop+0x1f4/0x6f0 [ 114.205919][ T3311] do_syscall_64+0x249/0x370 [ 114.210554][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.216485][ T3311] [ 114.218872][ T3311] value changed: 0x07 -> 0x09 [ 114.223653][ T3311] [ 114.226015][ T3311] Reported by Kernel Concurrency Sanitizer on: [ 114.232196][ T3311] CPU: 1 UID: 0 PID: 3311 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 114.243247][ T3311] Tainted: [W]=WARN [ 114.247063][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.257139][ T3311] ================================================================== [ 114.266972][ T4790] loop4: detected capacity change from 0 to 128 [ 114.284062][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.311427][ T4789] loop4: detected capacity change from 0 to 256