last executing test programs: 21.577820676s ago: executing program 0 (id=134): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x8}}}}}}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8, 0xffe0}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0xc, 0xf, 0x6, 0x6, 0x1, 0x8, 0x2, 0x10, 0x4], 0x7, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x1, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) 21.444285484s ago: executing program 0 (id=137): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x3, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8) sendmmsg$sock(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002300)="dc64c739", 0x4}], 0x1}}], 0x1, 0x20000040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x98}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 21.386066428s ago: executing program 0 (id=138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local, r3}, 0xc) 21.384815098s ago: executing program 0 (id=139): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x4002, 0x10000, 0x20000, 0x4, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000002ffdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r3], 0x44}}, 0x8000000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500"], 0x78}, 0x1, 0x0, 0x0, 0x44091}, 0x24000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4616, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0xb, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x128) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) remap_file_pages(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0xff, 0x20000) 21.112369344s ago: executing program 0 (id=143): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20.419958544s ago: executing program 0 (id=150): syz_emit_ethernet(0x102, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "a4a2d8", 0xcc, 0x3c, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x88, 0x8, 0x4, 0x4, 0x6, 0x10, 0x0, [@private2, @remote, @dev={0xfe, 0x80, '\x00', 0x20}, @local]}, @routing={0x89, 0x0, 0x1, 0xc4}, @srh={0x3b, 0x2, 0x4, 0x1, 0x9, 0x38, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}], "dd3c0d4f01addd178699cf1cdfb945278fb3eddd006fa15c75ea43fd0daa654fbe4e39a92d001779b53fc5adf6b97dcf7c5482654b03013af5014971b86b482e89b71972b1e45bfcafb8f37a4953c95a7206ccb696990626f55b13e56a4667f712ccf999"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x5010}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x804) 20.389428666s ago: executing program 32 (id=150): syz_emit_ethernet(0x102, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "a4a2d8", 0xcc, 0x3c, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, {[@srh={0x88, 0x8, 0x4, 0x4, 0x6, 0x10, 0x0, [@private2, @remote, @dev={0xfe, 0x80, '\x00', 0x20}, @local]}, @routing={0x89, 0x0, 0x1, 0xc4}, @srh={0x3b, 0x2, 0x4, 0x1, 0x9, 0x38, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}], "dd3c0d4f01addd178699cf1cdfb945278fb3eddd006fa15c75ea43fd0daa654fbe4e39a92d001779b53fc5adf6b97dcf7c5482654b03013af5014971b86b482e89b71972b1e45bfcafb8f37a4953c95a7206ccb696990626f55b13e56a4667f712ccf999"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x5010}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x804) 10.370757622s ago: executing program 1 (id=239): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @remote, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddr={0x54, 0x16, 0x4, 0x70bd2d, 0x25dfdbfd, {0xa, 0x8, 0x8, 0xfe, r0}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xf}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1000}, @IFA_FLAGS={0x8, 0x8, 0x480}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x12, 0x20, 0x70bd2b, 0x25dfdbfe, {0x23, 0x2, 0x1, 0x6, {0x4e24, 0x4e21, [0x80, 0x3, 0x9, 0x6], [0x7, 0x1400, 0x4, 0xe97], 0x0, [0x3, 0x8]}, 0x0, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "79fc42ec3899701956c4a21215c23e43ca9ed9184a9f1c87dc5b641f0e9e3ae8ecc7847341f3893fa78d01ea508ced8d0df477778340f4d3"}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000380)={0x10001, 0x8, "d756664833a43852"}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) r4 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x4, 0x1, 0x4, 0x3, 0x0, 0x8, 0x1400, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000003c0), 0xa}, 0x0, 0x1, 0x2, 0x8, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xa, 0x0, 0x291f}, r3, 0x8, 0xffffffffffffffff, 0x10) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000500)={'veth1_to_batadv\x00', {0x2, 0x0, @initdev}}) close_range(r1, r4, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', r0, 0x29, 0x9, 0xcd, 0x5d7a, 0x46, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x7800, 0x81, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000640)={'sit0\x00', r0, 0xf800, 0x20, 0x10, 0x0, {{0x18, 0x4, 0x3, 0x9, 0x60, 0x64, 0x0, 0x3, 0x2f, 0x0, @multicast1, @remote, {[@rr={0x7, 0xb, 0x4d, [@loopback, @local]}, @end, @end, @timestamp={0x44, 0x18, 0xb8, 0x0, 0xd, [0x3, 0xfffffffc, 0x401, 0x1, 0x7fffffff]}, @end, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x22, 0x3, [{0x2, 0x2}, {0x7, 0xe, "46f9dfceee38338fe44707c3"}, {0x1, 0xc, "ddaf8c2c27c1f1058309"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) getpeername$packet(r2, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8880}, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000cc0)={0x4, &(0x7f0000000c80)=[{0x800, 0x0, 0x9, 0x101}, {0x3, 0xa3, 0x9, 0xfffffffe}, {0x0, 0x1, 0x1, 0xee}, {0x8, 0x2, 0x7, 0x9}]}) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000d00)={0x0, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000d40)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000dc0)={'team_slave_1\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000f00)={r1, &(0x7f0000000e00)='vlan1\x00', 0x141400, &(0x7f0000000e40)={@_ha_fsid={[0x3, 0x7]}, {0xa, 0x0, 0x7, 0x7}}, 0xfffffffe, &(0x7f0000000e80)={@_ha_fsid}, &(0x7f0000000ec0)=0x4}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000f40)) syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSETMODE(r12, 0x4b3a, 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000fc0)={0x8, &(0x7f0000000f80)=[{0x2, 0x2, 0x8, 0x5}, {0x8, 0x0, 0xf1, 0x392}, {0x8001, 0x5, 0x39, 0x4}, {0xfff8, 0x6, 0x6, 0x16a4f6a3}, {0x7, 0x9, 0x3, 0x7}, {0x1, 0x4, 0x10, 0x101}, {0x4, 0xe4, 0x2, 0x3}, {0x8, 0x3, 0x3, 0xfff}]}) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40054}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r11, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x20, 0x140d, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x20004011) openat(r11, &(0x7f0000001240)='./file0\x00', 0x82000, 0x40) syz_open_procfs(r10, &(0x7f0000001280)='sched\x00') 10.262632269s ago: executing program 1 (id=244): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100246a218be35509df0c000280081f02003000"/56], 0x50}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 10.162865965s ago: executing program 1 (id=246): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000540)=""/241, 0xf1, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') writev(r6, &(0x7f0000000400)=[{&(0x7f0000000000)='3', 0x1}], 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x80, 0x1, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x25, &(0x7f0000000200)=@ringbuf={{}, {}, {}, [@alu={0x3, 0x1, 0xb, 0x9, 0x4, 0x4, 0x10}, @printk={@li}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0xd3, &(0x7f0000000380)=""/211, 0x82000, 0x4, '\x00', r2, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x1ff, 0x932}, 0x10, r5, r6, 0x6, &(0x7f0000000840)=[r7, r8], &(0x7f0000000880)=[{0x0, 0x1, 0x10, 0xb}, {0x2, 0x5, 0x8}, {0x4, 0x5, 0x6, 0x6}, {0x3, 0x1, 0x5, 0x5}, {0x5, 0x2, 0x8, 0x3}, {0x5, 0x4, 0x8}], 0x10, 0x4}, 0x94) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) socket$netlink(0x10, 0x3, 0x1d) 9.862880142s ago: executing program 1 (id=249): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000001c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000280)=0x401, 0x4) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)="f1717194e54c186a5e1ed3c9d7213985", 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24004044) io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x56633bd1cf1d94b2) io_submit(r2, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x3, r3, 0x0, 0x0, 0x400a00}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f00000000c0)="e321fb92d5", 0x5, 0x7ff, 0x0, 0x2}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000480)={[{@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@noload}, {@quota}, {@nouser_xattr}, {@stripe={'stripe', 0x3d, 0x200}}, {@dax_always}, {@barrier}]}, 0x1, 0x50a, &(0x7f0000000600)="$eJzs3E9rHOcZAPBnZiVXlt3aLm5pe7GoC3ZbuvpHoe7JLu2pdWmpoZQejGqvZKGVVpZWYIke5G+QQ3wKOeSci3NIIJAQQ0ggx+QQHPINQowxdg4Gxwoz2lXk1W4kxZIGPL8fzM478679zuyjZ3ffR6MJoLSGsock4mhEvB8Rx7o9YWh9dWv89rVsSWJt7V/3k+yfxer47Wvtpyat9ZHsIY0YiIhPLiTxv2TruIvLKzMT9XptobU93JydH15cXvnd9OzEVG2qNjf6+/HxkZFzYyN/2LNzff3JXz9/4+6fpm6+9PG7/25++d8kzufnHR3nsVeGYqj1mvTHLzv6/rLXgxWkEhF9EfGTTfuSvgIPiF1px68/z/9jUQnBg7JYy/XqPbUGvMiSKPoIgGK0P+mz+W97ObAvHxTu3oX1CeBqq7ZzayP+fZHm64F8bjj4MHlmZph0zPm/r6GIuHH3gzezJfapDkNvqzcj4mfd8j/Ja2PH8ypeFv/Klvifbq2z5ex6yS9/zq92Mf5Q5/GI/4F6nvj/elP8q5vi/5tdjC/+AAAAB+POhYgY6Tb/S7NpYcTG/O/Z+k82N/zpHoxv/lesdv3v1pb6X7pR/6v0qP/1/LVxh/9cetLzqZvrf9mSjd+uBbL/7t2M+EXX+LfjPZDHujP+2c/G8A7HuN7884e9+sS/WGuvRZyJ7vFvS777+szhyel6bWT9sesYJ1+5/c9e44t/sbL8H+wR/+3e/7/e4Rh/P//R/V59m+P/zpO339oa//SLQ8ml/IfxUGvPjYlmc2E04lDyt637x3Zz9uXTfo3ar2EW/7Onu3/+/zhft9//t9b/n7bW2f7HrWtIs/aD1rfGrO9RRCy/d73n5c7bx5/9lMX/6jb53+3zP9v31Q7H+HTy1f/36hN/AAAAAAAAAHh+aX4tb5JWN9ppWq2u38PvZAym9cZi87eTjaW5q9H6e9D+tH2l17H17STbHs3b326PdWyPR8SJiHi5cjjfrl5p1K8WffJQckc68v9RZT3/gZJwy08oL/kP5SX/obzkP5SX/Ifykv9QXvIfykv+Q3nJfygv+Q/lJf+hlP5x8WK2rLXv+znXmJqeuTZ/bmykOrt0pXqlsTBfnWo0pvK/2Jnd/v+rNxrzo2OxdGO4WVtsDi8ur1yebSzNNS/n942+XOs/gHMCdubEqTufJRGx+sfD+RKb7qctV+HFVin6AIDCmPpDefmODyTb9A/06qjv/bEAByMt+gCAwpz5ufo/lJX6P5SX+j+Ul+/4gPo/lI/6P5TX4vLKzES9XlvQ0NDQ2GgU/c4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXlpcXpmZqNdrC/vYKPocge4GH/bFpU3bSUQ8ba37IuJxRPRHRGU14kFEDGR9qxGPOtoAAAAAAABA8fyWHgDK52i+JGk1ItK8nabVasQPI+J49CeT0/XaSET8KCLuVvp/kG2PFn3QwJ74JgAA///6CBoT") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() kcmp(r5, r6, 0x300, 0xffffffffffffffff, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/213, 0xd5) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="00012abd7000ffdbdf251700000053fe0380080003009d8900000800020009000000080003000600000008000100090000000800030008770000080001000200000008000300080000000800020002000000080002000b00000008000200ffffff7f280001800d0001007564703a73797a3000000000140002800800010010000000080001001b00000040000580f7fe0280080001004a05000008000400000000000800010012000000080003000600000008000400feffffff080003000d00000008000100756470003c000380080002000000000e080001000300000008000300000000000800010006000000080002000200000008000200ffffffff08000200080000000c0005800800010075647000"], 0x118}, 0x1, 0x0, 0x0, 0x20000810}, 0x4080) 9.577529539s ago: executing program 1 (id=250): ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioperm(0x2, 0x4, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8.817125494s ago: executing program 1 (id=256): socket(0x2d, 0x2, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xd63d, 0x400, 0x0, 0x15}, &(0x7f0000000100), &(0x7f0000000300)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x8000000, 0x80, 0x0, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f787ba3d1be02d1555ef00ff000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)='X', 0x1}, {0x0}], 0x2}}], 0x1, 0x20008800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004051}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 8.735740578s ago: executing program 33 (id=256): socket(0x2d, 0x2, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xd63d, 0x400, 0x0, 0x15}, &(0x7f0000000100), &(0x7f0000000300)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x8000000, 0x80, 0x0, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="f787ba3d1be02d1555ef00ff000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)='X', 0x1}, {0x0}], 0x2}}], 0x1, 0x20008800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r6, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004051}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 3.849458864s ago: executing program 3 (id=292): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100246a218be35509df0c000280081f02003000"/56], 0x50}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {0x0}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 3.464391957s ago: executing program 3 (id=294): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 3.390652301s ago: executing program 3 (id=296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.214304642s ago: executing program 4 (id=300): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0x5, 0x5, 0x1, 0xc, 0x0, 0x0, 0x1420, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x1e068, 0x8, 0x2, 0x8, 0x5da3, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x1, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, r1, 0x0, 0xe, 0x9}, 0x2b743aae, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3}) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214", 0x9) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f00000d3000/0x1000)=nil, 0x1000, 0x0) futex_waitv(&(0x7f0000005a00)=[{0x7, &(0x7f0000000000)=0x7, 0x2}], 0x1, 0x0, &(0x7f0000005dc0)={0x77359400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) 3.189714613s ago: executing program 3 (id=301): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000780)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000900)={r0, &(0x7f0000000480)='(%/\x00', 0x2, &(0x7f0000000840)={@_ha_fsid={[0x0, 0x1ff]}, {0x9, 0x5, 0x8, 0xb}}, 0x2, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x81}) r1 = dup(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4046840}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2020) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbdf55c5ca5705acd}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0xfcfb, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xae0a}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) 2.748548709s ago: executing program 3 (id=303): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x2006}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x810) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) 2.573345409s ago: executing program 6 (id=304): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 2.503299623s ago: executing program 6 (id=305): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 2.470547565s ago: executing program 6 (id=306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='a\x00'/20, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="040000000300000004000000000000000000000000000000000000002af6e2525bc2ec293eb3e15a73c7732c23e27c1144d9f1656742e95a7438d2442b8fe40637b88e9faed63e349a522c794e385520b5a4b677848f10ec347777ac2a1219a232c66335600bc2a6607c4574559ff2d1dbd788c9d02ac75e5bb1c8df9e1efdb62a607533da39ca827d14f6c50fbdea1693e67ba2e162e68aceb2079b889401b0fb26b4ea7d7678dd4e706122c16782940eac1c5ab1a7b41582084e9ebf2625d6eace6a11d05155"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000100), &(0x7f0000000240)}, 0x20) r2 = socket(0x28, 0x5, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xf5, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x5, 0x0, 0x0, 0x0, 0x5923}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x1, 0xf611}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0xc, 0x3, 0x2, 0x0, 0x2, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xbee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, 0x0, 0x64, 0x183000, 0x12345}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.354266752s ago: executing program 4 (id=307): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) (fail_nth: 1) 2.079951998s ago: executing program 2 (id=311): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x9325}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000540)=""/241, 0xf1, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)='3', 0x1}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x25, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x3, 0x1, 0xb, 0x9, 0x4, 0x4, 0x10}, @printk={@li}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0xd3, &(0x7f0000000380)=""/211, 0x82000, 0x4, '\x00', r3, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x1ff, 0x932}, 0x10, r6, r7, 0x6, &(0x7f0000000840)=[0xffffffffffffffff, r8], &(0x7f0000000880)=[{0x0, 0x1, 0x10, 0xb}, {0x2, 0x5, 0x8}, {0x4, 0x5, 0x6, 0x6}, {0x3, 0x1, 0x5, 0x5}, {0x5, 0x2, 0x8, 0x3}, {0x5, 0x4, 0x8}], 0x10, 0x4}, 0x94) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) 2.060348319s ago: executing program 4 (id=313): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000780)) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000900)={r0, &(0x7f0000000480)='(%/\x00', 0x2, &(0x7f0000000840)={@_ha_fsid={[0x0, 0x1ff]}, {0x9, 0x5, 0x8, 0xb}}, 0x2, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x81}) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4046840}, 0x40) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000180)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c, 0x0}, 0x4048043) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2020) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbdf55c5ca5705acd}, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xfcfb, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xae0a}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) 1.956334176s ago: executing program 2 (id=314): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x9325}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000540)=""/241, 0xf1, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)='3', 0x1}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x25, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x3, 0x1, 0xb, 0x9, 0x4, 0x4, 0x10}, @printk={@li}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0xd3, &(0x7f0000000380)=""/211, 0x82000, 0x4, '\x00', r3, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x1ff, 0x932}, 0x10, r6, r7, 0x6, &(0x7f0000000840)=[0xffffffffffffffff, r8], &(0x7f0000000880)=[{0x0, 0x1, 0x10, 0xb}, {0x2, 0x5, 0x8}, {0x4, 0x5, 0x6, 0x6}, {0x3, 0x1, 0x5, 0x5}, {0x5, 0x2, 0x8, 0x3}, {0x5, 0x4, 0x8}], 0x10, 0x4}, 0x94) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) 1.942877146s ago: executing program 5 (id=315): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217", 0x58, 0x440dc, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="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", 0x1c1}], 0x1, 0x0, 0x4102}, 0x10) 1.889375979s ago: executing program 2 (id=316): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x9325}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000540)=""/241, 0xf1, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)='3', 0x1}], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x80, 0x1, 0x40, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r8}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x25, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x3, 0x1, 0xb, 0x9, 0x4, 0x4, 0x10}, @printk={@li}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0xd3, &(0x7f0000000380)=""/211, 0x82000, 0x4, '\x00', r3, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x1ff, 0x932}, 0x10, r6, r7, 0x6, &(0x7f0000000840)=[r8, r9], &(0x7f0000000880)=[{0x0, 0x1, 0x10, 0xb}, {0x2, 0x5, 0x8}, {0x4, 0x5, 0x6, 0x6}, {0x3, 0x1, 0x5, 0x5}, {0x5, 0x2, 0x8, 0x3}, {0x5, 0x4, 0x8}], 0x10, 0x4}, 0x94) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) socket$netlink(0x10, 0x3, 0x1d) 1.816099364s ago: executing program 5 (id=317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x12160) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x8}}}}}}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r8, {0x8, 0xffe0}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0xc, 0xf, 0x6, 0x6, 0x1, 0x8, 0x2, 0x10, 0x4], 0x7, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x1, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r11, {0xc}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) 1.719722579s ago: executing program 4 (id=318): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0x5, 0x5, 0x1, 0xc, 0x0, 0x0, 0x1420, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x1e068, 0x8, 0x2, 0x8, 0x5da3, 0x10001, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x1, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, 0x0, r1, 0x0, 0xe, 0x9}, 0x2b743aae, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x3}) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214", 0x9) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f00000d3000/0x1000)=nil, 0x1000, 0x0) futex_waitv(&(0x7f0000005a00)=[{0x7, &(0x7f0000000000)=0x7, 0x2}], 0x1, 0x0, &(0x7f0000005dc0)={0x77359400}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) 1.678785192s ago: executing program 5 (id=319): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) keyctl$setperm(0x5, 0x0, 0x4000410) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x1, 0x60000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000000)={0xa0000001}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff], [], 'vlan0\x00', 'veth1_to_team\x00', {}, {}, 0x84, 0x3, 0x2, 0x4}, 0x0, 0x120, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4], [], 0xfe}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xffffffff, 0x1, 0x800, 0x0, 0x0, "970dd1c20589c19510188b37c579346f2844076b73fd01eda42df2c629c97e30d4874de8a68d50e97f1c05c48107f34d76ff881fad6904bf8a09290d31eeb067"}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x0, 0x2, 0x80000000}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x801}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r6 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11004, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) socket(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x7) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) close(r0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r8, 0x400, 0x1) r9 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r5, 0x6, {0x0, 0xf0, 0x4}, 0xfe}, 0x18, &(0x7f0000000200)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000001c0)) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000180)={[{@discard}, {@nobarrier}, {@noblock_validity}]}, 0x2c, 0x539, &(0x7f0000000540)="$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") accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0xb5, 0x0, 0x0) 1.265507866s ago: executing program 6 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000030703e62316694fcb0000000000000000000a1007"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000900) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4088}, 0x4000000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r2) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c23003f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9fc7010018000000000000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x0) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r16) ioctl$IOCTL_GET_NCIDEV_IDX(r15, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r14, @ANYRES64=0x0, @ANYRES32=r13], 0x1c}}, 0x4008000) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x14, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x44081}, 0x40) 1.169112891s ago: executing program 3 (id=323): r0 = socket$inet6(0xa, 0x802, 0x1) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000000000)=0xf7, 0x4) setsockopt(r0, 0x8000, 0x4, &(0x7f0000000040)="b39bd1335d9b868f50db3cd2708fd739f987", 0x12) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f00000000c0)=0x28) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r2 = fsmount(r1, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0xa, 0x0, [0x143, 0x401, 0x0, 0x1, 0xa, 0x2, 0x8001, 0x7, 0x5a, 0x48, 0x2, 0xffff, 0xe, 0x5537, 0x8, 0x1ff]}], r3, 0x1, 0x1, 0x48}}, 0x20) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000002c0), 0x4) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4aed}}}, 0x88) recvfrom$rxrpc(r2, &(0x7f0000000400)=""/30, 0x1e, 0x0, 0x0, 0x0) close(r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0xe}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x104, 0x1, 0x8, 0x801, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffffffb9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x24004041}, 0x20042020) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) fstatfs(r0, &(0x7f00000007c0)=""/21) copy_file_range(r1, &(0x7f0000000800)=0x7fffffff, r4, &(0x7f0000000840)=0x9, 0x3, 0x0) chdir(&(0x7f0000000880)='./file0\x00') setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{0xe, 0x7f, 0xed, 0x1}, {0x3, 0x4, 0x2, 0x7}]}, 0x10) connect$rxrpc(r1, &(0x7f0000000940)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x24) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x400, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000009c0)={'ip6gre0\x00', 0x1000}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r6) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x80) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000b40), 0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000b80)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x9, 0x64, 0xfa97, 0xb, 0x40, 0x6}, {0x8001, 0x101, 0xe5c1, 0x8, 0x80000000, 0x9}], ['\x00', '\x00', '\x00', '\x00']}) 1.081337587s ago: executing program 2 (id=324): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x9325}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syslog(0x4, &(0x7f0000000040)=""/38, 0x26) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000540)=""/241, 0xf1, 0x0, &(0x7f0000000640)=""/168, 0xa8}}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') writev(r7, &(0x7f0000000400)=[{&(0x7f0000000000)='3', 0x1}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0x1, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x25, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x3, 0x1, 0xb, 0x9, 0x4, 0x4, 0x10}, @printk={@li}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x7, 0xd3, &(0x7f0000000380)=""/211, 0x82000, 0x4, '\x00', r3, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xf, 0x1ff, 0x932}, 0x10, r6, r7, 0x6, &(0x7f0000000840)=[0xffffffffffffffff, r8], &(0x7f0000000880)=[{0x0, 0x1, 0x10, 0xb}, {0x2, 0x5, 0x8}, {0x4, 0x5, 0x6, 0x6}, {0x3, 0x1, 0x5, 0x5}, {0x5, 0x2, 0x8, 0x3}, {0x5, 0x4, 0x8}], 0x10, 0x4}, 0x94) recvmsg(r0, &(0x7f0000000080)={0x0, 0xfe, 0x0}, 0x12160) 1.03861605s ago: executing program 2 (id=325): syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, r0, 0x2) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) write$selinux_context(r0, &(0x7f0000000040)='system_u:object_r:ifconfig_exec_t:s0\x00', 0x25) 964.533663ms ago: executing program 2 (id=326): ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d00000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioperm(0x2, 0x4, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 849.66633ms ago: executing program 4 (id=327): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x7094, 0x9a, 0x200, 0x38d129bf, 0x800, 0x6, 0x4, 0x55, r2}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5e3, &(0x7f0000000000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) io_setup(0x5, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 748.962896ms ago: executing program 5 (id=328): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_pidfd_open(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 357.835699ms ago: executing program 5 (id=329): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100246a218be35509df0c000280081f02003000"/56], 0x50}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {0x0}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 291.640993ms ago: executing program 5 (id=330): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000", @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = epoll_create(0x3ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x304e, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[], [], 0x22}, 0xf, 0x47c, &(0x7f0000000440)="$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") 0s ago: executing program 4 (id=331): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$peekuser(0x3, 0x0, 0x5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf808004517002c0066000007fd8f780a0101027f00000400004e2200004a20a7219b4b71575ed8eeb89a76f2c245585467ed579ea8dd206cc13ec58f3cc526579ca9ac4876c1ff8b4f59541977f8569caf709fc222fd22b4eb7aa18ee73fc9bc82dd9837db3f5c006a476fbcce2f834b0596bc715f59a4a3a5690893a69a0cdf600e4464cf9a7e977380e894f4c9c76deb818c96f874260acbe2db62b22f642ab078468d5536ff3eb8eb79cbb6821d0ddaf7c93fb3876f9bd9167c8274bff7d70f67a582e83e631d12894a3b38ca09dcd52e27af01444d0ba353bd6cf84ac9e5fdad03767f34490fa28eb937f20a09b3b00d6fc7e1db2b4d3a3740727396ca70a5b832af52fe452fef5c79c143c4fdeb1a490737f44aa93dab3a94faec119fa4fca021e63e4e"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r3], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(r7, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x7) kernel console output (not intermixed with test programs): [ 20.677762][ T28] audit: type=1400 audit(1771161618.862:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.700083][ T28] audit: type=1400 audit(1771161618.862:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.722849][ T28] audit: type=1400 audit(1771161618.862:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.746577][ T28] audit: type=1400 audit(1771161618.862:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.770009][ T28] audit: type=1400 audit(1771161618.862:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.796059][ T28] audit: type=1400 audit(1771161618.862:67): avc: denied { getattr } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 20.822127][ T28] audit: type=1400 audit(1771161618.902:68): avc: denied { add_name } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf.lapb0.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.845611][ T28] audit: type=1400 audit(1771161618.922:69): avc: denied { remove_name } for pid=3204 comm="rm" name="resolv.conf.lapb0.ipv4ll" dev="tmpfs" ino=518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.913930][ T28] audit: type=1400 audit(1771161621.102:70): avc: denied { mounton } for pid=3224 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.938116][ T28] audit: type=1400 audit(1771161621.122:71): avc: denied { mount } for pid=3224 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.938790][ T3224] cgroup: Unknown subsys name 'net' [ 23.100574][ T3224] cgroup: Unknown subsys name 'cpuset' [ 23.106763][ T3224] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.285751][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.313312][ T3224] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.409653][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 24.509520][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 24.527724][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.535120][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.542648][ T3309] bridge_slave_0: entered allmulticast mode [ 24.549124][ T3309] bridge_slave_0: entered promiscuous mode [ 24.557842][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.565120][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.572420][ T3309] bridge_slave_1: entered allmulticast mode [ 24.578840][ T3309] bridge_slave_1: entered promiscuous mode [ 24.599299][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 24.612907][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 24.640645][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.671245][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.709473][ T3309] team0: Port device team_slave_0 added [ 24.717930][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.725363][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.732707][ T3310] bridge_slave_0: entered allmulticast mode [ 24.739048][ T3310] bridge_slave_0: entered promiscuous mode [ 24.752445][ T3309] team0: Port device team_slave_1 added [ 24.770775][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.777949][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.785197][ T3310] bridge_slave_1: entered allmulticast mode [ 24.791747][ T3310] bridge_slave_1: entered promiscuous mode [ 24.809008][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.816270][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.823727][ T3315] bridge_slave_0: entered allmulticast mode [ 24.830476][ T3315] bridge_slave_0: entered promiscuous mode [ 24.853455][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.860757][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.886749][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.897721][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.904913][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.912144][ T3315] bridge_slave_1: entered allmulticast mode [ 24.918387][ T3315] bridge_slave_1: entered promiscuous mode [ 24.933847][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 24.947682][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.954837][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.962221][ T3321] bridge_slave_0: entered allmulticast mode [ 24.968912][ T3321] bridge_slave_0: entered promiscuous mode [ 24.975782][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.982870][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.009072][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.021231][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.031750][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.041871][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.064108][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.072225][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.079339][ T3321] bridge_slave_1: entered allmulticast mode [ 25.085818][ T3321] bridge_slave_1: entered promiscuous mode [ 25.099651][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.125480][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.139660][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.160780][ T3310] team0: Port device team_slave_0 added [ 25.171340][ T3315] team0: Port device team_slave_0 added [ 25.190970][ T3310] team0: Port device team_slave_1 added [ 25.197375][ T3321] team0: Port device team_slave_0 added [ 25.204069][ T3321] team0: Port device team_slave_1 added [ 25.210721][ T3315] team0: Port device team_slave_1 added [ 25.221046][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.228154][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.235400][ T3322] bridge_slave_0: entered allmulticast mode [ 25.242060][ T3322] bridge_slave_0: entered promiscuous mode [ 25.267206][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.274300][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.301046][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.314191][ T3309] hsr_slave_0: entered promiscuous mode [ 25.320372][ T3309] hsr_slave_1: entered promiscuous mode [ 25.326874][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.334038][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.341381][ T3322] bridge_slave_1: entered allmulticast mode [ 25.347749][ T3322] bridge_slave_1: entered promiscuous mode [ 25.372340][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.379315][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.405840][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.417451][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.424978][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.452099][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.463114][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.470085][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.496211][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.507977][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.518535][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.540578][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.547590][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.574150][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.585729][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.592796][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.619141][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.655343][ T3322] team0: Port device team_slave_0 added [ 25.662043][ T3322] team0: Port device team_slave_1 added [ 25.681673][ T3310] hsr_slave_0: entered promiscuous mode [ 25.687814][ T3310] hsr_slave_1: entered promiscuous mode [ 25.693915][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 25.699979][ T3310] Cannot create hsr debugfs directory [ 25.735471][ T3315] hsr_slave_0: entered promiscuous mode [ 25.741504][ T3315] hsr_slave_1: entered promiscuous mode [ 25.747366][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 25.753366][ T3315] Cannot create hsr debugfs directory [ 25.770262][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.777740][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.804430][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.826861][ T3321] hsr_slave_0: entered promiscuous mode [ 25.832860][ T3321] hsr_slave_1: entered promiscuous mode [ 25.838947][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 25.844916][ T3321] Cannot create hsr debugfs directory [ 25.850904][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.857857][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.884269][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.946337][ T3322] hsr_slave_0: entered promiscuous mode [ 25.952423][ T3322] hsr_slave_1: entered promiscuous mode [ 25.958203][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 25.964014][ T3322] Cannot create hsr debugfs directory [ 26.089900][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.101570][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.121674][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.133014][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.148707][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.160647][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.169467][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.178501][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.206822][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.220885][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.230923][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.239687][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.268422][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.279238][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.288976][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.301886][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.330209][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.340341][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.361417][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.372207][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.399048][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.408103][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.428137][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.446169][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.461506][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.468694][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.477800][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.484927][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.493673][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.500851][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.517987][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.525159][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.547655][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.567438][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.595590][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.605991][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.613266][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.630884][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.637961][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.649685][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.692304][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.699583][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.709412][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.716595][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.731891][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.769041][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.791558][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.799688][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.806973][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.822481][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.830047][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.840333][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.877104][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.897256][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.976564][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.022406][ T3309] veth0_vlan: entered promiscuous mode [ 27.055791][ T3309] veth1_vlan: entered promiscuous mode [ 27.068315][ T3310] veth0_vlan: entered promiscuous mode [ 27.094950][ T3310] veth1_vlan: entered promiscuous mode [ 27.117133][ T3315] veth0_vlan: entered promiscuous mode [ 27.136904][ T3321] veth0_vlan: entered promiscuous mode [ 27.146617][ T3315] veth1_vlan: entered promiscuous mode [ 27.155820][ T3321] veth1_vlan: entered promiscuous mode [ 27.167588][ T3310] veth0_macvtap: entered promiscuous mode [ 27.188604][ T3310] veth1_macvtap: entered promiscuous mode [ 27.204301][ T3315] veth0_macvtap: entered promiscuous mode [ 27.219424][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.228152][ T3321] veth0_macvtap: entered promiscuous mode [ 27.241491][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.250411][ T3315] veth1_macvtap: entered promiscuous mode [ 27.256952][ T3321] veth1_macvtap: entered promiscuous mode [ 27.263918][ T3309] veth0_macvtap: entered promiscuous mode [ 27.276303][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.285497][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.296816][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.306839][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.315735][ T3309] veth1_macvtap: entered promiscuous mode [ 27.327480][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.336709][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.350142][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.361960][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.376393][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.390366][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.404370][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.416695][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.425700][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.438106][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.447582][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 27.447598][ T28] audit: type=1400 audit(1771161625.632:90): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.NyCGgK/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.449825][ T3322] veth0_vlan: entered promiscuous mode [ 27.453840][ T28] audit: type=1400 audit(1771161625.632:91): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.484023][ T3322] veth1_vlan: entered promiscuous mode [ 27.492857][ T3322] veth0_macvtap: entered promiscuous mode [ 27.517990][ T28] audit: type=1400 audit(1771161625.632:92): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.NyCGgK/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.521156][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.552136][ T28] audit: type=1400 audit(1771161625.632:93): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.555243][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.578755][ T28] audit: type=1400 audit(1771161625.672:94): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.NyCGgK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.611612][ T28] audit: type=1400 audit(1771161625.672:95): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.NyCGgK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.644477][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.648864][ T28] audit: type=1400 audit(1771161625.672:96): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.687350][ T3322] veth1_macvtap: entered promiscuous mode [ 27.689827][ T28] audit: type=1400 audit(1771161625.702:97): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.694307][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.717493][ T28] audit: type=1400 audit(1771161625.702:98): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.757856][ T28] audit: type=1400 audit(1771161625.942:99): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.784288][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.817303][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.826792][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.855523][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.877760][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.887103][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.919863][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.936812][ C1] hrtimer: interrupt took 24341 ns [ 27.957397][ T3487] netlink: 'syz.2.3': attribute type 27 has an invalid length. [ 27.968930][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.061067][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.068385][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.199053][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.236688][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.298639][ T3484] loop0: detected capacity change from 0 to 512 [ 28.348459][ T3484] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.424728][ T3484] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 28.441477][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.458588][ T3484] EXT4-fs (loop0): orphan cleanup on readonly fs [ 28.472306][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.495550][ T3484] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.1: Failed to acquire dquot type 1 [ 28.520389][ T3492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.528554][ T3492] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.536448][ T3484] loop0: lost filesystem error report for type 5 error -117 [ 28.539776][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 28.552525][ C1] EXT4-fs (loop0): initial error at time 1771161626: ext4_acquire_dquot:7003 [ 28.562225][ C1] EXT4-fs (loop0): last error at time 1771161626: ext4_acquire_dquot:7003 [ 28.572484][ T3492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 28.576229][ T3484] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1: corrupted inode contents [ 28.603641][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.614670][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.624176][ T3484] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.628437][ T3484] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.1: mark_inode_dirty error [ 28.669302][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.675069][ T3484] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.682195][ T3484] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1: corrupted inode contents [ 28.686718][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.693372][ T3484] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.720503][ T3484] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1: mark_inode_dirty error [ 28.747165][ T3484] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.772806][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.800590][ T3484] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1: corrupted inode contents [ 28.831085][ T3484] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.832601][ T3484] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 28.864681][ T3484] loop0: lost filesystem error report for type 5 error -117 [ 28.866999][ T3484] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1: corrupted inode contents [ 28.892061][ T3484] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.894363][ T3484] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.1: mark_inode_dirty error [ 28.939462][ T3492] syz.2.3 (3492) used greatest stack depth: 10440 bytes left [ 28.956889][ T3484] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 28.958386][ T3484] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 29.004721][ T3484] loop0: lost filesystem error report for type 5 error -117 [ 29.006477][ T3509] loop2: detected capacity change from 0 to 128 [ 29.010543][ T3484] EXT4-fs (loop0): 1 truncate cleaned up [ 29.020656][ T3506] loop4: detected capacity change from 0 to 7 [ 29.020875][ T3506] Buffer I/O error on dev loop4, logical block 0, async page read [ 29.020903][ T3506] Buffer I/O error on dev loop4, logical block 0, async page read [ 29.020920][ T3506] loop4: unable to read partition table [ 29.020938][ T3506] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 29.050336][ T3509] ======================================================= [ 29.050336][ T3509] WARNING: The mand mount option has been deprecated and [ 29.050336][ T3509] and is ignored by this kernel. Remove the mand [ 29.050336][ T3509] option from the mount to silence this warning. [ 29.050336][ T3509] ======================================================= [ 29.061513][ T3484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 29.154388][ T3509] capability: warning: `syz.2.7' uses 32-bit capabilities (legacy support in use) [ 29.279334][ T3518] loop1: detected capacity change from 0 to 2048 [ 29.291996][ T3520] netlink: 'syz.4.11': attribute type 27 has an invalid length. [ 29.320990][ T3518] loop1: p1 < > p3 [ 29.330887][ T3518] loop1: p3 size 134217728 extends beyond EOD, truncated [ 29.339795][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.347147][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.364641][ T3000] loop1: p1 < > p3 [ 29.369192][ T3000] loop1: p3 size 134217728 extends beyond EOD, truncated [ 29.543083][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.552662][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.572720][ T3484] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 29.635797][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 29.671635][ T108] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.787657][ T3524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.812638][ T3524] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.851046][ T3524] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 29.867218][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.876292][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.917248][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.009555][ T3484] syz.0.1 (3484) used greatest stack depth: 9928 bytes left [ 30.021067][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 30.090563][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 30.136477][ T3545] loop3: detected capacity change from 0 to 2048 [ 30.172223][ T3545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.186595][ T3551] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 30.209446][ T3551] xt_hashlimit: size too large, truncated to 1048576 [ 30.256037][ T3554] loop4: detected capacity change from 0 to 1024 [ 30.283923][ T3554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.347488][ T71] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.387805][ T71] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 30.401698][ T3554] Zero length message leads to an empty skb [ 30.420033][ T71] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.420033][ T71] [ 30.433317][ T71] EXT4-fs (loop3): Total free blocks count 0 [ 30.435669][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.439698][ T71] EXT4-fs (loop3): Free/Dirty block details [ 30.455137][ T71] EXT4-fs (loop3): free_blocks=2415919504 [ 30.461727][ T71] EXT4-fs (loop3): dirty_blocks=16 [ 30.467330][ T71] EXT4-fs (loop3): Block reservation details [ 30.473733][ T71] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 30.481484][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.780767][ T3580] loop3: detected capacity change from 0 to 512 [ 30.850185][ T3510] IPVS: starting estimator thread 0... [ 30.917541][ T3580] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 30.992497][ T3580] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.003699][ T3582] IPVS: using max 2640 ests per chain, 132000 per kthread [ 31.019489][ T3580] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.29: Failed to acquire dquot type 1 [ 31.120530][ T3580] loop3: lost filesystem error report for type 5 error -117 [ 31.125419][ T3580] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.29: corrupted inode contents [ 31.132880][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 31.132902][ C0] EXT4-fs (loop3): initial error at time 1771161629: ext4_acquire_dquot:7003 [ 31.132932][ C0] EXT4-fs (loop3): last error at time 1771161629: ext4_acquire_dquot:7003 [ 31.205523][ T3580] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 31.205691][ T3580] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.29: mark_inode_dirty error [ 31.263202][ T3580] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 31.263466][ T3580] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.29: corrupted inode contents [ 31.285085][ T3580] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 31.285288][ T3580] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.29: mark_inode_dirty error [ 31.306852][ T3580] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.29: corrupted inode contents [ 31.319287][ T3580] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 31.328553][ T3580] loop3: lost filesystem error report for type 5 error -117 [ 31.328734][ T3580] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.29: corrupted inode contents [ 31.348526][ T3580] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.29: mark_inode_dirty error [ 31.395028][ T3580] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 31.404207][ T3580] loop3: lost filesystem error report for type 5 error -117 [ 31.404635][ T3580] EXT4-fs (loop3): 1 truncate cleaned up [ 31.418917][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 31.642125][ T3580] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 31.661856][ T3580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 31.926992][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 32.224418][ T3612] can0: slcan on ttyS3. [ 32.237329][ T3611] loop3: detected capacity change from 0 to 512 [ 32.277944][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.305601][ T3611] ext4 filesystem being mounted at /file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.316811][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.360763][ T3611] loop3: detected capacity change from 0 to 512 [ 32.398910][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.514415][ T3611] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.523816][ T3632] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.547687][ T3629] loop4: detected capacity change from 0 to 1024 [ 32.563125][ T3611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.571349][ T3629] EXT4-fs: inline encryption not supported [ 32.580022][ T28] kauditd_printk_skb: 328 callbacks suppressed [ 32.580040][ T28] audit: type=1400 audit(1771161630.772:424): avc: denied { ioctl } for pid=3630 comm="syz.0.42" path="socket:[5465]" dev="sockfs" ino=5465 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.637763][ T3638] netlink: 'syz.0.42': attribute type 2 has an invalid length. [ 32.647338][ T3629] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.649935][ T28] audit: type=1400 audit(1771161630.822:425): avc: denied { setopt } for pid=3630 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.677397][ T28] audit: type=1400 audit(1771161630.822:426): avc: denied { create } for pid=3630 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 32.697966][ T28] audit: type=1400 audit(1771161630.822:427): avc: denied { connect } for pid=3630 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 32.717770][ T3639] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 32.724944][ T3629] EXT4-fs error (device loop4): ext4_free_blocks:6726: comm syz.4.41: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.748567][ T3629] loop4: lost filesystem error report for type 5 error -117 [ 32.749627][ T3629] EXT4-fs (loop4): Remounting filesystem read-only [ 32.757154][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 32.757179][ C0] EXT4-fs (loop4): initial error at time 1771161630: ext4_free_blocks:6726 [ 32.757217][ C0] EXT4-fs (loop4): last error at time 1771161630: ext4_free_blocks:6726 [ 32.847663][ T3629] EXT4-fs (loop4): 1 orphan inode deleted [ 32.856969][ T3629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.899888][ T28] audit: type=1400 audit(1771161631.072:428): avc: denied { read } for pid=3630 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.980485][ T3612] can0 (unregistered): slcan off ttyS3. [ 32.998836][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.012633][ T3611] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 33.399683][ T28] audit: type=1400 audit(1771161631.582:429): avc: denied { create } for pid=3660 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.458978][ T28] audit: type=1400 audit(1771161631.612:430): avc: denied { connect } for pid=3660 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.489434][ T28] audit: type=1400 audit(1771161631.632:431): avc: denied { create } for pid=3660 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.512986][ T28] audit: type=1400 audit(1771161631.632:432): avc: denied { setopt } for pid=3660 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 33.575262][ T28] audit: type=1400 audit(1771161631.642:433): avc: denied { getopt } for pid=3660 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.636070][ T3675] loop0: detected capacity change from 0 to 512 [ 33.768579][ T3690] netlink: 'syz.4.54': attribute type 27 has an invalid length. [ 34.755623][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.765374][ T3702] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.777785][ T3702] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.874688][ T3706] netlink: 'syz.1.57': attribute type 27 has an invalid length. [ 35.084640][ T3714] loop2: detected capacity change from 0 to 512 [ 35.105376][ T3714] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 35.121685][ T3714] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 35.133172][ T3700] loop3: detected capacity change from 0 to 128 [ 35.202876][ T3711] netlink: 'syz.4.59': attribute type 10 has an invalid length. [ 35.258765][ T3714] System zones: 1-12 [ 35.439228][ T3714] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.540142][ T3714] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.58: bg 0: block 361: padding at end of block bitmap is not set [ 35.621908][ T3714] loop2: lost filesystem error report for type 5 error -117 [ 35.629771][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 35.643760][ C1] EXT4-fs (loop2): initial error at time 1771161633: ext4_validate_block_bitmap:441 [ 35.653433][ C1] EXT4-fs (loop2): last error at time 1771161633: ext4_validate_block_bitmap:441 [ 35.662854][ T3714] EXT4-fs (loop2): Remounting filesystem read-only [ 35.664428][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.669520][ T3714] EXT4-fs (loop2): 1 truncate cleaned up [ 35.676732][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.690210][ T3714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 35.714564][ T3714] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.58: error -117 reading directory block [ 35.757638][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 35.771548][ T3707] syz.3.56 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.803468][ T3725] loop2: detected capacity change from 0 to 512 [ 35.823322][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.834228][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.852192][ T3725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.873966][ T3725] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.914757][ T3719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.922723][ T3719] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.933070][ T3719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.009238][ T3711] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.031789][ T3711] bond0: (slave team0): Enslaving as an active interface with an up link [ 36.070114][ T71] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.079617][ T71] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.101041][ T71] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.116281][ T3735] loop1: detected capacity change from 0 to 2048 [ 36.170441][ T3303] loop1: p1 < > p4 [ 36.175091][ T3303] loop1: p4 size 722688 extends beyond EOD, truncated [ 36.200445][ T71] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.201900][ T3735] loop1: p1 < > p4 [ 36.239137][ T3735] loop1: p4 size 722688 extends beyond EOD, truncated [ 36.361428][ T3700] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 36.370790][ T3700] FAT-fs (loop3): Filesystem has been set read-only [ 36.390519][ T3743] ext4: Unknown parameter '@' [ 36.894031][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.970234][ T3753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 37.073768][ T3763] netlink: 'syz.4.73': attribute type 27 has an invalid length. [ 37.290532][ T3772] netlink: 'syz.1.74': attribute type 27 has an invalid length. [ 37.393977][ T3770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.401993][ T3770] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.452733][ T3770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.598255][ T3779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.606547][ T3779] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.640228][ T3779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.981685][ T3785] netlink: 'syz.2.75': attribute type 27 has an invalid length. [ 38.002963][ T3787] netlink: 'syz.0.77': attribute type 27 has an invalid length. [ 38.335532][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.342857][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.464825][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.492307][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.612659][ T3788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.620803][ T3788] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.629661][ T3788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.686241][ T200] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.696129][ T200] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.740688][ T3787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.758239][ T3787] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.774295][ T3787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.790272][ T200] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.826004][ T200] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.852572][ T3806] netlink: 128 bytes leftover after parsing attributes in process `syz.3.80'. [ 38.953045][ T3813] loop3: detected capacity change from 0 to 512 [ 38.963051][ T3813] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.963146][ T3813] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 38.963717][ T3813] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 38.963757][ T3813] System zones: 0-2, 18-18, 34-35 [ 38.964295][ T3813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.967273][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 38.967289][ T28] audit: type=1400 audit(1771161637.152:452): avc: denied { read write } for pid=3814 comm="syz.1.84" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.967316][ T28] audit: type=1400 audit(1771161637.152:453): avc: denied { open } for pid=3814 comm="syz.1.84" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.976952][ T3813] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 38.986030][ T3813] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 39.094812][ T3813] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 39.119480][ T28] audit: type=1400 audit(1771161637.292:454): avc: denied { ioctl } for pid=3807 comm="syz.4.81" path="socket:[5787]" dev="sockfs" ino=5787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.202343][ T28] audit: type=1400 audit(1771161637.292:455): avc: denied { setopt } for pid=3807 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.234329][ T3813] C: renamed from team_slave_0 (while UP) [ 39.236819][ T28] audit: type=1400 audit(1771161637.292:456): avc: denied { write } for pid=3807 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.269824][ T28] audit: type=1400 audit(1771161637.362:457): avc: denied { name_connect } for pid=3812 comm="syz.3.85" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.302417][ T28] audit: type=1400 audit(1771161637.392:458): avc: denied { read } for pid=3820 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.340296][ T3827] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.3.85: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 39.345407][ T28] audit: type=1400 audit(1771161637.532:459): avc: denied { remove_name } for pid=3812 comm="syz.3.85" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.383490][ T28] audit: type=1400 audit(1771161637.532:460): avc: denied { rename } for pid=3812 comm="syz.3.85" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.406324][ T28] audit: type=1400 audit(1771161637.532:461): avc: denied { unlink } for pid=3812 comm="syz.3.85" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.407814][ T3827] EXT4-fs error (device loop3) in ext4_delete_entry:2737: Corrupt filesystem [ 39.489962][ T3827] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.85: Deleting old file: nlink 4, error=-117 [ 39.781679][ T3812] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.85: bg 0: block 353: padding at end of block bitmap is not set [ 39.806680][ T3812] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 39.822866][ T3813] netlink: 'syz.3.85': attribute type 3 has an invalid length. [ 39.841540][ T3813] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 39.849142][ T3813] netlink: 116 bytes leftover after parsing attributes in process `syz.3.85'. [ 39.854089][ T3833] netlink: 399 bytes leftover after parsing attributes in process `syz.0.88'. [ 39.869483][ T3813] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 39.915088][ T3836] loop1: detected capacity change from 0 to 2048 [ 39.920302][ T3833] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 39.930306][ T3833] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 39.980499][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.026102][ T3303] loop1: p1 < > p4 [ 40.036368][ T3303] loop1: p4 size 722688 extends beyond EOD, truncated [ 40.098014][ T3836] loop1: p1 < > p4 [ 40.108179][ T3836] loop1: p4 size 722688 extends beyond EOD, truncated [ 40.777347][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.779412][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.860521][ T3858] netlink: 128 bytes leftover after parsing attributes in process `syz.1.95'. [ 40.949574][ T3864] loop1: detected capacity change from 0 to 512 [ 40.986910][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.000644][ T3864] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.190361][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.434036][ T3400] IPVS: starting estimator thread 0... [ 41.539841][ T3877] IPVS: using max 2592 ests per chain, 129600 per kthread [ 41.652237][ T3910] netlink: 128 bytes leftover after parsing attributes in process `syz.2.108'. [ 42.224583][ T3946] xfrm0: entered promiscuous mode [ 42.257625][ T3949] capability: warning: `syz.3.121' uses deprecated v2 capabilities in a way that may be insecure [ 42.287965][ T3949] program syz.3.121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.377584][ T3956] loop4: detected capacity change from 0 to 2048 [ 42.430416][ T3303] loop4: p1 < > p4 [ 42.439543][ T3303] loop4: p4 size 722688 extends beyond EOD, truncated [ 42.496887][ T3956] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 42.548387][ T3000] loop4: p1 < > p4 [ 42.553370][ T3000] loop4: p4 size 722688 extends beyond EOD, truncated [ 42.569705][ T3974] netlink: 128 bytes leftover after parsing attributes in process `syz.0.130'. [ 42.725209][ T3996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.734498][ T3994] loop2: detected capacity change from 0 to 2048 [ 42.790531][ T3821] loop2: p1 < > p4 [ 42.795542][ T3821] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.814492][ T3994] loop2: p1 < > p4 [ 42.822318][ T3994] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.988528][ T4023] loop0: detected capacity change from 0 to 512 [ 43.013739][ T4023] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.041400][ T4023] EXT4-fs (loop0): 1 truncate cleaned up [ 43.056320][ T4023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.087920][ T4008] syz.3.136 (4008) used greatest stack depth: 9480 bytes left [ 43.100142][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 43.114976][ T4029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4029 comm=syz.3.141 [ 43.140628][ T4023] netlink: 44 bytes leftover after parsing attributes in process `syz.0.139'. [ 43.151250][ T4023] IPVS: Unknown mcast interface: vetN1_macvtap [ 43.169422][ T4023] mmap: syz.0.139 (4023) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.214433][ T3315] EXT4-fs error (device loop0): ext4_lookup:1785: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 43.240365][ T3315] EXT4-fs (loop0): Remounting filesystem read-only [ 43.834581][ T50] bridge_slave_1: left allmulticast mode [ 43.843598][ T4027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.852810][ T50] bridge_slave_1: left promiscuous mode [ 43.852996][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.892017][ T50] bridge_slave_0: left allmulticast mode [ 43.907496][ T50] bridge_slave_0: left promiscuous mode [ 43.913445][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.042997][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.063781][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.073333][ T50] bond0 (unregistering): Released all slaves [ 44.099515][ T50] hsr_slave_0: left promiscuous mode [ 44.186296][ T50] hsr_slave_1: left promiscuous mode [ 44.198465][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.206547][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.251735][ T50] team0 (unregistering): Port device team_slave_1 removed [ 44.266548][ T50] team0 (unregistering): Port device team_slave_0 removed [ 44.421232][ T4103] loop2: detected capacity change from 0 to 512 [ 44.435436][ T4103] EXT4-fs: Ignoring removed i_version option [ 44.464859][ T4103] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 44.481279][ T4103] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.502758][ T4103] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.520594][ T4067] chnl_net:caif_netlink_parms(): no params data found [ 44.535479][ T4103] __quota_error: 22 callbacks suppressed [ 44.535496][ T4103] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 44.563337][ T4103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 44.573390][ T4103] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.156: Failed to acquire dquot type 1 [ 44.587807][ T4103] loop2: lost filesystem error report for type 5 error -117 [ 44.588132][ T4103] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 44.595804][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 44.595825][ C1] EXT4-fs (loop2): last error at time 1771161642: ext4_acquire_dquot:7003 [ 44.622085][ T4103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 44.632563][ T4103] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.156: Failed to acquire dquot type 1 [ 44.649798][ T4103] loop2: lost filesystem error report for type 5 error -117 [ 44.650092][ T4103] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.156: Invalid block bitmap block 0 in block_group 0 [ 44.682753][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.696175][ T4103] loop2: lost filesystem error report for type 5 error -117 [ 44.696452][ T4103] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 44.697452][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.720116][ T4067] bridge_slave_0: entered allmulticast mode [ 44.726755][ T4067] bridge_slave_0: entered promiscuous mode [ 44.734192][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.741518][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.748125][ T4103] loop2: lost filesystem error report for type 5 error -117 [ 44.748770][ T4067] bridge_slave_1: entered allmulticast mode [ 44.749172][ T4103] Quota error (device loop2): do_check_range: Getting dqdh_next_free 196613 out of range 0-5 [ 44.756909][ T4067] bridge_slave_1: entered promiscuous mode [ 44.780017][ T4103] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 44.804903][ T4067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.814200][ T4103] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.156: Failed to acquire dquot type 1 [ 44.827230][ T4067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.849840][ T4103] loop2: lost filesystem error report for type 5 error -117 [ 44.851435][ T4103] EXT4-fs (loop2): 1 orphan inode deleted [ 44.872312][ T4067] team0: Port device team_slave_0 added [ 44.882872][ T4067] team0: Port device team_slave_1 added [ 44.896810][ T4103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.935447][ T28] audit: type=1400 audit(1771161643.122:484): avc: denied { execute } for pid=4123 comm="syz.1.157" path="/28/cpu.stat" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.987555][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.997472][ T4067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.006402][ T4067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.051724][ T4138] loop4: detected capacity change from 0 to 1024 [ 45.076048][ T4067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.085382][ T4145] netlink: 128 bytes leftover after parsing attributes in process `syz.2.159'. [ 45.089550][ T4138] EXT4-fs error (device loop4): __ext4_fill_super:5565: comm syz.4.160: inode #2: comm syz.4.160: iget: illegal inode # [ 45.109534][ T4067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.110830][ T28] audit: type=1326 audit(1771161643.302:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 45.117391][ T4138] loop4: lost filesystem error report for type 5 error -117 [ 45.140254][ T4067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.149979][ T4138] EXT4-fs (loop4): get root inode failed [ 45.174198][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 45.174220][ C0] EXT4-fs (loop4): initial error at time 1771161643: __ext4_fill_super:5565 [ 45.174244][ C0] EXT4-fs (loop4): last error at time 1771161643: __ext4_fill_super:5565 [ 45.174541][ T4067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.198012][ T4149] netlink: 116 bytes leftover after parsing attributes in process `syz.2.162'. [ 45.206485][ T28] audit: type=1326 audit(1771161643.302:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 45.219631][ T4138] EXT4-fs (loop4): mount failed [ 45.225874][ T28] audit: type=1326 audit(1771161643.332:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.2.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 45.295506][ T4150] tipc: Started in network mode [ 45.300488][ T4150] tipc: Node identity 2e2045ce5592, cluster identity 4711 [ 45.307759][ T4150] tipc: Enabled bearer , priority 0 [ 45.342308][ T4067] hsr_slave_0: entered promiscuous mode [ 45.348350][ T4067] hsr_slave_1: entered promiscuous mode [ 45.397407][ T4067] debugfs: 'hsr0' already exists in 'hsr' [ 45.405958][ T4067] Cannot create hsr debugfs directory [ 45.489947][ T4143] syzkaller0: entered promiscuous mode [ 45.497905][ T4143] syzkaller0: entered allmulticast mode [ 45.540217][ T4142] tipc: Resetting bearer [ 45.711834][ T4142] tipc: Disabling bearer [ 46.488707][ T4278] netlink: 128 bytes leftover after parsing attributes in process `syz.2.171'. [ 46.515365][ T4067] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.525094][ T4067] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.542671][ T4067] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.563848][ T4067] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.650806][ T4067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.675234][ T4067] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.691873][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.699016][ T4194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.710531][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.718186][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.841829][ T4067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.874427][ T4305] loop4: detected capacity change from 0 to 2048 [ 46.949217][ T3303] loop4: p1 < > p4 [ 46.963547][ T3303] loop4: p4 size 722688 extends beyond EOD, truncated [ 47.015752][ T4067] veth0_vlan: entered promiscuous mode [ 47.025243][ T4067] veth1_vlan: entered promiscuous mode [ 47.039344][ T4067] veth0_macvtap: entered promiscuous mode [ 47.047088][ T4067] veth1_macvtap: entered promiscuous mode [ 47.058904][ T4067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.073446][ T4067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.076459][ T4305] loop4: p1 < > p4 [ 47.085874][ T4305] loop4: p4 size 722688 extends beyond EOD, truncated [ 47.094278][ T4244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.243083][ T4194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.621719][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.649937][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.715429][ T4329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.151'. [ 47.866054][ T4333] FAULT_INJECTION: forcing a failure. [ 47.866054][ T4333] name failslab, interval 1, probability 0, space 0, times 1 [ 47.886586][ T4338] loop2: detected capacity change from 0 to 128 [ 47.957342][ T4333] CPU: 1 UID: 0 PID: 4333 Comm: syz.4.179 Not tainted syzkaller #0 PREEMPT(full) [ 47.957373][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.957388][ T4333] Call Trace: [ 47.957396][ T4333] [ 47.957405][ T4333] __dump_stack+0x1d/0x30 [ 47.957462][ T4333] dump_stack_lvl+0x95/0xd0 [ 47.957488][ T4333] dump_stack+0x15/0x1b [ 47.957507][ T4333] should_fail_ex+0x263/0x280 [ 47.957529][ T4333] ? ucma_alloc_ctx+0x30/0x1d0 [ 47.957614][ T4333] should_failslab+0x8c/0xb0 [ 47.957667][ T4333] __kmalloc_cache_noprof+0x5f/0x410 [ 47.957686][ T4333] ? should_fail_ex+0xd9/0x280 [ 47.957793][ T4333] ? __pfx_ucma_create_id+0x10/0x10 [ 47.957821][ T4333] ucma_alloc_ctx+0x30/0x1d0 [ 47.957838][ T4333] ucma_create_id+0x15a/0x280 [ 47.957865][ T4333] ? __pfx_ucma_create_id+0x10/0x10 [ 47.957929][ T4333] ucma_write+0x1c9/0x260 [ 47.957957][ T4333] vfs_writev+0x42b/0x900 [ 47.958058][ T4333] ? __pfx_ucma_write+0x10/0x10 [ 47.958103][ T4333] do_writev+0xe9/0x210 [ 47.958122][ T4333] __x64_sys_writev+0x45/0x50 [ 47.958200][ T4333] x64_sys_call+0x1c0c/0x3020 [ 47.958327][ T4333] do_syscall_64+0x12c/0x370 [ 47.958355][ T4333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.958456][ T4333] RIP: 0033:0x7f8945b3bf79 [ 47.958471][ T4333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.958487][ T4333] RSP: 002b:00007f894458f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 47.958572][ T4333] RAX: ffffffffffffffda RBX: 00007f8945db5fa0 RCX: 00007f8945b3bf79 [ 47.958585][ T4333] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000d [ 47.958597][ T4333] RBP: 00007f894458f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.958608][ T4333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.958675][ T4333] R13: 00007f8945db6038 R14: 00007f8945db5fa0 R15: 00007ffffc6dde18 [ 47.958769][ T4333] [ 48.161745][ T4338] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.175150][ T4338] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.306722][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.347803][ T4351] netlink: 128 bytes leftover after parsing attributes in process `syz.2.182'. [ 48.575995][ T4358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.613765][ T4360] netlink: 52 bytes leftover after parsing attributes in process `syz.3.186'. [ 48.651912][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.659382][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.731676][ T4360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=4360 comm=syz.3.186 [ 48.731692][ T4364] netlink: 'syz.5.187': attribute type 10 has an invalid length. [ 48.764513][ T4364] team0: Port device netdevsim1 added [ 48.773306][ T4360] netlink: 76 bytes leftover after parsing attributes in process `syz.3.186'. [ 48.795574][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.806704][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.828280][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.840545][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.882370][ T4360] netlink: 52 bytes leftover after parsing attributes in process `syz.3.186'. [ 48.906164][ T4366] loop5: detected capacity change from 0 to 512 [ 48.938465][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.945899][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.955067][ T4366] EXT4-fs: Ignoring removed orlov option [ 48.977975][ T4366] EXT4-fs: Mount option(s) incompatible with ext2 [ 49.009936][ T4322] syz.1.177 (4322) used greatest stack depth: 5816 bytes left [ 49.147612][ T4371] netlink: 'syz.4.191': attribute type 27 has an invalid length. [ 49.435327][ T4378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.443687][ T4378] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.454131][ T4378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.683182][ T4394] netlink: 'syz.3.196': attribute type 14 has an invalid length. [ 49.702001][ T4394] loop3: detected capacity change from 0 to 512 [ 49.720930][ T4394] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 49.732336][ T4394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 49.740416][ T4394] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.747062][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 49.747143][ T28] audit: type=1400 audit(1771161647.932:541): avc: denied { setopt } for pid=4395 comm="syz.5.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.750325][ T4394] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.196: bad orphan inode 267 [ 49.784362][ T4394] loop3: lost filesystem error report for type 5 error -117 [ 49.784522][ T4394] EXT4-fs (loop3): Remounting filesystem read-only [ 49.788749][ T28] audit: type=1400 audit(1771161647.972:542): avc: denied { setcheckreqprot } for pid=4395 comm="syz.5.197" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.792345][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 49.839645][ T4394] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000007. [ 49.848276][ T4394] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.196: dx entry: limit 0 != root limit 125 [ 49.861111][ T4394] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.196: Corrupt directory, running e2fsck is recommended [ 49.910440][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 50.034539][ T28] audit: type=1400 audit(1771161648.222:543): avc: denied { create } for pid=4406 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.089774][ T28] audit: type=1400 audit(1771161648.222:544): avc: denied { write } for pid=4406 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.111482][ T28] audit: type=1400 audit(1771161648.222:545): avc: denied { setopt } for pid=4406 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.254845][ T4417] loop2: detected capacity change from 0 to 512 [ 50.474980][ T4422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.866857][ T4430] FAULT_INJECTION: forcing a failure. [ 50.866857][ T4430] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.880704][ T4430] CPU: 0 UID: 0 PID: 4430 Comm: syz.5.207 Not tainted syzkaller #0 PREEMPT(full) [ 50.880734][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 50.880788][ T4430] Call Trace: [ 50.880794][ T4430] [ 50.880802][ T4430] __dump_stack+0x1d/0x30 [ 50.880832][ T4430] dump_stack_lvl+0x95/0xd0 [ 50.880884][ T4430] dump_stack+0x15/0x1b [ 50.880908][ T4430] should_fail_ex+0x263/0x280 [ 50.880950][ T4430] should_fail+0xb/0x20 [ 50.881038][ T4430] should_fail_usercopy+0x1a/0x20 [ 50.881062][ T4430] _copy_from_user+0x1c/0xb0 [ 50.881094][ T4430] update_filter+0x4b/0x660 [ 50.881118][ T4430] __tun_chr_ioctl+0xe83/0x14d0 [ 50.881168][ T4430] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 50.881192][ T4430] tun_chr_ioctl+0x27/0x40 [ 50.881231][ T4430] __se_sys_ioctl+0xce/0x140 [ 50.881265][ T4430] __x64_sys_ioctl+0x43/0x50 [ 50.881317][ T4430] x64_sys_call+0x1563/0x3020 [ 50.881403][ T4430] do_syscall_64+0x12c/0x370 [ 50.881437][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.881461][ T4430] RIP: 0033:0x7f508b16bf79 [ 50.881545][ T4430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.881562][ T4430] RSP: 002b:00007f5089bc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.881585][ T4430] RAX: ffffffffffffffda RBX: 00007f508b3e5fa0 RCX: 00007f508b16bf79 [ 50.881601][ T4430] RDX: 00002000000000c0 RSI: 00000000400454d1 RDI: 0000000000000003 [ 50.881615][ T4430] RBP: 00007f5089bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.881628][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.881642][ T4430] R13: 00007f508b3e6038 R14: 00007f508b3e5fa0 R15: 00007ffea70acc38 [ 50.881780][ T4430] [ 51.203279][ T4441] loop5: detected capacity change from 0 to 128 [ 51.243092][ T4438] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 51.295381][ T28] audit: type=1400 audit(1771161649.482:546): avc: denied { listen } for pid=4447 comm="syz.2.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.320292][ T28] audit: type=1400 audit(1771161649.502:547): avc: denied { read } for pid=4447 comm="syz.2.211" path="socket:[8204]" dev="sockfs" ino=8204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.344086][ T28] audit: type=1400 audit(1771161649.512:548): avc: denied { create } for pid=4443 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 51.450307][ T28] audit: type=1400 audit(1771161649.582:549): avc: denied { read } for pid=4443 comm="syz.1.210" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.518721][ T28] audit: type=1400 audit(1771161649.582:550): avc: denied { open } for pid=4443 comm="syz.1.210" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.206728][ T4474] netlink: 'syz.1.219': attribute type 10 has an invalid length. [ 52.240465][ T4474] team0: Port device netdevsim1 added [ 52.287226][ T4480] loop1: detected capacity change from 0 to 512 [ 52.413943][ T4480] loop1: detected capacity change from 0 to 2048 [ 52.511369][ T3303] GPT:first_usable_lbas don't match. [ 52.519056][ T3303] GPT:34 != 290 [ 52.528617][ T3303] GPT: Use GNU Parted to correct GPT errors. [ 52.540918][ T3303] loop1: p1 p2 p3 [ 52.569572][ T4480] GPT:first_usable_lbas don't match. [ 52.582544][ T4480] GPT:34 != 290 [ 52.590843][ T4480] GPT: Use GNU Parted to correct GPT errors. [ 52.607628][ T4480] loop1: p1 p2 p3 [ 52.789522][ T4505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4505 comm=syz.2.227 [ 52.907799][ T4507] FAULT_INJECTION: forcing a failure. [ 52.907799][ T4507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.952363][ T4507] CPU: 0 UID: 0 PID: 4507 Comm: syz.1.228 Not tainted syzkaller #0 PREEMPT(full) [ 52.952396][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 52.952410][ T4507] Call Trace: [ 52.952461][ T4507] [ 52.952468][ T4507] __dump_stack+0x1d/0x30 [ 52.952524][ T4507] dump_stack_lvl+0x95/0xd0 [ 52.952553][ T4507] dump_stack+0x15/0x1b [ 52.952579][ T4507] should_fail_ex+0x263/0x280 [ 52.952672][ T4507] should_fail+0xb/0x20 [ 52.952697][ T4507] should_fail_usercopy+0x1a/0x20 [ 52.952727][ T4507] _copy_to_iter+0xd2/0xea0 [ 52.952756][ T4507] ? should_failslab+0x8c/0xb0 [ 52.952825][ T4507] ? rt_acct_proc_show+0x1ca/0x1f0 [ 52.952901][ T4507] ? kfree+0x101/0x380 [ 52.952981][ T4507] ? rt_acct_proc_show+0x1ca/0x1f0 [ 52.953008][ T4507] seq_read_iter+0x776/0x940 [ 52.953041][ T4507] proc_reg_read_iter+0x110/0x180 [ 52.953071][ T4507] do_iter_readv_writev+0x4fd/0x5a0 [ 52.953152][ T4507] vfs_readv+0x1f4/0x6e0 [ 52.953259][ T4507] do_readv+0xe9/0x210 [ 52.953355][ T4507] __x64_sys_readv+0x45/0x50 [ 52.953394][ T4507] x64_sys_call+0x27c0/0x3020 [ 52.953461][ T4507] do_syscall_64+0x12c/0x370 [ 52.953515][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.953543][ T4507] RIP: 0033:0x7fe343d7bf79 [ 52.953562][ T4507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.953582][ T4507] RSP: 002b:00007fe3427d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 52.953605][ T4507] RAX: ffffffffffffffda RBX: 00007fe343ff5fa0 RCX: 00007fe343d7bf79 [ 52.953623][ T4507] RDX: 0000000000000001 RSI: 00002000000014c0 RDI: 0000000000000003 [ 52.953637][ T4507] RBP: 00007fe3427d7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.953652][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.953665][ T4507] R13: 00007fe343ff6038 R14: 00007fe343ff5fa0 R15: 00007ffc83392618 [ 52.953687][ T4507] [ 52.962444][ T4511] loop5: detected capacity change from 0 to 1024 [ 53.173242][ T4511] EXT4-fs: Ignoring removed oldalloc option [ 53.182731][ T4511] EXT4-fs: Ignoring removed bh option [ 53.203594][ T4511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.240162][ T4511] netlink: 'syz.5.229': attribute type 4 has an invalid length. [ 53.303764][ T4067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.373224][ T4526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.233'. [ 53.376430][ T4504] loop2: detected capacity change from 0 to 512 [ 53.410761][ T4504] EXT4-fs: Ignoring removed nobh option [ 53.444367][ T4504] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 53.472133][ T4504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 53.491814][ T4504] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.520728][ T4504] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.227: attempt to clear invalid blocks 1024 len 1 [ 53.535159][ T4504] fserror_report: 4 callbacks suppressed [ 53.535175][ T4504] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.549741][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 53.569672][ C0] EXT4-fs (loop2): initial error at time 1771161651: ext4_clear_blocks:876: inode 11 [ 53.580120][ C0] EXT4-fs (loop2): last error at time 1771161651: ext4_clear_blocks:876: inode 11 [ 53.596616][ T4504] EXT4-fs (loop2): Remounting filesystem read-only [ 53.610531][ T4504] EXT4-fs (loop2): 1 truncate cleaned up [ 53.625664][ T4504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 53.671000][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 53.686466][ T4538] netlink: 'syz.1.235': attribute type 10 has an invalid length. [ 53.710122][ T4540] FAULT_INJECTION: forcing a failure. [ 53.710122][ T4540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.768887][ T4540] CPU: 0 UID: 0 PID: 4540 Comm: syz.2.236 Not tainted syzkaller #0 PREEMPT(full) [ 53.768991][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.769004][ T4540] Call Trace: [ 53.769011][ T4540] [ 53.769029][ T4540] __dump_stack+0x1d/0x30 [ 53.769059][ T4540] dump_stack_lvl+0x95/0xd0 [ 53.769084][ T4540] dump_stack+0x15/0x1b [ 53.769255][ T4540] should_fail_ex+0x263/0x280 [ 53.769342][ T4540] should_fail+0xb/0x20 [ 53.769365][ T4540] should_fail_usercopy+0x1a/0x20 [ 53.769395][ T4540] _copy_from_user+0x1c/0xb0 [ 53.769466][ T4540] ___sys_sendmsg+0xc1/0x1e0 [ 53.769549][ T4540] __x64_sys_sendmsg+0xd4/0x160 [ 53.769579][ T4540] x64_sys_call+0x194c/0x3020 [ 53.769610][ T4540] do_syscall_64+0x12c/0x370 [ 53.769660][ T4540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.769680][ T4540] RIP: 0033:0x7ff22b94bf79 [ 53.769772][ T4540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.769791][ T4540] RSP: 002b:00007ff22a39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.769845][ T4540] RAX: ffffffffffffffda RBX: 00007ff22bbc5fa0 RCX: 00007ff22b94bf79 [ 53.769858][ T4540] RDX: 0000000000044099 RSI: 0000200000000040 RDI: 0000000000000004 [ 53.769871][ T4540] RBP: 00007ff22a39f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.769905][ T4540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.769919][ T4540] R13: 00007ff22bbc6038 R14: 00007ff22bbc5fa0 R15: 00007fff7c0b3d18 [ 53.769966][ T4540] [ 53.957831][ T4542] netlink: 52 bytes leftover after parsing attributes in process `syz.4.237'. [ 54.012499][ T4542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=4542 comm=syz.4.237 [ 54.044325][ T4550] netlink: 84 bytes leftover after parsing attributes in process `syz.3.241'. [ 54.044932][ T4542] netlink: 76 bytes leftover after parsing attributes in process `syz.4.237'. [ 54.064476][ T4542] netlink: 52 bytes leftover after parsing attributes in process `syz.4.237'. [ 54.083056][ T4556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.244'. [ 54.102319][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 54.367639][ T4571] lo speed is unknown, defaulting to 1000 [ 54.404661][ T4572] x_tables: unsorted entry at hook 3 [ 54.451693][ T4571] lo speed is unknown, defaulting to 1000 [ 54.528743][ T4572] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 54.539283][ T4576] loop1: detected capacity change from 0 to 128 [ 54.599254][ T4573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 54.727573][ T4572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.753789][ T3309] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 54.765703][ T3309] FAT-fs (loop1): Filesystem has been set read-only [ 54.773090][ T3309] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 54.782158][ T3309] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 54.801474][ T4572] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 54.816611][ T4571] lo speed is unknown, defaulting to 1000 [ 54.825902][ T4571] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.833684][ T4571] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.865957][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 54.884326][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 54.884360][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 54.884397][ T3321] Call Trace: [ 54.884405][ T3321] [ 54.884415][ T3321] __dump_stack+0x1d/0x30 [ 54.884445][ T3321] dump_stack_lvl+0x95/0xd0 [ 54.884469][ T3321] dump_stack+0x15/0x1b [ 54.884489][ T3321] dump_header+0x80/0x240 [ 54.884543][ T3321] oom_kill_process+0x295/0x350 [ 54.884630][ T3321] out_of_memory+0x97d/0xb80 [ 54.884674][ T3321] try_charge_memcg+0x62e/0xa10 [ 54.884715][ T3321] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 54.884809][ T3321] __swap_cache_prepare_and_add+0x386/0x530 [ 54.884878][ T3321] swap_cache_alloc_folio+0xa2/0x120 [ 54.884909][ T3321] swap_cluster_readahead+0x26e/0x3d0 [ 54.884940][ T3321] swapin_readahead+0xde/0x840 [ 54.884968][ T3321] ? __rcu_read_unlock+0x4e/0x70 [ 54.885052][ T3321] ? __perf_event_task_sched_in+0xa65/0xad0 [ 54.885083][ T3321] ? __list_add_valid_or_report+0x38/0xe0 [ 54.885189][ T3321] ? __rcu_read_unlock+0x4e/0x70 [ 54.885211][ T3321] ? swap_cache_get_folio+0x26f/0x280 [ 54.885280][ T3321] do_swap_page+0x309/0x2210 [ 54.885308][ T3321] ? __schedule+0x85a/0xd40 [ 54.885381][ T3321] ? __rcu_read_lock+0x36/0x50 [ 54.885517][ T3321] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 54.885562][ T3321] handle_mm_fault+0xb40/0x3020 [ 54.885594][ T3321] ? vma_start_read+0x1c7/0x2c0 [ 54.885622][ T3321] do_user_addr_fault+0x62f/0x1050 [ 54.885744][ T3321] ? trace_page_fault_user+0x1f/0xe0 [ 54.885781][ T3321] exc_page_fault+0x62/0xa0 [ 54.885810][ T3321] asm_exc_page_fault+0x26/0x30 [ 54.885834][ T3321] RIP: 0033:0x7ff22b907197 [ 54.885854][ T3321] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 54.885874][ T3321] RSP: 002b:00007fff7c0b4010 EFLAGS: 00010202 [ 54.885891][ T3321] RAX: 0000000000000000 RBX: 00005555919de500 RCX: 00007ff22b907197 [ 54.885979][ T3321] RDX: 00007fff7c0b4050 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.885995][ T3321] RBP: 00007fff7c0b40bc R08: 0000000000000000 R09: 0000000000000000 [ 54.886010][ T3321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 54.886025][ T3321] R13: 00000000000927c0 R14: 000000000000d5d6 R15: 00007fff7c0b4110 [ 54.886047][ T3321] [ 54.886092][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 554 [ 55.131409][ T3321] memory+swap: usage 856kB, limit 9007199254740988kB, failcnt 0 [ 55.139184][ T3321] kmem: usage 508kB, limit 9007199254740988kB, failcnt 0 [ 55.146780][ T3321] Memory cgroup stats for /syz2: [ 55.147077][ T3321] cache 0 [ 55.157591][ T3321] rss 4096 [ 55.160870][ T3321] shmem 0 [ 55.163821][ T3321] mapped_file 0 [ 55.167417][ T3321] dirty 0 [ 55.170592][ T3321] writeback 0 [ 55.174585][ T3321] workingset_refault_anon 16 [ 55.179226][ T3321] workingset_refault_file 0 [ 55.184005][ T3321] swap 200704 [ 55.187335][ T3321] swapcached 8564736 [ 55.191583][ T3321] pgpgin 31464 [ 55.194989][ T3321] pgpgout 31458 [ 55.217439][ T3321] pgfault 35189 [ 55.222990][ T4584] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 55.223005][ T3321] pgmajfault 7 [ 55.223017][ T3321] inactive_anon 0 [ 55.258594][ T3321] active_anon 20480 [ 55.262495][ T3321] inactive_file 0 [ 55.266139][ T3321] active_file 4096 [ 55.270426][ T3321] unevictable 0 [ 55.273899][ T3321] hierarchical_memory_limit 314572800 [ 55.279366][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 55.286258][ T3321] total_cache 0 [ 55.289889][ T3321] total_rss 4096 [ 55.293820][ T3321] total_shmem 0 [ 55.297408][ T3321] total_mapped_file 0 [ 55.302109][ T3321] total_dirty 0 [ 55.305680][ T3321] total_writeback 0 [ 55.311604][ T3321] total_workingset_refault_anon 16 [ 55.316787][ T3321] total_workingset_refault_file 0 [ 55.323001][ T3321] total_swap 200704 [ 55.326915][ T3321] total_swapcached 8564736 [ 55.332679][ T3321] total_pgpgin 31464 [ 55.336904][ T3321] total_pgpgout 31458 [ 55.341408][ T3321] total_pgfault 35189 [ 55.345406][ T3321] total_pgmajfault 7 [ 55.349395][ T3321] total_inactive_anon 0 [ 55.354341][ T3321] total_active_anon 20480 [ 55.358766][ T3321] total_inactive_file 0 [ 55.363276][ T3321] total_active_file 4096 [ 55.368002][ T3321] total_unevictable 0 [ 55.372663][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.247,pid=4564,uid=0 [ 55.387530][ T3321] Memory cgroup out of memory: Killed process 4564 (syz.2.247) total-vm:100572kB, anon-rss:1236kB, file-rss:26648kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 55.407024][ T4565] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 55.423855][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 55.423882][ T28] audit: type=1400 audit(1771161653.612:572): avc: denied { ioctl } for pid=4589 comm="syz.5.253" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.475162][ T4571] lo speed is unknown, defaulting to 1000 [ 55.477372][ T4584] team0: Port device netdevsim1 added [ 55.487104][ T4571] lo speed is unknown, defaulting to 1000 [ 55.493308][ T4571] lo speed is unknown, defaulting to 1000 [ 55.499484][ T4571] lo speed is unknown, defaulting to 1000 [ 55.505707][ T4571] lo speed is unknown, defaulting to 1000 [ 55.539795][ T28] audit: type=1400 audit(1771161653.722:573): avc: denied { create } for pid=4593 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.560607][ T4595] loop5: detected capacity change from 0 to 512 [ 55.567280][ T4595] EXT4-fs: Ignoring removed orlov option [ 55.578739][ T28] audit: type=1400 audit(1771161653.752:574): avc: denied { write } for pid=4593 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.611984][ T4595] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 55.635416][ T28] audit: type=1400 audit(1771161653.822:575): avc: denied { create } for pid=4600 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 55.669279][ T28] audit: type=1400 audit(1771161653.822:576): avc: denied { write } for pid=4601 comm="syz.2.259" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.699902][ T4597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.257'. [ 55.754502][ T4595] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 55.771552][ T4595] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.254: corrupted in-inode xattr: e_value size too large [ 55.788604][ T4595] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.788942][ T4595] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.254: couldn't read orphan inode 15 (err -117) [ 55.798519][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 55.798542][ C1] EXT4-fs (loop5): initial error at time 1771161653: ext4_iget_extra_inode:5025: inode 15 [ 55.798573][ C1] EXT4-fs (loop5): last error at time 1771161653: ext4_iget_extra_inode:5025: inode 15 [ 55.838009][ T4595] loop5: lost filesystem error report for type 5 error -117 [ 55.901561][ T4595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.966576][ T28] audit: type=1400 audit(1771161654.152:577): avc: denied { connect } for pid=4622 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 55.978893][ T4607] lo speed is unknown, defaulting to 1000 [ 55.988415][ T28] audit: type=1400 audit(1771161654.152:578): avc: denied { bind } for pid=4622 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.027483][ T4592] dvmrp6: entered allmulticast mode [ 56.166180][ T4067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.212144][ T4607] chnl_net:caif_netlink_parms(): no params data found [ 56.414589][ T4628] loop4: detected capacity change from 0 to 512 [ 56.511517][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.540568][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.548535][ T28] audit: type=1400 audit(1771161654.732:579): avc: denied { bind } for pid=4629 comm="syz.5.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.569642][ T4607] bridge_slave_0: entered allmulticast mode [ 56.576465][ T4607] bridge_slave_0: entered promiscuous mode [ 56.584048][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.591320][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.595100][ T4628] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.4.265: corrupted xattr block 95: invalid header [ 56.598955][ T4607] bridge_slave_1: entered allmulticast mode [ 56.620497][ T4607] bridge_slave_1: entered promiscuous mode [ 56.627302][ T4628] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.629520][ T4628] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 56.629567][ T4634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.264'. [ 56.638731][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 56.638766][ C0] EXT4-fs (loop4): initial error at time 1771161654: ext4_expand_extra_isize_ea:2808: inode 11 [ 56.638794][ C0] EXT4-fs (loop4): last error at time 1771161654: ext4_expand_extra_isize_ea:2808 [ 56.652424][ T4628] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.265: bg 0: block 7: invalid block bitmap [ 56.660616][ C0] : inode 11 [ 56.705976][ T4628] loop4: lost filesystem error report for type 5 error -117 [ 56.717872][ T4628] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 56.746090][ T4607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.770944][ T4628] loop4: lost filesystem error report for type 5 error -117 [ 56.771135][ T4628] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #11: comm syz.4.265: corrupted xattr block 95: invalid header [ 56.804086][ T4607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.830437][ T28] audit: type=1326 audit(1771161655.012:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 56.854232][ T4628] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.854819][ T4607] team0: Port device team_slave_0 added [ 56.876173][ T28] audit: type=1326 audit(1771161655.012:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 56.878594][ T4628] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 56.910957][ T4607] team0: Port device team_slave_1 added [ 56.939558][ T4628] EXT4-fs (loop4): 1 orphan inode deleted [ 56.952530][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.960063][ T4628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.972634][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.008529][ T4607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.020911][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.037810][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.080017][ T4607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.425487][ T4659] loop5: detected capacity change from 0 to 512 [ 57.470358][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.483302][ T4661] loop3: detected capacity change from 0 to 256 [ 57.502199][ T4607] hsr_slave_0: entered promiscuous mode [ 57.528300][ T4607] hsr_slave_1: entered promiscuous mode [ 57.580263][ T4607] debugfs: 'hsr0' already exists in 'hsr' [ 57.609784][ T4607] Cannot create hsr debugfs directory [ 57.670877][ T4234] team0: Port device netdevsim1 removed [ 57.981185][ T4234] bridge_slave_1: left allmulticast mode [ 58.040306][ T4234] bridge_slave_1: left promiscuous mode [ 58.079487][ T4234] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.134660][ T4234] bridge_slave_0: left allmulticast mode [ 58.152955][ T4234] bridge_slave_0: left promiscuous mode [ 58.189498][ T4234] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.382899][ T4234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.396953][ T4234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.412805][ T4234] bond0 (unregistering): Released all slaves [ 58.420878][ T4691] loop3: detected capacity change from 0 to 128 [ 58.436637][ T4691] syz.3.277: attempt to access beyond end of device [ 58.436637][ T4691] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 58.503212][ T4690] syz.3.277: attempt to access beyond end of device [ 58.503212][ T4690] loop3: rw=524288, sector=138, nr_sectors = 112 limit=128 [ 58.519967][ T4234] hsr_slave_0: left promiscuous mode [ 58.531001][ T4234] hsr_slave_1: left promiscuous mode [ 58.544701][ T4701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.550196][ T4234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.561122][ T4690] syz.3.277: attempt to access beyond end of device [ 58.561122][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.576825][ T4690] syz.3.277: attempt to access beyond end of device [ 58.576825][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.600693][ T4234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.609893][ T4690] syz.3.277: attempt to access beyond end of device [ 58.609893][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.643974][ T4690] syz.3.277: attempt to access beyond end of device [ 58.643974][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.678722][ T4690] syz.3.277: attempt to access beyond end of device [ 58.678722][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.700787][ T4690] syz.3.277: attempt to access beyond end of device [ 58.700787][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.716836][ T4690] syz.3.277: attempt to access beyond end of device [ 58.716836][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.751458][ T4715] __nla_validate_parse: 1 callbacks suppressed [ 58.751555][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.282'. [ 58.756013][ T4690] syz.3.277: attempt to access beyond end of device [ 58.756013][ T4690] loop3: rw=8388608, sector=138, nr_sectors = 8 limit=128 [ 58.808123][ T4234] team0 (unregistering): Port device team_slave_1 removed [ 58.923523][ T4234] team0 (unregistering): Port device team_slave_0 removed [ 59.046549][ T3503] IPVS: starting estimator thread 0... [ 59.102544][ T4750] loop2: detected capacity change from 0 to 256 [ 59.149808][ T4743] IPVS: using max 2544 ests per chain, 127200 per kthread [ 59.170379][ T4750] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.234587][ T4607] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.263434][ T4607] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.291821][ T4381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 59.306562][ T4607] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.317552][ T4381] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.352440][ T4607] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.507795][ T4607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.552869][ T4607] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.567280][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.574588][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.616629][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.623850][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.966708][ T4607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.533941][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.292'. [ 61.011422][ T4926] netlink: 52 bytes leftover after parsing attributes in process `syz.3.296'. [ 61.052674][ T4607] veth0_vlan: entered promiscuous mode [ 61.069337][ T4607] veth1_vlan: entered promiscuous mode [ 61.173404][ T4607] veth0_macvtap: entered promiscuous mode [ 61.228214][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 61.228244][ T28] audit: type=1400 audit(1771161659.412:621): avc: denied { listen } for pid=4932 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.283381][ T4934] process 'syz.2.298' launched '/dev/fd/11' with NULL argv: empty string added [ 61.312662][ T28] audit: type=1400 audit(1771161659.502:622): avc: denied { execute_no_trans } for pid=4932 comm="syz.2.298" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.369624][ T4607] veth1_macvtap: entered promiscuous mode [ 61.403745][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.424956][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.443789][ T4244] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.453555][ T4244] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.495490][ T4244] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.519376][ T4244] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.566879][ T4963] lo speed is unknown, defaulting to 1000 [ 62.002366][ T5000] FAULT_INJECTION: forcing a failure. [ 62.002366][ T5000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.024435][ T5000] CPU: 0 UID: 0 PID: 5000 Comm: syz.4.307 Not tainted syzkaller #0 PREEMPT(full) [ 62.024465][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 62.024478][ T5000] Call Trace: [ 62.024485][ T5000] [ 62.024492][ T5000] __dump_stack+0x1d/0x30 [ 62.024524][ T5000] dump_stack_lvl+0x95/0xd0 [ 62.024562][ T5000] dump_stack+0x15/0x1b [ 62.024582][ T5000] should_fail_ex+0x263/0x280 [ 62.024605][ T5000] should_fail+0xb/0x20 [ 62.024628][ T5000] should_fail_usercopy+0x1a/0x20 [ 62.024667][ T5000] _copy_from_user+0x1c/0xb0 [ 62.024700][ T5000] __sys_bpf+0x183/0x7e0 [ 62.024768][ T5000] __x64_sys_bpf+0x41/0x50 [ 62.024822][ T5000] x64_sys_call+0x10cb/0x3020 [ 62.024880][ T5000] do_syscall_64+0x12c/0x370 [ 62.024912][ T5000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.024934][ T5000] RIP: 0033:0x7f8945b3bf79 [ 62.025021][ T5000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.025061][ T5000] RSP: 002b:00007f894458f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.025084][ T5000] RAX: ffffffffffffffda RBX: 00007f8945db5fa0 RCX: 00007f8945b3bf79 [ 62.025098][ T5000] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000009 [ 62.025111][ T5000] RBP: 00007f894458f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.025123][ T5000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.025218][ T5000] R13: 00007f8945db6038 R14: 00007f8945db5fa0 R15: 00007ffffc6dde18 [ 62.025268][ T5000] [ 62.234426][ T28] audit: type=1326 audit(1771161660.392:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.377698][ T28] audit: type=1326 audit(1771161660.392:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.462879][ T28] audit: type=1326 audit(1771161660.392:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.519872][ T28] audit: type=1326 audit(1771161660.392:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.578327][ T28] audit: type=1326 audit(1771161660.392:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.611995][ T28] audit: type=1326 audit(1771161660.392:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.666584][ T28] audit: type=1326 audit(1771161660.392:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.723727][ T28] audit: type=1326 audit(1771161660.392:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.2.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff22b94bf79 code=0x7ffc0000 [ 62.917034][ T5047] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 62.954995][ T5047] loop6: detected capacity change from 0 to 512 [ 62.978075][ T5047] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.004800][ T5047] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 63.023226][ T5047] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 63.039599][ T5047] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c000e01c, mo2=0006] [ 63.051221][ T5047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.079119][ T4607] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.143909][ T5051] netlink: 32 bytes leftover after parsing attributes in process `syz.6.322'. [ 63.506076][ T5073] loop4: detected capacity change from 0 to 2048 [ 63.531121][ T3303] loop4: p1 < > p4 [ 63.540205][ T3303] loop4: p4 size 722688 extends beyond EOD, truncated [ 63.551764][ T5073] loop4: p1 < > p4 [ 63.556362][ T5073] loop4: p4 size 722688 extends beyond EOD, truncated [ 63.606666][ T5075] netlink: 'syz.5.328': attribute type 27 has an invalid length. [ 63.660603][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.668122][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.709214][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.719624][ T5075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.817289][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.825069][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.833976][ T5079] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.892239][ T37] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.903073][ T37] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.914570][ T37] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.933200][ T37] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.990580][ T5087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.329'. [ 64.153989][ T5091] loop5: detected capacity change from 0 to 512 [ 64.160976][ T5091] ext3: Unknown parameter '" ¸‰P' [ 64.351369][ T3303] ================================================================== [ 64.359469][ T3303] BUG: KCSAN: data-race in __d_drop / fast_dput [ 64.365802][ T3303] [ 64.368127][ T3303] write to 0xffff88811b120010 of 8 bytes by task 3000 on cpu 0: [ 64.375926][ T3303] __d_drop+0x14d/0x240 [ 64.380183][ T3303] __dentry_kill+0x122/0x460 [ 64.384950][ T3303] finish_dput+0x2b/0x200 [ 64.389465][ T3303] dput+0x52/0x60 [ 64.393232][ T3303] lookup_one_qstr_excl+0x15a/0x250 [ 64.398431][ T3303] filename_unlinkat+0x149/0x410 [ 64.403380][ T3303] __se_sys_unlink+0x2b/0xe0 [ 64.407978][ T3303] __x64_sys_unlink+0x1f/0x30 [ 64.412743][ T3303] x64_sys_call+0x2eb6/0x3020 [ 64.417419][ T3303] do_syscall_64+0x12c/0x370 [ 64.422009][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.428245][ T3303] [ 64.430742][ T3303] read to 0xffff88811b120010 of 8 bytes by task 3303 on cpu 1: [ 64.438371][ T3303] fast_dput+0x5f/0x2c0 [ 64.442622][ T3303] dput+0x24/0x60 [ 64.446255][ T3303] filename_unlinkat+0x217/0x410 [ 64.451261][ T3303] __se_sys_unlink+0x2b/0xe0 [ 64.455972][ T3303] __x64_sys_unlink+0x1f/0x30 [ 64.460771][ T3303] x64_sys_call+0x2eb6/0x3020 [ 64.465567][ T3303] do_syscall_64+0x12c/0x370 [ 64.470188][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.476273][ T3303] [ 64.478603][ T3303] value changed: 0xffff8882374866a0 -> 0x0000000000000000 [ 64.485817][ T3303] [ 64.488149][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 64.494307][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 64.503621][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.513869][ T3303] ================================================================== [ 64.867968][ T5094] loop4: detected capacity change from 0 to 512 [ 64.875682][ T5094] EXT4-fs: Ignoring removed bh option [ 64.883429][ T5094] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 64.925546][ T5094] EXT4-fs (loop4): 1 truncate cleaned up [ 64.932526][ T5094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.234045][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.115671][ T5051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512