last executing test programs: 5.890452825s ago: executing program 3 (id=4): r0 = getpid() syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)={[{@fat=@errors_continue}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29e, &(0x7f0000000680)="$eJzs3T1rFFsABuCTvQm55JKQ6nKvjQetbIYktUWCJBBcUDQrqCBMyESXHXfDzha7wSLWNoKl/0As7QSxtEnpP7ALQkiVykicfG3AxsREyPM08zLvnOGcGThTzsb1l08by0WynHZCZXogVKZDqGwPhPFQCfvWwrVXz1+/uHv/wc2ZanX2ToxzMwuTUzHGscsfHj57e+Vj559778beD4f18Ucbm1Nf1v9d/3/j28KTehHrRWy2OjGNi61WJ13Ms7hULxpJjLfzLC2yWG8WWbuvX85bKyu9mDaXRkdW2llRxLTZi42sFzut2Gn3Yvo4rTdjkiRxdCRwErU32zs7YXOndN6z4ex5/xfbkU397xC21rq1bq08lv3cfHV2Iv4wdDhqq9v9/Omgnyz72NfXhsLIXj91vN//tFwt+93uxq3qsfHDYek3rx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLK4kHxg/PbnW7tb/KPvlZX6a5+ersxN4F/f1guDR4ZssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBMpequNNM+ztvDrYfdB/gHTEITTC+e9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZ6/+JPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdV0VttpHmetU8rfP2vvPGR6rzXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn9T0AAP//pApp4Q==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x24, 0x400, 0x3, 0x800, 0x2, 0xab, 0x200, 0x7}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20) r2 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x100000, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(r2, 0x24020000) syz_clone(0x50800000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.188189786s ago: executing program 3 (id=13): recvmsg$unix(0xffffffffffffffff, 0x0, 0x120) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x32, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e1f, @empty}, {0x2, 0xfffe, @empty}, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2100000000, 0x400}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.592878661s ago: executing program 3 (id=25): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xfe, 0x7}, 0x2101, 0xa88, 0x8406, 0x5, 0x0, 0x40003c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f00000001c0)) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r0, 0x0) sync() 4.544662363s ago: executing program 32 (id=25): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xfe, 0x7}, 0x2101, 0xa88, 0x8406, 0x5, 0x0, 0x40003c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f00000001c0)) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r0, 0x0) sync() 3.184811494s ago: executing program 2 (id=40): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @remote}, 0x8) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000001190780000e2bfe000000100004e2000089078"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000800)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x80000001}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") 2.966405236s ago: executing program 2 (id=42): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000006000)=[{{&(0x7f00000000c0)=@can={0x1d, r1}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000400)="2d031865e2c12af1234ec118451242b870955ee375b3b2577b2384fb0d59e7cd58337481724a4a83c1b5fa090284dc7d6a40b7", 0x33}], 0x2}}], 0x1, 0x20000810) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000880)={'ip6tnl0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socket$kcm(0x2b, 0x1, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}], 0x20}, 0x122) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socket$kcm(0xa, 0x3, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r0}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r0}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000900)={{r6, r7+60000000}, {0x0, 0x989680}}, &(0x7f0000000940)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xe) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xe) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=@delqdisc={0x200, 0x25, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x4, 0x3}, {0x6, 0xf}, {0xfff3, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}, @TCA_STAB={0x1b0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2, 0x100, 0x7, 0x3, 0x9, 0xac4, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0x200, 0x2]}}, {{0x1c, 0x1, {0x9b, 0x7, 0xac14, 0x8, 0x0, 0xecc1d6c9, 0x2, 0x7}}, {0x12, 0x2, [0x200, 0x7fff, 0x6, 0x7ff, 0xfff9, 0x800, 0x68]}}, {{0x1c, 0x1, {0x1, 0x5, 0x7f, 0xcf, 0x35ed19f15a3d9528, 0x5, 0x7, 0x4}}, {0xc, 0x2, [0x200, 0x9, 0x8, 0x3]}}, {{0x1c, 0x1, {0xe, 0x3, 0xfffc, 0x4, 0x0, 0x1, 0x401, 0x3}}, {0xa, 0x2, [0xcb3a, 0x2, 0xfffb]}}, {{0x1c, 0x1, {0x3, 0x2, 0x8, 0x1, 0x2, 0x0, 0x253, 0x3}}, {0xa, 0x2, [0x0, 0x8, 0xea]}}, {{0x1c, 0x1, {0x3c, 0xb5, 0x0, 0x1, 0x1, 0xfffffffc, 0xde, 0x7}}, {0x12, 0x2, [0xb2c, 0xc7, 0x6, 0x9, 0x8, 0x5, 0xf]}}, {{0x1c, 0x1, {0x7f, 0xb, 0x0, 0x7, 0x0, 0x5f0, 0x1, 0x4}}, {0xc, 0x2, [0x9, 0x3da, 0x4, 0x0]}}, {{0x1c, 0x1, {0x8, 0x5, 0x8, 0x6, 0x1, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x4, 0x7, 0x1ff, 0x7, 0xf1c5]}}, {{0x1c, 0x1, {0x6, 0x5, 0x3, 0x2, 0x0, 0x60beb641, 0x9cb, 0x7}}, {0x12, 0x2, [0x45c, 0x0, 0x8, 0x4, 0x5, 0x9, 0xffff]}}, {{0x1c, 0x1, {0x8, 0x0, 0x4, 0x7fff, 0x0, 0x7, 0xf, 0x3}}, {0xa, 0x2, [0xff, 0x4, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x10}}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x200}, 0x1, 0x0, 0x0, 0x24000010}, 0x10) getdents64(r8, 0x0, 0x0) (async) getdents64(r8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x14c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x17, 0x0, @random="68950237a3116cf820a9f405705b7060e4ba19"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0xc8, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x8, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x0, 0x9c, "7cefc214adee0f3eca3825b0ea10ce7d0308d3d02250f15c0a010364343177e088f0ac20d707170f093931e0b1f5eac9d268e26e1f311025a0e04097616e149a488ef081a133529bd48caaafef78b792b28e9123ce32f2c09e60a727a226b621a3c5af90db7017badaa53e102f12c266f9a376dfd4e80c35cf6f2a37660dba6eee7bdbe43f42d0d73ce30c1eeb697d3ec1d7b3b124d94c12a0484172"}, @mic={0x8c, 0x18, {0xe9f, "99b23cf5a5d3", @long="7500f275ff556799d1176ee22d3cd7f5"}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) 1.574772018s ago: executing program 1 (id=53): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) 1.547215559s ago: executing program 1 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) read$eventfd(r1, &(0x7f0000000680), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300004caf0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = io_uring_setup(0x587b, &(0x7f0000000080)={0x0, 0x243c, 0x20, 0x2, 0x2b9}) io_uring_enter(r3, 0x3061, 0x438a, 0x5d, &(0x7f0000000100)={[0xfff]}, 0x8) 1.36901506s ago: executing program 5 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140600fe80000000000000000000000000001dfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="25c1e456c386e676"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0x40b, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @result={0x0, 0x1}}], 0x1c) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f0000000880)='./file0/file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.124191334s ago: executing program 2 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x28204, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10020, 0x0, 0x6, 0x7ff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) (async) r6 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f00000000000300000004"], 0x78}}, 0x0) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 735.237077ms ago: executing program 4 (id=61): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES8, @ANYRES64=r1], 0xc0}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0/file0\x00', 0x100008a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio}, {@stripe={'stripe', 0x3d, 0xf9}}, {@nodiscard}, {@sb={'sb', 0x3d, 0xd98}}, {@noinit_itable}]}, 0x1, 0x47d, &(0x7f0000000440)="$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") ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r3, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000c06010100000000000000000700000a0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24044811}, 0x40000) read$char_usb(0xffffffffffffffff, &(0x7f0000002840)=""/4103, 0x1007) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde6, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0xfd, 0x0, 0x0, 0x1000000007, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x2000000032, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) clock_gettime(0x8, &(0x7f0000000280)) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x0, 0x8bb9a}, 0xc) close(0x3) bind$can_j1939(r8, &(0x7f0000000140)={0x1d, r7, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) 721.974198ms ago: executing program 2 (id=62): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 654.140932ms ago: executing program 0 (id=63): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x100, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in6=@loopback, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 629.283993ms ago: executing program 1 (id=64): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) 628.533484ms ago: executing program 0 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 597.833675ms ago: executing program 2 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x0, 0x8, 0x800000b, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x4, r1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) close_range(0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 557.084617ms ago: executing program 1 (id=67): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x22020400) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x80}, {r1, 0x1103}, {r1, 0x12200}, {r1, 0x604a}, {r1, 0x700}, {r1, 0x101}, {0xffffffffffffffff, 0x4}, {r1, 0x204}, {r1, 0x2}, {r1, 0x40}], 0xa, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000140)={[0x401]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e16, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 494.333111ms ago: executing program 2 (id=68): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) unshare(0x44000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0xf, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) mprotect(&(0x7f0000176000/0x2000)=nil, 0x2000, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x38, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) unshare(0x44000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0xf, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42}, 0x94) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) mprotect(&(0x7f0000176000/0x2000)=nil, 0x2000, 0x9) (async) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) lseek(r0, 0x2000, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x38, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) 493.663851ms ago: executing program 4 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) 432.585875ms ago: executing program 0 (id=70): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 411.848916ms ago: executing program 4 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4) 370.254399ms ago: executing program 5 (id=72): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xa0, 0x0, 0x9, 0x740b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0x5, 0x1, 0x9, 0x3, 0xfc31, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x88d, 0xfffffffd, 0x0, 'queue0\x00'}) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfd44) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') socket(0x1, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfffffffffffffec5) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0x8, 0x4, 0xfc, 0x6, @vifc_lcl_ifindex, @broadcast}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 369.550449ms ago: executing program 4 (id=73): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x4004804, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @mcast2={0xff, 0x5}, 0x7}, 0x1c) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1}, 0x4048000) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x1f4, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1c9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x141d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6dc}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c4b}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff00000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf3b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_NODE={0x110, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x12, 0x3, "67e0c7f76ddbae61f153d84d7f5c"}, @TIPC_NLA_NODE_ID={0xd7, 0x3, "358324b2a37efd5e7fc491b977585917e3b2b05a590880d47761657773bde5a39c9952bad367f70ac03a94bf6406089e54fad496e348190c9851c9f2b2341a520e7fe46d8f2a1628391a4705ff7530e5bc92e1a449c510271ff6b6203cffb7f8d801c980718dde6f4690e399fac40ad1356733f913d6d971bc89142cdeda9b40e1751919a4897c4beabba8c5e0bf38fb872232e5ef734745700992165bcd4055cecf5971f4867d0bdf9e994ffbe1546180363cef98231bdb919a158adac2420da90ace484ff612d7ebec6a5554a9f89e6d49bb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000800000004000000b47c00", @ANYRES32=0x0, @ANYRES32], 0x50) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r7 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r7, &(0x7f0000000140)=""/248, 0xf8, 0x122, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf}]}, 0x10) 347.5472ms ago: executing program 1 (id=74): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)=0xffff0000) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) (async) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) syz_open_procfs(r2, &(0x7f0000000100)='map_files\x00') (async) r4 = syz_open_procfs(r2, &(0x7f0000000100)='map_files\x00') fchdir(r4) (async) fchdir(r4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@usrjquota}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x785, &(0x7f0000001c00)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZpG06M522k04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNe3DlW0nw8Go0p8b+IuFOIOP3eo3Grq2vzk1lWXmr2R2oLV0aqq2tn5hYmZ8uz5cWx8fOj58bHz42O96zWE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztp4FesDWa1KIiV37F/ciWB8lXYwZeA55AADQWX6ef6B5blaIYhzodJbmBA4AAABeSvXBerf+7HokAAAA8IJJot8ZAAAAAHtr+/8Atu/t3av7YNv5+fWIGG4Vf6BxD3HEoShExJHN5KHbD5KtafBM1m9ExO2JFp+/bu5o7mz0fvNwb45Ir93O15+JVutPurP+RIv1Z2D7uxOeUfv17378A23Wv4tdxvj6s/8X2sa/UV15/1ir+MlO/KRN/Le7jH9z44Nb7Z6rfxFxsuXfn+ShWB2+H2JkZi5r9au1k+6dv07dbV9/xJFH4idJI2rSuf4rXdb/7uZv8+sd4p863vn934o/+NC8/DPxYTOPNCJuNR/z/sauGMcXvv/m0cjJ+nb86Tavf+v3/82d+j/vsv4fvxxc6XIoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANKQRMRRJWtppp2mpFHE0Iv4bR9KsUq2dnqksL07nz0UMRyGdmcvKoxFR3OoneX+s0b7fP7urPx4R//nh8FbQuaxcmqpk0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB1HI2IokrQUEWlE/F5M01Kp31kBAAAAPTfc7wQAAACAPef6HwAAAPa/p73+T3qcBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCvXbxwId/qm/euTeX96aury/OVq2emy9X50sLyVGmqsnSlNFupzGbl0lRl4XHHSyNi7Hwsr4zUytXaSHV17fJCZXmxdnluYXK2fLlceC5VAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KSGGluSliIibbTTtFSK+FdEDEchmZnLyqMR8e+IuFssDOb9sX4nDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQM9VV9fmJ7OsvPRyN+r7q5yuG5FEvABptGl80nxXOo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY/ezD5o9h4jIh3Pr300cpkrbY0lu//dWt/kkR83Nx/9oGJ159nDQAAALDvvfYkg7ev07ev4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpVXV2bn8yy8tIeNuJGv6sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACext8BAAD//zKQuV8=") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@usrjquota}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x785, &(0x7f0000001c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048091) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 347.21939ms ago: executing program 0 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7b}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x7c}}, 0x40000) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(0xee01, 0x0, 0x0) setresgid(0x0, r2, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x94) 262.431595ms ago: executing program 4 (id=76): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="180200"/13], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 225.696227ms ago: executing program 0 (id=77): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) 115.378924ms ago: executing program 5 (id=78): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x103, @empty, 0xb}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000000)=0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f0000000100)=0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000280)=""/116, 0x74, 0x0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80000) sendto$inet6(r0, 0x0, 0x0, 0xb97, 0x0, 0xfffffd76) socket$kcm(0x2, 0x5, 0x106) 109.085154ms ago: executing program 0 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0005"], 0xfdef) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf2567"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a35f200140600fe500000fe80001e0000000000000000000000aa00004e2200"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) (async) r6 = dup3(r5, r4, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r9, &(0x7f0000000340)="08fecd080bf3a39cb59173bf53e3854099f33cb5c427c4d2cfbd62e86574c52061398f395cf7dc2be8c4bf312354ac65dd76dd2b2d0e503db2f98f230f2d0f1221cf216c8ef3ef", 0x47, 0x8840, 0x0, 0x0) (async, rerun: 64) r10 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r8, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x7, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x7, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) (rerun: 32) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004081}, 0x4000845) 1.96767ms ago: executing program 1 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 0s ago: executing program 4 (id=81): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x9, 0x81, 0xd4, 0x7, 0xfffffffb, 0x100, 0xf4e5, 0x5}}}}]}, 0x58}}, 0x20040084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. [ 146.688493][ T29] audit: type=1400 audit(1768900827.455:62): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 146.711896][ T29] audit: type=1400 audit(1768900827.475:63): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 146.714303][ T3321] cgroup: Unknown subsys name 'net' [ 146.741309][ T29] audit: type=1400 audit(1768900827.505:64): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 146.878159][ T3321] cgroup: Unknown subsys name 'cpuset' [ 146.884646][ T3321] cgroup: Unknown subsys name 'rlimit' [ 147.016038][ T29] audit: type=1400 audit(1768900827.775:65): avc: denied { setattr } for pid=3321 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.040041][ T29] audit: type=1400 audit(1768900827.785:66): avc: denied { create } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.061355][ T29] audit: type=1400 audit(1768900827.785:67): avc: denied { write } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.084633][ T29] audit: type=1400 audit(1768900827.785:68): avc: denied { read } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 147.109141][ T29] audit: type=1400 audit(1768900827.805:69): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 147.135393][ T29] audit: type=1400 audit(1768900827.805:70): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 147.159681][ T29] audit: type=1400 audit(1768900827.815:71): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 147.182009][ T3324] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 147.221541][ T3321] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 148.400891][ T3338] chnl_net:caif_netlink_parms(): no params data found [ 148.462752][ T3341] chnl_net:caif_netlink_parms(): no params data found [ 148.500394][ T3339] chnl_net:caif_netlink_parms(): no params data found [ 148.528721][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.537749][ T3338] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.545264][ T3338] bridge_slave_0: entered allmulticast mode [ 148.552303][ T3338] bridge_slave_0: entered promiscuous mode [ 148.578266][ T3338] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.586233][ T3338] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.594003][ T3338] bridge_slave_1: entered allmulticast mode [ 148.601135][ T3338] bridge_slave_1: entered promiscuous mode [ 148.642564][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.650081][ T3341] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.658541][ T3341] bridge_slave_0: entered allmulticast mode [ 148.665730][ T3341] bridge_slave_0: entered promiscuous mode [ 148.676966][ T3338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.694828][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.702104][ T3341] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.709632][ T3341] bridge_slave_1: entered allmulticast mode [ 148.716464][ T3341] bridge_slave_1: entered promiscuous mode [ 148.728131][ T3338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.779425][ T3341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.792592][ T3341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.803281][ T3339] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.811360][ T3339] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.819073][ T3339] bridge_slave_0: entered allmulticast mode [ 148.826010][ T3339] bridge_slave_0: entered promiscuous mode [ 148.834548][ T3338] team0: Port device team_slave_0 added [ 148.840584][ T3335] chnl_net:caif_netlink_parms(): no params data found [ 148.851706][ T3338] team0: Port device team_slave_1 added [ 148.863116][ T3333] chnl_net:caif_netlink_parms(): no params data found [ 148.874106][ T3339] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.882353][ T3339] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.890521][ T3339] bridge_slave_1: entered allmulticast mode [ 148.897723][ T3339] bridge_slave_1: entered promiscuous mode [ 148.934947][ T3338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.943405][ T3338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.972005][ T3338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.983688][ T3341] team0: Port device team_slave_0 added [ 149.003861][ T3338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.011484][ T3338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.038365][ T3338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.055709][ T3341] team0: Port device team_slave_1 added [ 149.063834][ T3339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.087625][ T3339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.118813][ T3341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.125822][ T3341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.152694][ T3341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.182535][ T3341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.189833][ T3341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.216246][ T3341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.228083][ T3339] team0: Port device team_slave_0 added [ 149.252093][ T3339] team0: Port device team_slave_1 added [ 149.257889][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.264979][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.272338][ T3335] bridge_slave_0: entered allmulticast mode [ 149.278797][ T3335] bridge_slave_0: entered promiscuous mode [ 149.287832][ T3338] hsr_slave_0: entered promiscuous mode [ 149.293893][ T3338] hsr_slave_1: entered promiscuous mode [ 149.301127][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.308583][ T3333] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.316084][ T3333] bridge_slave_0: entered allmulticast mode [ 149.322655][ T3333] bridge_slave_0: entered promiscuous mode [ 149.330211][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.337717][ T3333] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.345171][ T3333] bridge_slave_1: entered allmulticast mode [ 149.351910][ T3333] bridge_slave_1: entered promiscuous mode [ 149.363430][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.370827][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.378064][ T3335] bridge_slave_1: entered allmulticast mode [ 149.384844][ T3335] bridge_slave_1: entered promiscuous mode [ 149.422261][ T3339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.429450][ T3339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.456062][ T3339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.485817][ T3333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.495755][ T3339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.502892][ T3339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.529885][ T3339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.542472][ T3335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.554084][ T3341] hsr_slave_0: entered promiscuous mode [ 149.560756][ T3341] hsr_slave_1: entered promiscuous mode [ 149.566785][ T3341] debugfs: 'hsr0' already exists in 'hsr' [ 149.572821][ T3341] Cannot create hsr debugfs directory [ 149.584777][ T3333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.598748][ T3335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.648294][ T3333] team0: Port device team_slave_0 added [ 149.660561][ T3335] team0: Port device team_slave_0 added [ 149.669942][ T3333] team0: Port device team_slave_1 added [ 149.681539][ T3339] hsr_slave_0: entered promiscuous mode [ 149.688149][ T3339] hsr_slave_1: entered promiscuous mode [ 149.694420][ T3339] debugfs: 'hsr0' already exists in 'hsr' [ 149.700323][ T3339] Cannot create hsr debugfs directory [ 149.706839][ T3335] team0: Port device team_slave_1 added [ 149.751656][ T3333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.758772][ T3333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.785866][ T3333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.806925][ T3335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.814056][ T3335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.840389][ T3335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.854386][ T3333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.862261][ T3333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.890719][ T3333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.906703][ T3335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.913815][ T3335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.940591][ T3335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.030571][ T3333] hsr_slave_0: entered promiscuous mode [ 150.036716][ T3333] hsr_slave_1: entered promiscuous mode [ 150.042797][ T3333] debugfs: 'hsr0' already exists in 'hsr' [ 150.048877][ T3333] Cannot create hsr debugfs directory [ 150.059846][ T3335] hsr_slave_0: entered promiscuous mode [ 150.065972][ T3335] hsr_slave_1: entered promiscuous mode [ 150.072196][ T3335] debugfs: 'hsr0' already exists in 'hsr' [ 150.077995][ T3335] Cannot create hsr debugfs directory [ 150.118633][ T3338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.144376][ T3338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.161826][ T3338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.178914][ T3338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.228331][ T3341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.243625][ T3341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.267056][ T3341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.279925][ T3341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.306259][ T3339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.315259][ T3339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.328032][ T3339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.337927][ T3339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.383750][ T3333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 150.396637][ T3333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 150.414426][ T3333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 150.428346][ T3333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 150.465309][ T3335] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 150.475795][ T3335] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 150.486855][ T3335] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 150.499033][ T3335] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 150.517053][ T3338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.533740][ T3341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.562344][ T3338] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.575084][ T3339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.587381][ T3341] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.596562][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.604020][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.620220][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.627674][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.641521][ T2014] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.648870][ T2014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.660161][ T3339] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.681089][ T2014] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.688247][ T2014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.697542][ T2014] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.704931][ T2014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.719100][ T3333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.733533][ T875] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.740772][ T875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.756723][ T3338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.767497][ T3338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.805802][ T3333] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.831322][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.838594][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.854813][ T3341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.873513][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.880819][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.899853][ T3335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.925425][ T3338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.962425][ T3335] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.977045][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.984531][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.002185][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.009371][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.033146][ T3341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.069406][ T3339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.132054][ T3333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.180985][ T3338] veth0_vlan: entered promiscuous mode [ 151.208417][ T3338] veth1_vlan: entered promiscuous mode [ 151.258454][ T3338] veth0_macvtap: entered promiscuous mode [ 151.268902][ T3338] veth1_macvtap: entered promiscuous mode [ 151.280207][ T3338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.300078][ T3338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.328934][ T875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.351772][ T875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.363407][ T3335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.374548][ T875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.394011][ T3339] veth0_vlan: entered promiscuous mode [ 151.402722][ T875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.423256][ T3339] veth1_vlan: entered promiscuous mode [ 151.440947][ T3338] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 151.455793][ T3333] veth0_vlan: entered promiscuous mode [ 151.472049][ T3341] veth0_vlan: entered promiscuous mode [ 151.486366][ T3333] veth1_vlan: entered promiscuous mode [ 151.501445][ T3341] veth1_vlan: entered promiscuous mode [ 151.521201][ T3339] veth0_macvtap: entered promiscuous mode [ 151.554044][ T3339] veth1_macvtap: entered promiscuous mode [ 151.564115][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 151.573929][ T3333] veth0_macvtap: entered promiscuous mode [ 151.585782][ T3333] veth1_macvtap: entered promiscuous mode [ 151.593613][ T3341] veth0_macvtap: entered promiscuous mode [ 151.609239][ T3341] veth1_macvtap: entered promiscuous mode [ 151.626240][ T3335] veth0_vlan: entered promiscuous mode [ 151.643489][ T3339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.659012][ T3333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.676085][ T3339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.694092][ T3333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.702425][ T3335] veth1_vlan: entered promiscuous mode [ 151.714369][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 151.726870][ T875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.750390][ T3341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.763889][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 151.763908][ T29] audit: type=1400 audit(1768900832.525:99): avc: denied { open } for pid=3507 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 151.792650][ T3341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.800208][ T29] audit: type=1400 audit(1768900832.525:100): avc: denied { perfmon } for pid=3507 comm="syz.0.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.821300][ T29] audit: type=1400 audit(1768900832.525:101): avc: denied { kernel } for pid=3507 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 151.841648][ T875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.842640][ T3511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3511 comm=syz.0.7 [ 151.869471][ T875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.882790][ T3508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=3508 comm=syz.0.7 [ 151.906762][ T875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.922822][ T875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.940894][ T3335] veth0_macvtap: entered promiscuous mode [ 151.956916][ T875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.970053][ T3335] veth1_macvtap: entered promiscuous mode [ 151.980083][ T875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.010212][ T875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.038810][ T3335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.053675][ T29] audit: type=1400 audit(1768900832.815:102): avc: denied { map_create } for pid=3518 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 152.079258][ T875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.093407][ T3335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.103236][ T3521] loop3: detected capacity change from 0 to 512 [ 152.103983][ T29] audit: type=1400 audit(1768900832.815:103): avc: denied { bpf } for pid=3518 comm="syz.0.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.131039][ T29] audit: type=1400 audit(1768900832.825:104): avc: denied { map_read map_write } for pid=3518 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 152.151045][ T29] audit: type=1400 audit(1768900832.865:105): avc: denied { prog_load } for pid=3522 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 152.170268][ T29] audit: type=1400 audit(1768900832.865:106): avc: denied { prog_run } for pid=3522 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 152.191524][ T29] audit: type=1400 audit(1768900832.945:107): avc: denied { create } for pid=3515 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 152.211074][ T29] audit: type=1326 audit(1768900832.945:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3515 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ea9acb9 code=0x7ffc0000 [ 152.233076][ T3521] FAT-fs (loop3): error, corrupted file size (i_pos 51, 9216) [ 152.239722][ T875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.250977][ T875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.261916][ T3521] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 152.269954][ T3521] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 152.279088][ T3521] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 152.297138][ T875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.310608][ T3521] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 152.323401][ T875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.342174][ T3517] loop2: detected capacity change from 0 to 1024 [ 152.347917][ T875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.366433][ T3530] capability: warning: `syz.4.10' uses 32-bit capabilities (legacy support in use) [ 152.384517][ T875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.419556][ T875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.458310][ T3517] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.3: Failed to acquire dquot type 0 [ 152.504266][ T3540] loop4: detected capacity change from 0 to 512 [ 152.574217][ T3517] EXT4-fs (loop2): 1 truncate cleaned up [ 152.585523][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.638970][ T3540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.685753][ T3540] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.707543][ T3333] FAT-fs (loop3): error, invalid access to FAT (entry 0x000000c8) [ 152.716364][ T3333] FAT-fs (loop3): error, corrupted file size (i_pos 0, 8960) [ 152.773138][ T3341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.820255][ T3339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.841482][ T3550] loop4: detected capacity change from 0 to 128 [ 152.859491][ T3550] vfat: Unknown parameter './file1' [ 152.921837][ T3557] syz.0.15 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.934175][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 152.963708][ T3559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 152.973159][ T3559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 153.020653][ T3557] netlink: 'syz.0.15': attribute type 7 has an invalid length. [ 153.031559][ T3557] loop0: detected capacity change from 0 to 512 [ 153.038900][ T3557] ======================================================= [ 153.038900][ T3557] WARNING: The mand mount option has been deprecated and [ 153.038900][ T3557] and is ignored by this kernel. Remove the mand [ 153.038900][ T3557] option from the mount to silence this warning. [ 153.038900][ T3557] ======================================================= [ 153.097970][ T3557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.112945][ T3557] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.125666][ T3557] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.15: corrupted xattr block 33: invalid checksum [ 153.139538][ T3557] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 153.148932][ T3557] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.15: corrupted xattr block 33: invalid checksum [ 153.163364][ T3557] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 153.189045][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.198118][ T3557] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.15: corrupted xattr block 33: invalid checksum [ 153.274519][ T3338] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.299564][ T3577] loop0: detected capacity change from 0 to 512 [ 153.333748][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.352643][ T3579] loop2: detected capacity change from 0 to 512 [ 153.368562][ T3577] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.379433][ T3579] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 153.388764][ T3579] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.529491][ T3579] FAT-fs (loop2): FAT read failed (blocknr 128) [ 153.545211][ T3588] loop4: detected capacity change from 0 to 2048 [ 153.579722][ T3588] EXT4-fs: Ignoring removed i_version option [ 153.600375][ T862] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 153.611942][ T3588] EXT4-fs: Invalid want_extra_isize 1 [ 153.652018][ T3338] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.671478][ T3596] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 153.680448][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.797183][ T3583] chnl_net:caif_netlink_parms(): no params data found [ 153.857105][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.865845][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.877579][ T3607] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.901906][ T3583] bridge_slave_0: entered allmulticast mode [ 153.910212][ T3583] bridge_slave_0: entered promiscuous mode [ 153.925599][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.934745][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.943953][ T3583] bridge_slave_1: entered allmulticast mode [ 153.950870][ T3583] bridge_slave_1: entered promiscuous mode [ 153.959132][ T3609] Zero length message leads to an empty skb [ 153.971485][ T3607] wireguard0: entered promiscuous mode [ 153.978706][ T3607] wireguard0: entered allmulticast mode [ 154.009577][ T3583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.023229][ T3583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.051055][ T3583] team0: Port device team_slave_0 added [ 154.068397][ T3583] team0: Port device team_slave_1 added [ 154.095870][ T3612] loop0: detected capacity change from 0 to 2048 [ 154.107177][ T3612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'. [ 154.141244][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.148480][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.174832][ T3583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.188095][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.195540][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.222965][ T3583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.265416][ T3614] loop0: detected capacity change from 0 to 1024 [ 154.324104][ T3614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.328870][ T3583] hsr_slave_0: entered promiscuous mode [ 154.344130][ T3583] hsr_slave_1: entered promiscuous mode [ 154.350723][ T3583] debugfs: 'hsr0' already exists in 'hsr' [ 154.350742][ T3624] tmpfs: Unknown parameter 'µ' [ 154.356806][ T3583] Cannot create hsr debugfs directory [ 154.370420][ T3614] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.384710][ C0] hrtimer: interrupt took 24288 ns [ 154.391257][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.424898][ T3621] syzkaller0: entered promiscuous mode [ 154.430922][ T3621] syzkaller0: entered allmulticast mode [ 154.470940][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.591539][ T37] bridge_slave_1: left allmulticast mode [ 154.597777][ T37] bridge_slave_1: left promiscuous mode [ 154.604937][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.614170][ T37] bridge_slave_0: left allmulticast mode [ 154.620499][ T37] bridge_slave_0: left promiscuous mode [ 154.627027][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.637501][ T3338] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.829678][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.840166][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.850917][ T37] bond0 (unregistering): Released all slaves [ 154.860502][ T3634] syzkaller0: entered promiscuous mode [ 154.866254][ T3634] syzkaller0: entered allmulticast mode [ 154.921248][ T37] hsr_slave_0: left promiscuous mode [ 154.936993][ T37] hsr_slave_1: left promiscuous mode [ 154.945373][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.953135][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.962508][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.970244][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.994044][ T37] veth1_macvtap: left promiscuous mode [ 155.007148][ T37] veth0_macvtap: left promiscuous mode [ 155.014103][ T37] veth1_vlan: left promiscuous mode [ 155.040314][ T37] veth0_vlan: left promiscuous mode [ 155.056602][ T3649] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 155.067529][ T3649] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 155.082018][ T3649] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 155.112048][ T3649] EXT4-fs error (device loop2): ext4_get_journal_inode:5849: inode #32: comm syz.2.42: iget: special inode unallocated [ 155.125088][ T3659] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 155.126824][ T3649] EXT4-fs (loop2): no journal found [ 155.141529][ T3649] EXT4-fs (loop2): can't get journal size [ 155.149713][ T3649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.164433][ T3650] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 16: comm syz.2.42: path /9/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 155.190296][ T3659] FAT-fs (loop0): FAT read failed (blocknr 128) [ 155.247955][ T3662] FAT-fs (loop0): FAT read failed (blocknr 128) [ 155.296536][ T37] team0 (unregistering): Port device team_slave_1 removed [ 155.310632][ T37] team0 (unregistering): Port device team_slave_0 removed [ 155.344852][ T3672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 155.376964][ T3657] netlink: 'syz.4.47': attribute type 29 has an invalid length. [ 155.385882][ T3583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.405325][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 155.414780][ T3676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 155.427229][ T3672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.436040][ T3661] netlink: 'syz.4.47': attribute type 29 has an invalid length. [ 155.445020][ T3583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.484897][ T3583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.514897][ T3684] EXT4-fs: Ignoring removed bh option [ 155.526320][ T3676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.543041][ T3676] bond1: (slave bond0): Enslaving as an active interface with an up link [ 155.555429][ T3583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.573636][ T3684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.607371][ T3684] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.723648][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.779738][ T3583] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.809888][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.817122][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.866670][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.874007][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.907559][ T3323] loop0: p1 p2 p3 p4 [ 155.911872][ T3323] loop0: p1 start 19242 is beyond EOD, truncated [ 155.918918][ T3323] loop0: p2 start 67111941 is beyond EOD, truncated [ 155.925645][ T3323] loop0: p3 start 4294901760 is beyond EOD, truncated [ 155.933972][ T3323] loop0: p4 size 32768 extends beyond EOD, truncated [ 155.979539][ T3716] loop0: p1 p2 p3 p4 [ 155.987299][ T3716] loop0: p1 start 19242 is beyond EOD, truncated [ 155.993787][ T3716] loop0: p2 start 67111941 is beyond EOD, truncated [ 156.001339][ T3716] loop0: p3 start 4294901760 is beyond EOD, truncated [ 156.008499][ T3716] loop0: p4 size 32768 extends beyond EOD, truncated [ 156.029591][ T3583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.110202][ T3323] udevd[3323]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 156.134092][ T3323] udevd[3323]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 156.192978][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b1ade00: rx timeout, send abort [ 156.296347][ T3583] veth0_vlan: entered promiscuous mode [ 156.311933][ T3583] veth1_vlan: entered promiscuous mode [ 156.331669][ T3583] veth0_macvtap: entered promiscuous mode [ 156.340329][ T3583] veth1_macvtap: entered promiscuous mode [ 156.348234][ T3341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.373325][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.404303][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.416184][ T3768] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 156.426973][ T3770] syzkaller0: entered promiscuous mode [ 156.432671][ T3770] syzkaller0: entered allmulticast mode [ 156.445944][ T875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.465765][ T875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.497188][ T875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.506579][ T875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.593098][ T3780] EXT4-fs: Ignoring removed bh option [ 156.599679][ T3782] process 'syz.0.57' launched './file0' with NULL argv: empty string added [ 156.641414][ T3780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.701486][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b1ade00: abort rx timeout. Force session deactivation [ 156.778334][ T3339] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.808219][ T3341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.874586][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 156.874604][ T29] audit: type=1400 audit(1768900837.635:303): avc: denied { bind } for pid=3788 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 156.901380][ T29] audit: type=1400 audit(1768900837.635:304): avc: denied { name_bind } for pid=3788 comm="syz.2.58" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 156.922403][ T29] audit: type=1400 audit(1768900837.635:305): avc: denied { node_bind } for pid=3788 comm="syz.2.58" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 156.958057][ T29] audit: type=1400 audit(1768900837.715:306): avc: denied { cpu } for pid=3788 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 156.978067][ T29] audit: type=1400 audit(1768900837.715:308): avc: denied { write } for pid=3788 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.998523][ T29] audit: type=1400 audit(1768900837.715:307): avc: denied { bind } for pid=3788 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.018581][ T29] audit: type=1400 audit(1768900837.715:309): avc: denied { name_bind } for pid=3788 comm="syz.2.58" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 157.040827][ T29] audit: type=1400 audit(1768900837.715:310): avc: denied { node_bind } for pid=3788 comm="syz.2.58" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 157.064826][ T3789] netlink: 96 bytes leftover after parsing attributes in process `syz.2.58'. [ 157.120578][ T29] audit: type=1400 audit(1768900837.855:311): avc: denied { create } for pid=3793 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.141533][ T29] audit: type=1400 audit(1768900837.865:312): avc: denied { create } for pid=3793 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.252403][ T3807] set_capacity_and_notify: 5 callbacks suppressed [ 157.252423][ T3807] loop4: detected capacity change from 0 to 512 [ 157.327010][ T3807] pim6reg: entered allmulticast mode [ 157.333474][ T3802] pim6reg: left allmulticast mode [ 157.349664][ T3809] syzkaller0: entered promiscuous mode [ 157.355399][ T3809] syzkaller0: entered allmulticast mode [ 157.609909][ T3826] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 157.623444][ T3830] loop1: detected capacity change from 0 to 2048 [ 157.650716][ T3826] SELinux: failed to load policy [ 157.735037][ T3829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.74'. [ 157.745659][ T3835] syz_tun: entered allmulticast mode [ 157.761419][ T3826] pimreg: entered allmulticast mode [ 157.768158][ T3825] syz_tun: left allmulticast mode [ 157.827181][ T3848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 157.852515][ T3847] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 157.930634][ T3853] syzkaller0: entered promiscuous mode [ 157.936774][ T3853] syzkaller0: entered allmulticast mode [ 157.955702][ T3847] ================================================================== [ 157.964157][ T3847] BUG: KCSAN: data-race in bcm_rx_setup / bcm_rx_update_and_send [ 157.972024][ T3847] [ 157.974383][ T3847] read to 0xffff88811adccc40 of 16 bytes by interrupt on cpu 1: [ 157.982321][ T3847] bcm_rx_update_and_send+0x37f/0x420 [ 157.987749][ T3847] bcm_rx_handler+0x2b0/0x580 [ 157.992566][ T3847] can_rcv_filter+0x3c6/0x4f0 [ 157.997316][ T3847] can_receive+0xfb/0x1c0 [ 158.001839][ T3847] canfd_rcv+0xed/0x190 [ 158.006275][ T3847] __netif_receive_skb+0x120/0x270 [ 158.011524][ T3847] process_backlog+0x228/0x420 [ 158.016420][ T3847] __napi_poll+0x5f/0x300 [ 158.020963][ T3847] net_rx_action+0x452/0x930 [ 158.025761][ T3847] handle_softirqs+0xb9/0x280 [ 158.030483][ T3847] run_ksoftirqd+0x1c/0x30 [ 158.035358][ T3847] smpboot_thread_fn+0x32a/0x510 [ 158.040516][ T3847] kthread+0x488/0x510 [ 158.044876][ T3847] ret_from_fork+0x148/0x280 [ 158.049625][ T3847] ret_from_fork_asm+0x1a/0x30 [ 158.054525][ T3847] [ 158.056876][ T3847] write to 0xffff88811adccc40 of 16 bytes by task 3847 on cpu 0: [ 158.064709][ T3847] bcm_rx_setup+0x7c5/0xe00 [ 158.069622][ T3847] bcm_sendmsg+0x1bb/0x4a0 [ 158.074100][ T3847] __sock_sendmsg+0x145/0x170 [ 158.078905][ T3847] ____sys_sendmsg+0x31e/0x4a0 [ 158.083834][ T3847] ___sys_sendmsg+0x195/0x1e0 [ 158.090830][ T3847] __x64_sys_sendmsg+0xd4/0x160 [ 158.095734][ T3847] x64_sys_call+0x17ba/0x3000 [ 158.100547][ T3847] do_syscall_64+0xc0/0x2a0 [ 158.105096][ T3847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.111024][ T3847] [ 158.113389][ T3847] Reported by Kernel Concurrency Sanitizer on: [ 158.119664][ T3847] CPU: 0 UID: 0 PID: 3847 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.129423][ T3847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.139964][ T3847] ================================================================== [ 158.211240][ T3817] loop2: detected capacity change from 0 to 512 [ 158.239110][ T3817] EXT4-fs (loop2): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE