last executing test programs: 2.024118008s ago: executing program 0 (id=817): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x13c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.985570378s ago: executing program 0 (id=818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) io_setup(0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000280)=[{0x4, 0x5, 0x40, 0x0, @time={0x8, 0x7}, {0xf7, 0xf}, {0x3, 0x9}, @queue={0x0, {0x17, 0x9}}}, {0x5, 0x9, 0x3, 0x2, @time={0xffffffff, 0x4}, {0xff, 0xb}, {0x6, 0xfc}, @time=@time={0x9, 0xd}}], 0x38) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xf, r0, &(0x7f0000000080)="5fb6630d4b494f55c0ffabaa89bb83483c4c73869ad1e6863eb4f253ae5fd62ffea58a5ba9a2f2ed", 0x28, 0x2, 0x0, 0x1, r3}, &(0x7f00000001c0)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmmsg(r5, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000340)=[{&(0x7f0000001640)="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", 0x6fa}], 0x1}}], 0x1, 0x8084) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x4) r9 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000003c0)=0x800000001, 0xffffffffffffffec) sendto$inet6(r9, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) recvmmsg(r8, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) recvmmsg(r4, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2}], 0x5, 0x0, 0x0) 1.8847392s ago: executing program 3 (id=822): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f972bef63842ee3b291", 0x15}, {&(0x7f0000000640)="3df30a", 0x3}], 0x4) 1.725682522s ago: executing program 3 (id=825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1.618959524s ago: executing program 1 (id=830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x10000000000ac2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x121081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=") setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@loopback, @in=@private=0xa010100, 0x4e20, 0xc337, 0x4e22, 0x0, 0x2, 0xa0, 0xa0, 0x2c}, {0xfffffffffffffff9, 0xa700, 0x8000, 0x8, 0x7, 0x7, 0x2000000001}, {0x7, 0x4, 0xd35, 0x2}, 0x2, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0x2, @in=@empty, 0x3503, 0x4, 0x0, 0xfc, 0x8000, 0x101, 0x101}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x200000000000008b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff2f40de494ffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x4, 0x0, 0x3057, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0xb18, 0x0, 0x0, 0x1f00, 0x42, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r2, r5], &(0x7f0000000780)=[{0x2, 0x1, 0xb}, {0x4, 0x1, 0x5, 0x9}], 0x10, 0x1}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) semop(0x0, &(0x7f0000000680)=[{0x4, 0x5, 0xc00}, {0x4, 0xfff8}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8b31, 0x1000}, {0x3, 0x9, 0x800}], 0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close(r7) 1.547725846s ago: executing program 1 (id=833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369", 0xb}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f", 0xc}, {&(0x7f0000000640)="3df30ac1", 0x4}], 0x4) 1.491309096s ago: executing program 1 (id=835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f972bef63842ee3b291da39", 0x17}, {&(0x7f0000000640)="3df30a", 0x3}], 0x4) 1.442488017s ago: executing program 1 (id=839): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000240), 0x2, 0x5f1, &(0x7f0000001040)="$eJzs3c1vVFUbAPDnTj9oKXk7kDcqLqSJMZAoLS1gGuMCtoY0+BE3urDSgkiBhtZo0YSS4MbEuDHGxJUL8b9QIltWunLhxpUhIWpYmjjmztxbOu2dftHOEO7vlwxz7zlze86lfeace+acOwGU1lD6TyVif0TMJhGDyeJSXndkmUON193/+5Mz6SOJWu31P5NIsrT89Un2PJAd3BcRP/+UxL6u1eXOLVy9MDkzM30l2x+Zvzg7Mrdw9fD5i5Pnps9NXxp7cWz8+LHj46NHtnRe1wrSTt14/8PBzybe+u6bf5LR73+bSOJEvJK9cPl5bJehGKr/nySrswbGt7uwDunK/k5qtVotT0u6O1snNi7//fVExJMxGF3x4Jc3GJ++2tHKATuqljTeu4EySsQ/lFTeD8iv7VdeB1c60isB2uHeycYAwOr4726MDUZffWxg9/0klg/rJBGxtZG5Znsi4s7tiRtnb0/ciB0ahwOKLV6PiKeK4j+px381+qJaj/9KU/yn/YLT2XOa/toWy185VCz+oX0a8d+3ZvxHi/h/J32+1ojhd7dYfvXB5nv9TfHfv9VTAgAAAAAAgNK6dTIiXij6/L+yNP8nCub/DETEiW0of2jF/urP/yt3t6EYoMC9kxEvF87/reSzf6tdy5awVqMnOXt+ZvpIRPwvIg5Fz650f3SNMg5/vu/rVnlD2fy//JGWfyebC5jV4273ruZjpibnJx/ilIHMvesRTxfO/02W2v+koP1P3xlmN1jGvudunm6Vt378Azul9m3EwcL2/8FdK5K1788xUu8PjOS9gtWe+fiLH1qVv9X4d4sJeHhp+7977fivJsvv1zO3+TKOLnTXWuVttf/fm7xRv6tQb5b20eT8/JXRiN7kVFea2pQ+tvk6w+Moj4c8XtL4P/Ts2uN/Rf3//ohYXPGzk7+a1xTnnvh34PdW9dH/h85J439qU+3/5jfGblZ/bFX+xtr/Y/W2/lCWYvwPGr7Kw7S3Ob0gHLuLstpdXwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4HFQiYk8kleGl7UpleDhiICL+H7srM5fn5p8/e/mDS1NpXv37/yv5N/0ONvaT/Pv/q8v2x1bsH42IvRHxZVd/fX/4zOWZqU6fPAAAAAAAAAAAAAAAAAAAADwiBlqs/0/90dXp2gE7rrvTFQA6piD+f+lEPYD20/5DeYl/KC/xD+Ul/qG8xD+U11L89xflvj3e1soAbaX9h/IS/wAAAAAA8FjZe+DWr0lELL7UX3+kerO8no7WDNhplU5XAOgYt/iB8jL1B8rLNT6QrJPf1/Kg9Y5cy+yZhzgYAAAAAAAAAAAAAErn4H7r/6GsrP+H8rL+H8orX/9/oMP1ANrPNT4Q66zkL1z/v+5RAAAAAAAAAAAAAMB2mlu4emFyZmb6io03H41qtHOjVqtdS/8KHpX6bP9Gks1Qb0uh+VT49p9p70ZOMF/rt7Gf3Ln3JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNl/AQAA//8T4iWC") r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) r1 = memfd_secret(0x80000) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400ed00", @ANYRES16=r2, @ANYBLOB="07062abd7000000000002d000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(r0, &(0x7f0000000040)='./bus/file0\x00', 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000001980)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8fv\x9f\x05\xd1\x984\xc8\x14\xaaa\xe9\x91\x8e\xf9\xc8\xa4e\x00u\xef\xc2\xa5\xe27\xb4\xcds\xf4*I\x8f\x00\x00\x00\x00\x00\x00\x10\xac5\x1a\v\n\xca\x18\xfc\xd3G\xbd\'\xad<\x19O\xa6#\x82\xff \x03\xccA\x9f\x0e@\r\x1cD\x80nbWR\\\xfb\xc0a\xc5\x95P\xe7\xf4fPA\xc8\x03\xaeN\x12u\x91\x18\x17\xab\xc9\xf2\x1d\x96D\xc8\x0ft\x88\xb6{\xf6p\xfaU\x9a\x8f\xb1\xaf\x90\xb2u\'\xdc\x81\f\xe1\\89d\xe9\x06\xb1\xd9\x90\xb4\x9f\x11\'\xac\x14r\xfa\x88\xc9p#~E\x1c\xab\x96\b\xad\f\xe6\xc9\xad\xc9\xa0\f\x83\xb94\x0e[\xcd\xd6\xc9O\xba\xac\xc5\'\xdb\xce\xb4\xa4\xa3\x9a\x1eXk\x92g\x81\x7f\xfdBr\x84\xaf:O\xcf}N\xe1\x91\xaf\xd1\xb7\xd6=\xaf\xc1gf\x9d\x0fl;y\x05\xc0\xd7\xef\x05\xd3\xa0U\x12\xf4\xe2>\xad\x1df\xcf\xaaL,#\x82:\xb6\x8d\x89\xd9i\xcd\x88\x9a\x83Ig\x15m\x15\x1d\xd7m\xa48\xb3\x06\xec\xbe\xa2\xb8\xb6\xc8\xbec\x968\xa3\x00;\x85\x90-\x12\x16\xfa\x86jf\x9c\x17h\fIaUK\xf8\xc3\xf2\xe9\xaa\xb4=H\x8bF\xdb\x18\xcfM\xf8\x93\xb2\xb2F\x017k\xbe\xadr\x8b\xf0T^m0\xe2\xec\x9f\xddi\x82}\xa1\x85\xc1\xb9\x8b\xd9\x12(\xd5\xb3\xa7\xe8\xfen\xf8\xf5\xe4z\x02uC\x8f\x18\xe4D\x90\xfa1\x0e\x1c\xa7\xe0)Z\x86;V\x03\x84\x9b\x97\xe1\x97\xc3\x8bSc\xb4\xc7\xafk\xda\xb6\a\x1d\v\x00\x00\x00\x00\x00\x00\x00\xffbz:\x04\xfa\xb0\xbc\x15b\x1b\x1f\xbc\x17c5 p\x0f\xbb2\xc7k\x1b\xe8\xe3G\xba\x8d\x9e\xf3s\xd7\x13-\x0ec++B\x96\x98\r\x03\x88\xd6b)m\x80h/?i\x82t\xad\x91\xe7\x8b\x10\xed\x02\xd7wmt\x18\x12g\xbcL@\x9f\x98=\xc4\x9d2\xb9\xb5\xd0\x0f\xfc9\xac!\xd7\xb3\xe3n\xfe\xc0S\xa3\xc1\xe3\xd4\xa4kN\xba\xd4F\x97C \x1ckK,T\x03\xb6\x19\x9a\xeb\x11=\x8b\xd6\x86\x10oR\x8d\xcf\xa3\x8a\x01\x92T\x05bE\n{\xf8\xbac\x10\x9a\xee{,\xb4?\x92#{\xe4Mv\xab\x1d\x957\f\xd1') syz_open_dev$loop(0x0, 0x9, 0x12d600) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='kmem_cache_free\x00'}, 0x18) write$cgroup_devices(r4, 0x0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="ada68a2f96c6"}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) syz_open_dev$loop(&(0x7f0000000340), 0x4b74, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.050984763s ago: executing program 2 (id=843): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x13c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.010135994s ago: executing program 2 (id=845): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x177d, &(0x7f00000004c0)={0x0, 0x6992, 0x8, 0x40002, 0xfc}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02120002000000000002000000000000f0ecded18540b891de512ef7723540a8a9716a412193764ca6b9161f05674f9a294c4b862b53245f11d4a63a6d27cdf90cd62ee6fdf23c7d58ab8d72811bcaaaa2f878d60cf6c75bf80aa2c0400e484a60b38e6cb79ee50ba79957c43588bab8a3ade32bcded39e9a3697d608828748ca9689bc1da294411e20dbf3dd12bd53b043510c20d195e99f72da5920546aacd80ad7ef9da30a30167bdad53f65dbd0bd2e5f33849004bd5cf959ad1c5"], 0x10}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000001}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 936.357295ms ago: executing program 2 (id=848): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x177d, &(0x7f00000004c0)={0x0, 0x6992, 0x8, 0x40002, 0xfc}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@loopback, 0x4e24, 0x0, 0x1, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0xedfc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x8}, 0x0, 0x6e6bb8, 0x2}, {{@in=@multicast1, 0x1, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02120002000000000002000000000000f0ecded18540b891de512ef7723540a8a9716a412193764ca6b9161f05674f9a294c4b862b53245f11d4a63a6d27cdf90cd62ee6fdf23c7d58ab8d72811bcaaaa2f878d60cf6c75bf80aa2c0400e484a60b38e6cb79ee50ba79957c43588bab8a3ade32bcded39e9a3697d608828748ca9689bc1da294411e20dbf3dd12bd53b043510c20d195e99f72da5920546aacd80ad7ef9da30a30167bdad53f65dbd0bd2e5f33849004bd5cf959ad1c5"], 0x10}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000001}) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 863.306446ms ago: executing program 3 (id=850): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=""/6, 0x6) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8011, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=']) 862.649696ms ago: executing program 2 (id=851): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140ff"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x759, &(0x7f0000000680)={[{@nouid32}, {@jqfmt_vfsv1}, {@noinit_itable}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@noquota}, {@grpquota}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@bsdgroups}, {@jqfmt_vfsold}, {@quota}, {@abort}, {@delalloc}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@euid_lt}, {@fscontext={'fscontext', 0x3d, 'root'}}], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") setresuid(r0, r1, r3) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x18}, 0xfc00) listen(r4, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x3) 846.328936ms ago: executing program 4 (id=852): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) (fail_nth: 2) 709.976768ms ago: executing program 3 (id=853): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c0004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 623.02284ms ago: executing program 0 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e646a", 0x7}], 0x3) 615.39798ms ago: executing program 3 (id=855): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={0x0, 0x0, 0x4010}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='i=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000340)={0x1d, r6}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0xfffffffffffffd27) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xffff, 0xa}, {0x1, 0xd}}}, 0x24}}, 0x0) 201.857666ms ago: executing program 4 (id=856): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x140, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x104, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xec, 0x1, [@m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 201.197006ms ago: executing program 2 (id=857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x10000000000ac2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x121081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@loopback, @in=@private=0xa010100, 0x4e20, 0xc337, 0x4e22, 0x0, 0x2, 0xa0, 0xa0, 0x2c}, {0xfffffffffffffff9, 0xa700, 0x8000, 0x8, 0x7, 0x7, 0x2000000001}, {0x7, 0x4, 0xd35, 0x2}, 0x2, 0x6e6bc0, 0x0, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0xff}, 0x2, @in=@empty, 0x3503, 0x4, 0x0, 0xfc, 0x8000, 0x101, 0x101}}, 0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x200000000000008b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff2f40de494ffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x4, 0x0, 0x3057, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0xb18, 0x0, 0x0, 0x1f00, 0x42, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x1, 0x10, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r2, r5], &(0x7f0000000780)=[{0x2, 0x1, 0xb}, {0x4, 0x1, 0x5, 0x9}], 0x10, 0x1}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) semop(0x0, &(0x7f0000000680)=[{0x4, 0x5, 0xc00}, {0x4, 0xfff8}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x8b31, 0x1000}, {0x3, 0x9, 0x800}], 0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close(r7) 200.459337ms ago: executing program 1 (id=858): pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x8000000) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x696, &(0x7f0000000140)="$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") readv(r0, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r7}, 0x18) creat(&(0x7f0000000300)='./file0\x00', 0x0) 162.265377ms ago: executing program 0 (id=859): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x177d, &(0x7f00000004c0)={0x0, 0x6992, 0x8, 0x40002, 0xfc}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@loopback, 0x4e24, 0x0, 0x1, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0xedfc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x8}, 0x0, 0x6e6bb8, 0x2}, {{@in=@multicast1, 0x1, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000001}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 161.617387ms ago: executing program 4 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369", 0xb}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f", 0xc}, {&(0x7f0000000640)="3df30ac1", 0x4}], 0x4) 118.987108ms ago: executing program 3 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = signalfd4(r0, &(0x7f0000000040)={[0x1]}, 0x8, 0x800) ftruncate(r1, 0xff) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) waitid(0xfe, 0x0, 0x0, 0x8, 0xfffffffffffffffd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) syz_emit_ethernet(0x3a, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x3, 0x12}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) fcntl$dupfd(r4, 0x0, r3) socket$isdn_base(0x22, 0x3, 0x0) select(0x40, &(0x7f0000000180)={0x5, 0x7, 0xfff, 0x6, 0xffffffffffff7fff, 0x30c8fcc5, 0x8a}, 0x0, &(0x7f0000000300)={0x9, 0x7, 0x3, 0x101, 0x2, 0x2, 0x8000, 0x800}, &(0x7f0000000340)) close_range(r4, 0xffffffffffffffff, 0x0) 118.097278ms ago: executing program 2 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 83.400559ms ago: executing program 0 (id=863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f972bef63842ee3b291da39", 0x17}, {&(0x7f0000000640)="3df30a", 0x3}], 0x4) 55.516759ms ago: executing program 4 (id=864): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x87) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = io_uring_setup(0x177d, &(0x7f00000004c0)={0x0, 0x6992, 0x8, 0x40002, 0xfc}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@loopback, 0x4e24, 0x0, 0x1, 0xffff, 0x2}, {0x0, 0x0, 0x0, 0xedfc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x8}, 0x0, 0x6e6bb8, 0x2}, {{@in=@multicast1, 0x1, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x34ff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="02120002000000000002000000000000f0ecded18540b891de512ef7723540a8a9716a412193764ca6b9161f05674f9a294c4b862b53245f11d4a63a6d27cdf90cd62ee6fdf23c7d58ab8d72811bcaaaa2f878d60cf6c75bf80aa2c0400e484a60b38e6cb79ee50ba79957c43588bab8a3ade32bcded39e9a3697d608828748ca9689bc1da294411e20dbf3dd12bd53b043510c20d195e99f72da5920546aacd80ad7ef9da30a30167bdad53f65dbd0bd2e5f33849004bd5cf959ad1c5"], 0x10}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000001}) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="16bd075ff285a2e14f9a0900cdbf4c426a70dfdac3e988c7d9a5c554ce0c1cc2fe31499e0a5010f187d6ccb7a71ea4c542cc5a2b20af2875aa308339d56a3d74e6f8dc6dc04d2b350cb5f0c30a834c061ff9da39c115959e793b9218bcf9fcac665d3d244446a18fca5311c47565d25ed011a059f11a026893e535450dce2158600517106e3a6a09a08ec26630ef07cd603797f98e4e0499fc58597586d8a24a68f9c311c5e60af706a8746fdcfde220a7c8b2fd2a71a722ab1b1c51612eab5eed387eeeb22c94c1f5efdf55edcf318552274d610a288d3b5cbc4ae83cdec75d326504d3bae8378abe130b6fb0bedb0ab7a03cf5c6835055903169195fbe82aedb1d78c6ffda97e13d6c3d3e847ea4d5953f80ab814ae880114418b1a446b31ab4d7e5569aa08714adfec90ecf978a8253477b49ff2ead02212ada8df1127579ddb138a77d1c142a81c193d96b0320ea5f5b557e253bfecd92e366af838e52425ab10f4ac3ae42cbe5152b400d3ad0d06cb64fc6cb28b92787476b615cec8a3ddb34237877cdbb88a6ccea0e4f39a24ee9"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 34.237489ms ago: executing program 1 (id=865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) io_setup(0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000280)=[{0x4, 0x5, 0x40, 0x0, @time={0x8, 0x7}, {0xf7, 0xf}, {0x3, 0x9}, @queue={0x0, {0x17, 0x9}}}, {0x5, 0x9, 0x3, 0x2, @time={0xffffffff, 0x4}, {0xff, 0xb}, {0x6, 0xfc}, @time=@time={0x9, 0xd}}], 0x38) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xf, r0, &(0x7f0000000080)="5fb6630d4b494f55c0ffabaa89bb83483c4c73869ad1e6863eb4f253ae5fd62ffea58a5ba9a2f2ed", 0x28, 0x2, 0x0, 0x1, r3}, &(0x7f00000001c0)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmmsg(r5, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000340)=[{&(0x7f0000001640)="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", 0x6fa}], 0x1}}], 0x1, 0x8084) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x4) r9 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f00000003c0)=0x800000001, 0xffffffffffffffec) sendto$inet6(r9, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) recvmmsg(r8, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) recvmmsg(r4, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2}], 0x5, 0x0, 0x0) 33.546529ms ago: executing program 4 (id=866): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c0004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 1.37485ms ago: executing program 0 (id=867): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x20, 0x7ffc0002}]}) timer_getoverrun(0x0) (fail_nth: 3) 0s ago: executing program 4 (id=868): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) (async) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) (async) r5 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000600", @ANYRES64, @ANYBLOB, @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r5, @ANYBLOB="08000400"], 0x94, 0x1) (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000580)={0xa0, 0x19, 0x2, {0x8, {0x4, 0x3, 0xfffffffffffffffa}, 0x40, 0x0, r5, 0x1, 0x400, 0x1, 0x6, 0x1, 0x0, 0x60, 0x9e00000, 0x9, 0x80000001, 0x1, 0x800, 0x9, 0x7c62, 0x6c13c532}}, 0xa0) r6 = getegid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) getresgid(&(0x7f0000001c80)=0x0, &(0x7f0000001c40)=0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8=r9, @ANYRESHEX, @ANYRES32=r9, @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000001cc0)=ANY=[@ANYBLOB="f3b502000000000000bdaa", @ANYBLOB="ae763994bafc0453393b54477af055a773edd14a7d7b86d6fee1979814822bdbd473d83d8b5f1d6cf86a5b51247a3b958c723e8cd8ac5a9d6b7313a7d5d97735a10f80be960d6b4d4d2e35e1b9bcf198ec48913afbbf71bed933251c0f57d59d356e617c2f1b3a4b7f924930a5bd82138501790abacefe8e9766bf427a2fcd4e123fc30bcdfb81087d70f0b34166e08bcc015d49af4c72a1d9a9b710629b7a67cf130646538883706956da2a16c9e3eadf8927e77f631e0c3cb4dcba35ab78e4ca9dad29deb0fad877893c2f446df5bbbbd04906bfad41a57130b351031bc6de58c75ef4a4236f9816eadb8a604c7d24", @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02090000", @ANYRES16=r8, @ANYBLOB="040000000000000008000200", @ANYRES32=r5, @ANYBLOB='@\x00\x00\x00', @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES16=r10, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="08000f00", @ANYRES32=r9, @ANYRES16], 0x64, 0x1) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@nat={'nat\x00', 0x19, 0x6, 0x11ac, [0x2000000005c0, 0x0, 0x0, 0x200000000824, 0x200000000c80], 0x0, &(0x7f0000000240), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x4d, 0x886c, 'ip6_vti0\x00', 'rose0\x00', 'xfrm0\x00', '\x00', @random="707086d80250", [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, [], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@remote}}}}, {0x9, 0x4, 0xed, 'wlan0\x00', 'batadv0\x00', 'veth1_to_hsr\x00', 'pim6reg0\x00', @remote, [0xff, 0xff, 0x0, 0xff, 0xff, 0xf44720a64aa354ee], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xae, 0xe6, 0x11e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x6, 0xf, 0x1, 0x80000000, {0x2}}}}], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@random="13464f486546", 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x6, 0x1b, 'dvmrp1\x00', 'ip6erspan0\x00', 'macvlan1\x00', 'virt_wifi0\x00', @local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @random="7f6ae1fd7a53", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x1f6, 0x256, 0x28e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x30a, 0xd, 0x8, @rand_addr=0x64010102, 0xffffff00, @rand_addr=0x64010101, 0xff, @random="583c1b152fe4", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x5}}}, @comment={{'comment\x00', 0x0, 0x100}}], [@common=@STANDARD={'\x00', 0x8}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}, {0x18, 0x0, 0x43f0, 'pimreg\x00', 'veth0_to_team\x00', 'veth1\x00', 'veth1_to_bridge\x00', @multicast, [0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x278, 'system_u:object_r:var_spool_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x5, 0x20, 0x8809, 'bond_slave_0\x00', 'veth1_to_bridge\x00', 'veth1_to_hsr\x00', 'wg2\x00', @local, [0x0, 0xff, 0x0, 0xff], @random="036b54a334b7", [0x0, 0xff, 0xff, 0xff], 0xae, 0x116, 0x14e, [@owner={{'owner\x00', 0x0, 0x18}, {{0xffffffffffffffff, r3, r4, r6, 0x2}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@local, 0x10}}}}, {0x9, 0x84, 0x9a10, 'ip6erspan0\x00', 'team_slave_0\x00', 'wg0\x00', 'bridge0\x00', @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @random="11e26dfb07ba", [0x0, 0x0, 0x0, 0xff], 0x896, 0x906, 0x93e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x140, 0x1}, {0x5}, {0x8}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x1}, {0x10001, 0x3}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x2}, {0x1}], [{0xf0f, 0x5}, {0x66, 0x8cb}, {0x9, 0x1ffc00}, {0x101, 0xfffff3bd}, {0x1, 0xc}, {0x800, 0x6}, {0x81, 0x21c1}, {0xe, 0x5}, {0x80, 0x2}, {0x9, 0x2}, {0x8, 0xaa}], 0xa, 0x8}, {[{0x1f4}, {0x6}, {0x7}, {0xf}, {0x27f}, {0x101, 0x3}, {0x1, 0x1}, {0x81}, {0x5, 0x51badbb32ca85fee}, {0xf, 0x1}, {0xfffffffd, 0x2}], [{}, {}, {0x1, 0x9}, {0x2, 0xfffffffe}, {0xf1, 0x7fffffff}, {0x6, 0xc}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0x80}, {0x2}, {0xffffff7f, 0xff}], 0x3, 0x4}, {[{0xfa4e, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x9, 0x1}, {0xe, 0x2}, {0x4, 0x3}, {0x1b1, 0x1}, {0xfff, 0x1}, {0x7fffffff, 0x1}, {0xc26f, 0x1}, {0x8, 0x2}], [{0x5, 0x8}, {0x8, 0xc}, {0x9, 0x12}, {0x4, 0x4b0}, {0xffffffff, 0x3b9}, {0x6, 0x1}, {0x80000000, 0x3}, {0x80000000, 0x3}, {0x7, 0x4}, {0x8000, 0x649}, {0x4, 0x80}], 0x2, 0x8}, {[{0x37, 0x3}, {0x7, 0x3}, {0x6, 0x3}, {0x722, 0x2}, {0x1, 0x3}, {0x6, 0x2}, {0xda2, 0x1}, {0x80000001, 0x2}, {0xfffffffb, 0x1}, {0x3, 0x3}, {0x100, 0x2}], [{0x5, 0xfffffff9}, {0x40, 0x6}, {0xa, 0x3}, {0x25, 0x400}, {0x8000, 0x1}, {0x7, 0x4}, {0x800, 0x65}, {0x9}, {0x6, 0xb}, {0x9, 0xf7}, {0xfff, 0xffffffff}], 0x0, 0xb}, {[{0x8}, {0x9}, {0xfff, 0xfe2f4d0e148adc1e}, {0x9e, 0x3}, {0x8, 0x2}, {0x37aa4503, 0x3}, {0x52}, {0x4ce3, 0x3}, {0xb, 0x1}, {0x1, 0x2}, {0xb, 0x2}], [{0x7f, 0x2}, {0xe, 0x9}, {0x0, 0x2800}, {0x80000000, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x5}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0xfffffffa}, {0x3ff}], 0x5, 0xa}, {[{0xf09a, 0x3}, {0x98, 0x3}, {0x9, 0x1}, {0x40}, {0x9}, {0x5, 0x1}, {0xd, 0x2}, {0x8, 0x2}, {0x9, 0x2}, {0x8, 0x2}, {0x8, 0x3}], [{0x5}, {0x2, 0x2}, {0x4, 0x1000}, {0x7, 0x800}, {0x1}, {0xa36, 0x5f}, {0x8001}, {0x2}, {0x0, 0x800}, {0x10001, 0x4}, {0x2, 0x3}], 0x2, 0x3}, {[{0x1}, {0x0, 0x1}, {0x3, 0x1}, {0xd}, {0xa, 0x2}, {0x915, 0x1}, {0x27, 0x2}, {0x13, 0x3}, {0xf, 0x3}, {0x10, 0x1}, {0x2, 0x3}], [{0x0, 0x7}, {0x9, 0x4}, {0x0, 0x80000001}, {0x6, 0x61}, {0x6, 0xf7}, {0x100, 0x5}, {0xca3, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x81, 0x8}, {0x8000, 0x80}], 0xb, 0x1}, {[{0x9}, {0x81}, {0x3, 0x2}, {0x7, 0x2}, {0x5}, {0x1c3c}, {0x1}, {0xca8}, {0x9, 0x2}, {0xa, 0x1}, {0x5}], [{0x1, 0x466a}, {0x90, 0x101}, {0x5, 0x4}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x9}, {0x0, 0x4}, {0x1, 0xc}, {0x2, 0x9}, {0xe6a, 0x10}], 0x4}, {[{0x3, 0x3}, {0x4}, {0x3ff, 0x1}, {0x5, 0x3}, {0x5, 0x2}, {0x335}, {0xfffffffc, 0x3}, {0x80000001}, {0x0, 0x2}, {}, {0x4}], [{0xfffffffe, 0x80000000}, {0x5, 0x6e}, {0x5f5, 0x1}, {0x5, 0x4}, {0xc, 0xb}, {0xa85, 0xff}, {0x0, 0x1}, {0x0, 0xe}, {0xfffffffa, 0x36}, {0x8, 0x38000}, {0x2, 0xfff}], 0x2, 0x1}, {[{0x6, 0x2}, {0x10000, 0x2}, {0x9, 0x2}, {0x6, 0x1}, {0x25}, {0x3}, {0x6, 0x3}, {0x1ff, 0x1}, {0x81, 0x2}, {0x1, 0x2}, {0x1, 0x2}], [{0x6, 0x4}, {0xffff, 0x7c631ba8}, {0x2, 0x9}, {0x9, 0x5}, {0x4, 0x1}, {0x7, 0x41}, {0x7, 0x2}, {}, {0x1, 0x8}, {0x8, 0x401}, {0x9, 0x80000000}], 0x3, 0x1}, {[{0x101}, {0x80, 0x1}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x171, 0x2}, {0x4}, {0x7}, {0xd, 0x3}, {0x4}, {0x5, 0x1}], [{0xa, 0xfffffffe}, {0x800}, {0xfffffff8, 0x6}, {0x6, 0xff}, {0x1, 0xff}, {0x5, 0xfffffff8}, {0x1000000, 0x1}, {0x7, 0xc0}, {0x1c66, 0x1}, {0xf, 0x7}, {0x1, 0x7}], 0x7, 0x2}], 0x9}}}, @time={{'time\x00', 0x0, 0x18}, {{0x1000, 0x55, 0xcb7e, 0xc66, 0x7, 0x40, 0x1}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}]}]}, 0x1224) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. [ 28.193512][ T29] audit: type=1400 audit(1751444551.841:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.194711][ T3293] cgroup: Unknown subsys name 'net' [ 28.216549][ T29] audit: type=1400 audit(1751444551.841:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.243987][ T29] audit: type=1400 audit(1751444551.871:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.382025][ T3293] cgroup: Unknown subsys name 'cpuset' [ 28.388412][ T3293] cgroup: Unknown subsys name 'rlimit' [ 28.540101][ T29] audit: type=1400 audit(1751444552.181:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.565411][ T29] audit: type=1400 audit(1751444552.191:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.586122][ T29] audit: type=1400 audit(1751444552.191:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.606562][ T29] audit: type=1400 audit(1751444552.191:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.626899][ T29] audit: type=1400 audit(1751444552.201:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.634650][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.651830][ T29] audit: type=1400 audit(1751444552.201:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.683786][ T29] audit: type=1400 audit(1751444552.301:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.718171][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.605068][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.652374][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 30.684213][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.705642][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.712824][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.720078][ T3305] bridge_slave_0: entered allmulticast mode [ 30.726789][ T3305] bridge_slave_0: entered promiscuous mode [ 30.750905][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.758109][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.765398][ T3305] bridge_slave_1: entered allmulticast mode [ 30.771975][ T3305] bridge_slave_1: entered promiscuous mode [ 30.781362][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.821747][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.844386][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.869124][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.878312][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.885468][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.892777][ T3309] bridge_slave_0: entered allmulticast mode [ 30.899278][ T3309] bridge_slave_0: entered promiscuous mode [ 30.926874][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.934093][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.941291][ T3309] bridge_slave_1: entered allmulticast mode [ 30.947844][ T3309] bridge_slave_1: entered promiscuous mode [ 30.965847][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.973017][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.980222][ T3304] bridge_slave_0: entered allmulticast mode [ 30.986786][ T3304] bridge_slave_0: entered promiscuous mode [ 30.994053][ T3305] team0: Port device team_slave_0 added [ 30.999845][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.007172][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.014832][ T3304] bridge_slave_1: entered allmulticast mode [ 31.021497][ T3304] bridge_slave_1: entered promiscuous mode [ 31.041333][ T3305] team0: Port device team_slave_1 added [ 31.063262][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.099739][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.109117][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.116148][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.142206][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.154102][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.168119][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.175237][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.182497][ T3314] bridge_slave_0: entered allmulticast mode [ 31.188956][ T3314] bridge_slave_0: entered promiscuous mode [ 31.195602][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.202745][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.209911][ T3308] bridge_slave_0: entered allmulticast mode [ 31.216574][ T3308] bridge_slave_0: entered promiscuous mode [ 31.223990][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.233211][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.240422][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.247606][ T3308] bridge_slave_1: entered allmulticast mode [ 31.254253][ T3308] bridge_slave_1: entered promiscuous mode [ 31.260733][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.267769][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.293905][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.310185][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.317358][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.324531][ T3314] bridge_slave_1: entered allmulticast mode [ 31.330928][ T3314] bridge_slave_1: entered promiscuous mode [ 31.354121][ T3309] team0: Port device team_slave_0 added [ 31.376614][ T3304] team0: Port device team_slave_0 added [ 31.383851][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.393881][ T3309] team0: Port device team_slave_1 added [ 31.401142][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.411588][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.422073][ T3304] team0: Port device team_slave_1 added [ 31.443323][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.462469][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.469453][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.495575][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.512045][ T3308] team0: Port device team_slave_0 added [ 31.532549][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.539540][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.565615][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.577104][ T3308] team0: Port device team_slave_1 added [ 31.590283][ T3305] hsr_slave_0: entered promiscuous mode [ 31.596398][ T3305] hsr_slave_1: entered promiscuous mode [ 31.602666][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.609636][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.635747][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.647181][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.654375][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.680345][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.704735][ T3314] team0: Port device team_slave_0 added [ 31.711588][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.718609][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.744772][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.776918][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.784056][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.810103][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.824445][ T3314] team0: Port device team_slave_1 added [ 31.859588][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.866781][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.892742][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.905870][ T3309] hsr_slave_0: entered promiscuous mode [ 31.912150][ T3309] hsr_slave_1: entered promiscuous mode [ 31.918098][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.925783][ T3309] Cannot create hsr debugfs directory [ 31.944912][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.952030][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.978011][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.001677][ T3304] hsr_slave_0: entered promiscuous mode [ 32.007734][ T3304] hsr_slave_1: entered promiscuous mode [ 32.013649][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.021300][ T3304] Cannot create hsr debugfs directory [ 32.040270][ T3308] hsr_slave_0: entered promiscuous mode [ 32.046544][ T3308] hsr_slave_1: entered promiscuous mode [ 32.052582][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.060226][ T3308] Cannot create hsr debugfs directory [ 32.081502][ T3314] hsr_slave_0: entered promiscuous mode [ 32.087630][ T3314] hsr_slave_1: entered promiscuous mode [ 32.093701][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.101309][ T3314] Cannot create hsr debugfs directory [ 32.281498][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.290495][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.299522][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.310795][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.333718][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.347281][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.356876][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.366584][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.391591][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.400316][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.409979][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.428896][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.462262][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.473175][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.487096][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.496589][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.532014][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.546236][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.560640][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.569758][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.589129][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.605754][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.623177][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.633318][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.640500][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.661981][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.675485][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.682704][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.701216][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.715165][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.731846][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.738996][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.748118][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.755327][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.771891][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.779025][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.787890][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.795016][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.822291][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.846565][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.859657][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.870211][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.904300][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.913260][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.942004][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.949286][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.967073][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.974235][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.993632][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.004214][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.024737][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.043970][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.055077][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.065542][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.072670][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.090626][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.127661][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.134869][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.235800][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.282871][ T3305] veth0_vlan: entered promiscuous mode [ 33.312694][ T3305] veth1_vlan: entered promiscuous mode [ 33.328976][ T3309] veth0_vlan: entered promiscuous mode [ 33.356554][ T3309] veth1_vlan: entered promiscuous mode [ 33.370334][ T3308] veth0_vlan: entered promiscuous mode [ 33.385688][ T3308] veth1_vlan: entered promiscuous mode [ 33.395712][ T3305] veth0_macvtap: entered promiscuous mode [ 33.403347][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.417774][ T3305] veth1_macvtap: entered promiscuous mode [ 33.433288][ T3304] veth0_vlan: entered promiscuous mode [ 33.447992][ T3309] veth0_macvtap: entered promiscuous mode [ 33.456011][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.465619][ T3309] veth1_macvtap: entered promiscuous mode [ 33.480262][ T3304] veth1_vlan: entered promiscuous mode [ 33.489371][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.501466][ T3308] veth0_macvtap: entered promiscuous mode [ 33.512955][ T3308] veth1_macvtap: entered promiscuous mode [ 33.529050][ T3304] veth0_macvtap: entered promiscuous mode [ 33.537094][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.545308][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.554184][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563135][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.572155][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.587628][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.602946][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.611837][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.620625][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.629662][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642111][ T3304] veth1_macvtap: entered promiscuous mode [ 33.651306][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.669357][ T3314] veth0_vlan: entered promiscuous mode [ 33.682458][ T3314] veth1_vlan: entered promiscuous mode [ 33.689366][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.698281][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.707243][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.716216][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725022][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.744549][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.744566][ T29] audit: type=1400 audit(1751444557.391:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tMPiLk/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.747209][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.755584][ T29] audit: type=1400 audit(1751444557.401:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.798848][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.804166][ T29] audit: type=1400 audit(1751444557.401:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tMPiLk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.836736][ T29] audit: type=1400 audit(1751444557.401:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.858869][ T29] audit: type=1400 audit(1751444557.401:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tMPiLk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.885512][ T29] audit: type=1400 audit(1751444557.401:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.tMPiLk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.913648][ T29] audit: type=1400 audit(1751444557.401:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.935953][ T29] audit: type=1400 audit(1751444557.581:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.958827][ T29] audit: type=1400 audit(1751444557.581:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.990281][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.996066][ T3314] veth0_macvtap: entered promiscuous mode [ 34.016171][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.025040][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.033786][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.042625][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.058734][ T3314] veth1_macvtap: entered promiscuous mode [ 34.069093][ T29] audit: type=1400 audit(1751444557.711:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.099788][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.115383][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.143732][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.152708][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.161776][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.170593][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.315176][ T3489] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.332529][ T3488] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 34.519200][ T3501] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.616164][ T3511] vlan2: entered allmulticast mode [ 34.758771][ T3476] Set syz1 is full, maxelem 65536 reached [ 34.778602][ T3510] vlan2: entered allmulticast mode [ 34.813669][ T3476] syz.0.1 (3476) used greatest stack depth: 10848 bytes left [ 34.864332][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 34.873453][ T3520] netlink: 120 bytes leftover after parsing attributes in process `syz.0.17'. [ 34.890641][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 35.385092][ T3559] netlink: 80 bytes leftover after parsing attributes in process `syz.0.37'. [ 35.490633][ T3563] tipc: Enabling of bearer rejected, failed to enable media [ 35.503295][ T3563] syzkaller0: entered promiscuous mode [ 35.508822][ T3563] syzkaller0: entered allmulticast mode [ 35.575168][ T3537] Set syz1 is full, maxelem 65536 reached [ 35.734655][ T3582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.743704][ T3582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.752768][ T3582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.776409][ T3582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.785537][ T3582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.794397][ T3582] netlink: 52 bytes leftover after parsing attributes in process `syz.2.47'. [ 35.910045][ T3603] loop3: detected capacity change from 0 to 512 [ 35.945815][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.966055][ T3603] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.972613][ T3612] capability: warning: `syz.2.60' uses 32-bit capabilities (legacy support in use) [ 35.989544][ T3610] loop1: detected capacity change from 0 to 512 [ 36.019175][ T3610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.033847][ T3603] mmap: syz.3.56 (3603) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.037749][ T3610] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.122990][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.133056][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.223221][ T3631] syz.1.66 (3631) used greatest stack depth: 10688 bytes left [ 36.270333][ T3643] loop3: detected capacity change from 0 to 512 [ 36.310358][ T3643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.329812][ T3643] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.365957][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.262545][ T3754] loop2: detected capacity change from 0 to 512 [ 37.274033][ T3754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.287649][ T3754] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.325766][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.535067][ T3773] loop2: detected capacity change from 0 to 1024 [ 37.548498][ T3773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.683692][ T3776] pim6reg1: entered allmulticast mode [ 37.908544][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b5adc00: rx timeout, send abort [ 37.916879][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b5adc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.041296][ T3798] Zero length message leads to an empty skb [ 38.523070][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.767632][ T3889] loop1: detected capacity change from 0 to 512 [ 38.802743][ T3889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.816645][ T3889] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.869952][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.019966][ T3918] loop3: detected capacity change from 0 to 1024 [ 39.034136][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.127730][ T3930] loop1: detected capacity change from 0 to 512 [ 39.157196][ T3930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.169863][ T3930] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.200291][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.386779][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a243a00: rx timeout, send abort [ 39.395260][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a243a00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 39.400998][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 39.401021][ T29] audit: type=1326 audit(1751444563.021:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 39.439089][ T29] audit: type=1326 audit(1751444563.021:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 39.462741][ T29] audit: type=1326 audit(1751444563.021:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 39.486296][ T29] audit: type=1326 audit(1751444563.021:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 39.509891][ T29] audit: type=1326 audit(1751444563.021:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 39.533210][ T29] audit: type=1326 audit(1751444563.021:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3947 comm="syz.4.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 39.624585][ T3961] loop4: detected capacity change from 0 to 512 [ 39.657362][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.671551][ T3961] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.728526][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.807086][ T3982] loop2: detected capacity change from 0 to 512 [ 39.875542][ T3993] netlink: 'syz.0.207': attribute type 13 has an invalid length. [ 39.888468][ T3982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.928176][ T3982] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.938823][ T3993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.026503][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.053340][ T4006] loop1: detected capacity change from 0 to 512 [ 40.061145][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.110813][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.118002][ T4008] loop4: detected capacity change from 0 to 1024 [ 40.124212][ T4006] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.162768][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.289510][ T4027] pim6reg1: entered allmulticast mode [ 40.296863][ T4027] __nla_validate_parse: 8 callbacks suppressed [ 40.296880][ T4027] netlink: 64 bytes leftover after parsing attributes in process `syz.4.214'. [ 40.351335][ T29] audit: type=1400 audit(1751444563.891:193): avc: denied { append } for pid=4025 comm="syz.3.216" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.351417][ T29] audit: type=1400 audit(1751444563.891:194): avc: denied { map } for pid=4025 comm="syz.3.216" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.351495][ T29] audit: type=1400 audit(1751444563.891:195): avc: denied { read write } for pid=4025 comm="syz.3.216" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 40.460520][ T4037] netlink: 56 bytes leftover after parsing attributes in process `syz.2.220'. [ 40.509288][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.565445][ T4041] loop2: detected capacity change from 0 to 512 [ 40.583792][ T4041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.596483][ T4041] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.639445][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.716460][ T4054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 41.034116][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.076775][ T4070] loop4: detected capacity change from 0 to 512 [ 41.102859][ T4070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.120896][ T4070] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.164250][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.241561][ T4085] netlink: 180 bytes leftover after parsing attributes in process `syz.4.237'. [ 41.522949][ T4105] loop1: detected capacity change from 0 to 1024 [ 41.538215][ T4105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.603122][ T4112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 41.644468][ T4115] loop2: detected capacity change from 0 to 2048 [ 41.676918][ T4116] pim6reg1: entered allmulticast mode [ 41.686214][ T4116] netlink: 64 bytes leftover after parsing attributes in process `syz.1.243'. [ 41.748635][ T4121] netlink: 180 bytes leftover after parsing attributes in process `syz.2.250'. [ 41.835782][ T29] audit: type=1400 audit(1751444565.481:196): avc: denied { relabelfrom } for pid=4128 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.851154][ T4129] syzkaller0: entered promiscuous mode [ 41.861289][ T4129] syzkaller0: entered allmulticast mode [ 41.980774][ T4140] loop2: detected capacity change from 0 to 512 [ 42.013400][ T4140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.026313][ T4140] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.057431][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.079566][ T4144] loop2: detected capacity change from 0 to 512 [ 42.094956][ T4144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.108150][ T4144] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.136928][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.443451][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.504829][ T4163] syzkaller0: entered promiscuous mode [ 42.510416][ T4163] syzkaller0: entered allmulticast mode [ 42.510690][ T4170] loop1: detected capacity change from 0 to 512 [ 42.542600][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.555720][ T4170] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.604932][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.613973][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b32e200: rx timeout, send abort [ 42.622317][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b32e200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 42.727525][ T4199] loop4: detected capacity change from 0 to 164 [ 42.734798][ T4199] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 42.771941][ T4202] loop4: detected capacity change from 0 to 1024 [ 42.783828][ T4202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.866733][ T4212] loop1: detected capacity change from 0 to 512 [ 42.894847][ T4212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.911831][ T4212] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.941274][ T4220] netlink: 180 bytes leftover after parsing attributes in process `syz.3.287'. [ 42.964441][ T4218] netlink: 64 bytes leftover after parsing attributes in process `syz.4.281'. [ 42.983720][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.998632][ T4222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'. [ 43.134207][ T4234] loop1: detected capacity change from 0 to 164 [ 43.146547][ T4234] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.701233][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.760183][ T4258] loop4: detected capacity change from 0 to 512 [ 43.773840][ T4258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.786516][ T4258] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.819718][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.937313][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104c3ce00: rx timeout, send abort [ 43.945744][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104c3ce00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 44.145889][ T4296] loop0: detected capacity change from 0 to 512 [ 44.172639][ T4296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.185391][ T4296] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.243124][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.546660][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 44.546678][ T29] audit: type=1326 audit(1751444568.191:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feebeee58e7 code=0x7ffc0000 [ 44.578361][ T29] audit: type=1326 audit(1751444568.221:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feebee8ab19 code=0x7ffc0000 [ 45.480757][ T4358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.565816][ T29] audit: type=1326 audit(1751444569.111:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 45.589239][ T29] audit: type=1326 audit(1751444569.111:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feebeee58e7 code=0x7ffc0000 [ 45.612639][ T29] audit: type=1326 audit(1751444569.111:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feebee8ab19 code=0x7ffc0000 [ 45.616246][ T4367] loop0: detected capacity change from 0 to 512 [ 45.636124][ T29] audit: type=1326 audit(1751444569.111:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 45.665658][ T29] audit: type=1326 audit(1751444569.111:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feebeee58e7 code=0x7ffc0000 [ 45.689046][ T29] audit: type=1326 audit(1751444569.111:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feebee8ab19 code=0x7ffc0000 [ 45.712275][ T29] audit: type=1326 audit(1751444569.111:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 45.735593][ T29] audit: type=1326 audit(1751444569.111:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4297 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feebeee58e7 code=0x7ffc0000 [ 45.769952][ T4376] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 45.777750][ T4376] netlink: 124 bytes leftover after parsing attributes in process `syz.1.328'. [ 45.794537][ T4367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.815784][ T4367] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.843971][ T4385] loop1: detected capacity change from 0 to 164 [ 45.853694][ T4385] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 45.862141][ T4388] loop3: detected capacity change from 0 to 512 [ 45.877126][ T4388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.889732][ T4388] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.930775][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.947801][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.992329][ T4401] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 46.085451][ T4417] loop0: detected capacity change from 0 to 512 [ 46.110623][ T4421] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 46.112983][ T4417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.118385][ T4421] netlink: 124 bytes leftover after parsing attributes in process `syz.1.342'. [ 46.131134][ T4417] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.186028][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.206187][ T4432] loop0: detected capacity change from 0 to 512 [ 46.232795][ T4432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.245545][ T4432] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.274052][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.658743][ T4470] loop1: detected capacity change from 0 to 512 [ 46.672764][ T4470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.685755][ T4470] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.716330][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.846207][ T4481] syzkaller0: entered promiscuous mode [ 46.851917][ T4481] syzkaller0: entered allmulticast mode [ 47.278767][ T4507] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 47.286522][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9c8800: rx timeout, send abort [ 47.294977][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9c8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 47.309385][ T4507] netlink: 124 bytes leftover after parsing attributes in process `syz.2.374'. [ 47.443676][ T4519] loop4: detected capacity change from 0 to 512 [ 47.484686][ T4519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.513919][ T4519] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.641001][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.896305][ T4542] loop3: detected capacity change from 0 to 1024 [ 47.907228][ T4542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.123657][ T4550] netlink: 64 bytes leftover after parsing attributes in process `syz.3.390'. [ 48.262600][ T4552] loop0: detected capacity change from 0 to 164 [ 48.270801][ T4552] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.370644][ T4554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.393'. [ 48.658106][ T4589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 48.712735][ T4597] loop0: detected capacity change from 0 to 512 [ 48.723873][ T4597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.736654][ T4597] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.773990][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.785676][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.837740][ T4616] loop3: detected capacity change from 0 to 512 [ 48.853307][ T4616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.865865][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e5a800: rx timeout, send abort [ 48.874197][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119e5a800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 48.906254][ T4616] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.940486][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.956413][ T4634] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 48.964364][ T4634] netlink: 124 bytes leftover after parsing attributes in process `syz.0.424'. [ 49.129241][ T4667] loop2: detected capacity change from 0 to 512 [ 49.143863][ T4667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.167986][ T4667] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.204901][ T4677] loop1: detected capacity change from 0 to 512 [ 49.233687][ T4677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.236819][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.247643][ T4677] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.308166][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.424404][ T4722] loop2: detected capacity change from 0 to 512 [ 49.445183][ T4722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.469242][ T4730] loop1: detected capacity change from 0 to 512 [ 49.477477][ T4722] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.501424][ T4730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.501570][ T4730] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.550738][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.564075][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.713800][ T4773] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 49.721751][ T4773] netlink: 124 bytes leftover after parsing attributes in process `syz.3.475'. [ 49.764352][ T4777] loop3: detected capacity change from 0 to 512 [ 49.792618][ T4777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.806785][ T4777] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.840119][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.988643][ T4816] loop1: detected capacity change from 0 to 1024 [ 49.997553][ T4816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.054797][ T4820] loop3: detected capacity change from 0 to 1024 [ 50.122697][ T4823] pim6reg1: entered allmulticast mode [ 50.223942][ T4825] netlink: 64 bytes leftover after parsing attributes in process `syz.3.492'. [ 50.752317][ T4829] loop4: detected capacity change from 0 to 1024 [ 50.825533][ T4837] netlink: 64 bytes leftover after parsing attributes in process `syz.4.494'. [ 50.916238][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a03b800: rx timeout, send abort [ 50.924605][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a03b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 51.114617][ T4864] loop1: detected capacity change from 0 to 512 [ 51.124870][ T29] kauditd_printk_skb: 2996 callbacks suppressed [ 51.124889][ T29] audit: type=1326 audit(1751444574.771:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.166281][ T29] audit: type=1326 audit(1751444574.771:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.189848][ T29] audit: type=1326 audit(1751444574.771:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.213388][ T29] audit: type=1326 audit(1751444574.771:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.216987][ T4864] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.236777][ T29] audit: type=1326 audit(1751444574.771:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.256886][ T4873] loop3: detected capacity change from 0 to 512 [ 51.270398][ T29] audit: type=1326 audit(1751444574.771:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.289794][ T4873] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.300093][ T29] audit: type=1326 audit(1751444574.771:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.300132][ T29] audit: type=1326 audit(1751444574.771:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.300163][ T29] audit: type=1326 audit(1751444574.771:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.380721][ T29] audit: type=1326 audit(1751444574.771:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feebeeee929 code=0x7ffc0000 [ 51.465505][ T4882] tipc: Enabling of bearer rejected, failed to enable media [ 51.477196][ T4882] syzkaller0: entered promiscuous mode [ 51.482881][ T4882] syzkaller0: entered allmulticast mode [ 51.653210][ T4887] loop4: detected capacity change from 0 to 1024 [ 51.838540][ T4894] netlink: 64 bytes leftover after parsing attributes in process `syz.4.512'. [ 52.097783][ T4914] netlink: 'syz.0.523': attribute type 13 has an invalid length. [ 52.115445][ T4914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.691091][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a052200: rx timeout, send abort [ 52.699522][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a052200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 52.736371][ T4932] loop3: detected capacity change from 0 to 512 [ 52.743423][ T4934] loop4: detected capacity change from 0 to 1024 [ 52.762945][ T4932] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.815278][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119e83200: rx timeout, send abort [ 52.823743][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119e83200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 52.871085][ T4941] pim6reg1: entered allmulticast mode [ 52.976750][ T4953] loop1: detected capacity change from 0 to 1024 [ 54.025351][ T4963] pim6reg1: entered allmulticast mode [ 54.031148][ T4968] loop0: detected capacity change from 0 to 1024 [ 54.035806][ T4963] netlink: 64 bytes leftover after parsing attributes in process `syz.1.536'. [ 54.104679][ T4977] netlink: 64 bytes leftover after parsing attributes in process `syz.0.540'. [ 54.226851][ T4981] loop1: detected capacity change from 0 to 1024 [ 54.316559][ T4991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 54.344854][ T4993] loop2: detected capacity change from 0 to 512 [ 54.354755][ T4994] pim6reg1: entered allmulticast mode [ 54.364363][ T4994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.545'. [ 54.374253][ T4993] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.126898][ T5012] netlink: 44 bytes leftover after parsing attributes in process `syz.0.555'. [ 55.228415][ T5028] loop0: detected capacity change from 0 to 512 [ 55.242777][ T5028] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.269281][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a1d4200: rx timeout, send abort [ 55.280502][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a1d4200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 55.319973][ T5033] loop2: detected capacity change from 0 to 1024 [ 55.335348][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9b4200: rx timeout, send abort [ 55.343711][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9b4200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 55.392346][ T5046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.567'. [ 55.416690][ T5047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.562'. [ 55.508729][ T5070] loop4: detected capacity change from 0 to 512 [ 55.522771][ T5070] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.619352][ T5089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'. [ 55.740611][ T5107] loop0: detected capacity change from 0 to 512 [ 55.752968][ T5107] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.204062][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.593'. [ 56.481990][ T5141] loop2: detected capacity change from 0 to 512 [ 56.493008][ T5141] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.599029][ T5155] loop2: detected capacity change from 0 to 1024 [ 56.637742][ T5159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.605'. [ 56.669439][ T5162] netlink: 64 bytes leftover after parsing attributes in process `syz.2.604'. [ 56.762806][ T5166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 56.834027][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a0a7800: rx timeout, send abort [ 56.842337][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a0a7800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 56.856911][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a0a6600: rx timeout, send abort [ 56.865711][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a0a6600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 56.922438][ T5178] loop3: detected capacity change from 0 to 512 [ 56.943634][ T5178] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.963875][ T5190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.617'. [ 57.170164][ T5223] loop1: detected capacity change from 0 to 512 [ 57.182815][ T5223] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.286818][ T5232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.632'. [ 57.524891][ T5252] loop2: detected capacity change from 0 to 512 [ 57.544623][ T5252] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.801071][ T5280] loop1: detected capacity change from 0 to 1024 [ 57.869032][ T5282] netlink: 64 bytes leftover after parsing attributes in process `syz.1.649'. [ 58.089561][ T5292] loop0: detected capacity change from 0 to 512 [ 58.103431][ T5292] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.322743][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a1c2c00: rx timeout, send abort [ 58.331256][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a1c2c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.381178][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a1c3800: rx timeout, send abort [ 58.389512][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a1c3800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.399553][ T5316] netlink: 'syz.4.661': attribute type 1 has an invalid length. [ 58.411685][ T5316] netlink: 124 bytes leftover after parsing attributes in process `syz.4.661'. [ 58.462607][ T5324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 58.493494][ T5326] loop0: detected capacity change from 0 to 512 [ 58.513399][ T5326] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.722387][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 58.757416][ T5370] loop4: detected capacity change from 0 to 512 [ 58.778929][ T5370] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.952616][ T5395] loop1: detected capacity change from 0 to 1024 [ 59.198914][ T5408] loop4: detected capacity change from 0 to 512 [ 59.212914][ T5408] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.628126][ T5442] loop2: detected capacity change from 0 to 512 [ 59.643771][ T5442] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.823755][ T29] kauditd_printk_skb: 3725 callbacks suppressed [ 59.823774][ T29] audit: type=1400 audit(1751444583.471:6979): avc: denied { write } for pid=5467 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.852114][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a052200: rx timeout, send abort [ 59.860433][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a052200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 59.874821][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a052800: rx timeout, send abort [ 59.883132][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a052800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 59.940326][ T5472] xt_CT: No such helper "pptp" [ 59.961063][ T5472] SELinux: Context system_u:object_r:utempter_exec_t:s0 is not valid (left unmapped). [ 59.961124][ T29] audit: type=1400 audit(1751444583.601:6980): avc: denied { relabelfrom } for pid=5471 comm="syz.3.716" name="NETLINK" dev="sockfs" ino=10682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 60.012606][ T5481] loop0: detected capacity change from 0 to 512 [ 60.026440][ T29] audit: type=1400 audit(1751444583.611:6981): avc: denied { relabelto } for pid=5471 comm="syz.3.716" name="NETLINK" dev="sockfs" ino=10682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:utempter_exec_t:s0" [ 60.056900][ T5481] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.116941][ T5498] FAULT_INJECTION: forcing a failure. [ 60.116941][ T5498] name failslab, interval 1, probability 0, space 0, times 1 [ 60.129960][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.4.725 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 60.130076][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.130092][ T5498] Call Trace: [ 60.130100][ T5498] [ 60.130121][ T5498] __dump_stack+0x1d/0x30 [ 60.130148][ T5498] dump_stack_lvl+0xe8/0x140 [ 60.130174][ T5498] dump_stack+0x15/0x1b [ 60.130192][ T5498] should_fail_ex+0x265/0x280 [ 60.130289][ T5498] should_failslab+0x8c/0xb0 [ 60.130319][ T5498] kmem_cache_alloc_noprof+0x50/0x310 [ 60.130352][ T5498] ? getname_flags+0x80/0x3b0 [ 60.130415][ T5498] getname_flags+0x80/0x3b0 [ 60.130437][ T5498] user_path_at+0x28/0x130 [ 60.130544][ T5498] __se_sys_mount+0x25b/0x2e0 [ 60.130567][ T5498] ? fput+0x8f/0xc0 [ 60.130594][ T5498] __x64_sys_mount+0x67/0x80 [ 60.130635][ T5498] x64_sys_call+0xd36/0x2fb0 [ 60.130702][ T5498] do_syscall_64+0xd2/0x200 [ 60.130725][ T5498] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.130759][ T5498] ? clear_bhb_loop+0x40/0x90 [ 60.130785][ T5498] ? clear_bhb_loop+0x40/0x90 [ 60.130809][ T5498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.130916][ T5498] RIP: 0033:0x7ffa3e7ae929 [ 60.130945][ T5498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.130965][ T5498] RSP: 002b:00007ffa3ce17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 60.130988][ T5498] RAX: ffffffffffffffda RBX: 00007ffa3e9d5fa0 RCX: 00007ffa3e7ae929 [ 60.131003][ T5498] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 60.131018][ T5498] RBP: 00007ffa3ce17090 R08: 0000200000000240 R09: 0000000000000000 [ 60.131031][ T5498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.131045][ T5498] R13: 0000000000000000 R14: 00007ffa3e9d5fa0 R15: 00007fff3a696018 [ 60.131106][ T5498] [ 60.363507][ T5506] loop0: detected capacity change from 0 to 1024 [ 60.557976][ T5528] loop1: detected capacity change from 0 to 512 [ 60.573003][ T5528] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.700882][ T29] audit: type=1326 audit(1751444584.341:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2300c0e929 code=0x7ffc0000 [ 60.724330][ T29] audit: type=1326 audit(1751444584.341:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2300c0e929 code=0x7ffc0000 [ 60.757966][ T29] audit: type=1326 audit(1751444584.351:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2300c0e929 code=0x7ffc0000 [ 60.781408][ T29] audit: type=1326 audit(1751444584.351:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2300c0e929 code=0x7ffc0000 [ 60.805077][ T29] audit: type=1326 audit(1751444584.351:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2300c0e929 code=0x7ffc0000 [ 60.828618][ T29] audit: type=1326 audit(1751444584.351:6987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f2300c0e929 code=0x7ffc0000 [ 60.852584][ T29] audit: type=1326 audit(1751444584.351:6988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5535 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2300c0e929 code=0x7ffc0000 [ 60.943443][ T5553] FAULT_INJECTION: forcing a failure. [ 60.943443][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 60.956262][ T5553] CPU: 0 UID: 0 PID: 5553 Comm: syz.2.743 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 60.956299][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.956311][ T5553] Call Trace: [ 60.956317][ T5553] [ 60.956324][ T5553] __dump_stack+0x1d/0x30 [ 60.956391][ T5553] dump_stack_lvl+0xe8/0x140 [ 60.956408][ T5553] dump_stack+0x15/0x1b [ 60.956422][ T5553] should_fail_ex+0x265/0x280 [ 60.956450][ T5553] should_failslab+0x8c/0xb0 [ 60.956514][ T5553] kmem_cache_alloc_node_noprof+0x57/0x320 [ 60.956539][ T5553] ? __alloc_skb+0x101/0x320 [ 60.956608][ T5553] __alloc_skb+0x101/0x320 [ 60.956639][ T5553] ? audit_log_start+0x365/0x6c0 [ 60.956731][ T5553] audit_log_start+0x380/0x6c0 [ 60.956831][ T5553] audit_seccomp+0x48/0x100 [ 60.956922][ T5553] ? __seccomp_filter+0x68c/0x10d0 [ 60.956943][ T5553] __seccomp_filter+0x69d/0x10d0 [ 60.957044][ T5553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.957076][ T5553] ? vfs_write+0x75e/0x8e0 [ 60.957103][ T5553] ? __rcu_read_unlock+0x4f/0x70 [ 60.957169][ T5553] ? __fget_files+0x184/0x1c0 [ 60.957189][ T5553] __secure_computing+0x82/0x150 [ 60.957221][ T5553] syscall_trace_enter+0xcf/0x1e0 [ 60.957325][ T5553] do_syscall_64+0xac/0x200 [ 60.957352][ T5553] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.957376][ T5553] ? clear_bhb_loop+0x40/0x90 [ 60.957395][ T5553] ? clear_bhb_loop+0x40/0x90 [ 60.957456][ T5553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.957481][ T5553] RIP: 0033:0x7feebeeee929 [ 60.957494][ T5553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.957509][ T5553] RSP: 002b:00007feebd557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 60.957525][ T5553] RAX: ffffffffffffffda RBX: 00007feebf115fa0 RCX: 00007feebeeee929 [ 60.957536][ T5553] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 60.957547][ T5553] RBP: 00007feebd557090 R08: 0000000000000000 R09: 0000000000000000 [ 60.957557][ T5553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.957588][ T5553] R13: 0000000000000000 R14: 00007feebf115fa0 R15: 00007ffcf116ce78 [ 60.957605][ T5553] [ 61.216394][ T5560] loop2: detected capacity change from 0 to 512 [ 61.233758][ T5560] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.431687][ T5586] 9pnet: Could not find request transport: fd0x0000000000000004 [ 61.490162][ T5599] loop1: detected capacity change from 0 to 1024 [ 61.525831][ T5604] loop2: detected capacity change from 0 to 512 [ 61.543503][ T5604] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.558882][ T5607] __nla_validate_parse: 5 callbacks suppressed [ 61.558899][ T5607] netlink: 64 bytes leftover after parsing attributes in process `syz.1.759'. [ 61.577611][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a0c0200: rx timeout, send abort [ 61.586056][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a0c0200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.601358][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a9aee00: rx timeout, send abort [ 61.609803][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9aee00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.851265][ T5630] pim6reg1: entered promiscuous mode [ 61.856667][ T5630] pim6reg1: entered allmulticast mode [ 61.884501][ T5633] loop2: detected capacity change from 0 to 512 [ 61.912752][ T5633] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.969235][ T5642] bond_slave_1: entered promiscuous mode [ 61.975367][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 61.987819][ T5642] bond0: (slave bond_slave_1): Releasing backup interface [ 61.996875][ T5642] bond_slave_1 (unregistering): left promiscuous mode [ 62.258417][ T5662] FAULT_INJECTION: forcing a failure. [ 62.258417][ T5662] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.271963][ T5662] CPU: 0 UID: 0 PID: 5662 Comm: syz.0.781 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 62.272060][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.272072][ T5662] Call Trace: [ 62.272077][ T5662] [ 62.272084][ T5662] __dump_stack+0x1d/0x30 [ 62.272107][ T5662] dump_stack_lvl+0xe8/0x140 [ 62.272126][ T5662] dump_stack+0x15/0x1b [ 62.272207][ T5662] should_fail_ex+0x265/0x280 [ 62.272320][ T5662] should_fail+0xb/0x20 [ 62.272351][ T5662] should_fail_usercopy+0x1a/0x20 [ 62.272387][ T5662] _copy_to_user+0x20/0xa0 [ 62.272491][ T5662] copy_siginfo_to_user+0x22/0xb0 [ 62.272525][ T5662] x64_setup_rt_frame+0x2b5/0x580 [ 62.272609][ T5662] arch_do_signal_or_restart+0x27c/0x480 [ 62.272634][ T5662] exit_to_user_mode_loop+0x7a/0x100 [ 62.272664][ T5662] do_syscall_64+0x1d6/0x200 [ 62.272687][ T5662] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.272775][ T5662] ? clear_bhb_loop+0x40/0x90 [ 62.272856][ T5662] ? clear_bhb_loop+0x40/0x90 [ 62.272885][ T5662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.272913][ T5662] RIP: 0033:0x7f5c325ee927 [ 62.272963][ T5662] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 62.273002][ T5662] RSP: 002b:00007f5c30c57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 62.273025][ T5662] RAX: 00000000000001c1 RBX: 00007f5c32815fa0 RCX: 00007f5c325ee929 [ 62.273040][ T5662] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 62.273055][ T5662] RBP: 00007f5c30c57090 R08: 0000000000000001 R09: 0000000000000000 [ 62.273070][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.273082][ T5662] R13: 0000000000000000 R14: 00007f5c32815fa0 R15: 00007ffeb706e368 [ 62.273100][ T5662] [ 62.482098][ T5669] loop0: detected capacity change from 0 to 512 [ 62.492620][ T5669] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.551230][ T5684] FAULT_INJECTION: forcing a failure. [ 62.551230][ T5684] name failslab, interval 1, probability 0, space 0, times 0 [ 62.564043][ T5684] CPU: 0 UID: 0 PID: 5684 Comm: syz.0.786 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 62.564077][ T5684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.564089][ T5684] Call Trace: [ 62.564097][ T5684] [ 62.564106][ T5684] __dump_stack+0x1d/0x30 [ 62.564135][ T5684] dump_stack_lvl+0xe8/0x140 [ 62.564156][ T5684] dump_stack+0x15/0x1b [ 62.564174][ T5684] should_fail_ex+0x265/0x280 [ 62.564212][ T5684] ? __hw_addr_add_ex+0x162/0x440 [ 62.564325][ T5684] should_failslab+0x8c/0xb0 [ 62.564356][ T5684] __kmalloc_cache_noprof+0x4c/0x320 [ 62.564394][ T5684] __hw_addr_add_ex+0x162/0x440 [ 62.564442][ T5684] dev_addr_init+0xb1/0x120 [ 62.564514][ T5684] alloc_netdev_mqs+0x212/0xab0 [ 62.564554][ T5684] ? __pfx_macvlan_setup+0x10/0x10 [ 62.564585][ T5684] rtnl_create_link+0x239/0x710 [ 62.564683][ T5684] rtnl_newlink_create+0x14c/0x620 [ 62.564719][ T5684] ? security_capable+0x83/0x90 [ 62.564755][ T5684] ? netlink_ns_capable+0x86/0xa0 [ 62.564872][ T5684] rtnl_newlink+0xf29/0x12d0 [ 62.564905][ T5684] ? __kfree_skb+0x109/0x150 [ 62.564937][ T5684] ? __memcg_slab_free_hook+0x135/0x230 [ 62.565025][ T5684] ? __kfree_skb+0x109/0x150 [ 62.565065][ T5684] ? __rcu_read_unlock+0x4f/0x70 [ 62.565144][ T5684] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.565175][ T5684] ? selinux_capable+0x1f9/0x270 [ 62.565233][ T5684] ? security_capable+0x83/0x90 [ 62.565260][ T5684] ? ns_capable+0x7d/0xb0 [ 62.565280][ T5684] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.565330][ T5684] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 62.565358][ T5684] netlink_rcv_skb+0x123/0x220 [ 62.565394][ T5684] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.565484][ T5684] rtnetlink_rcv+0x1c/0x30 [ 62.565507][ T5684] netlink_unicast+0x59e/0x670 [ 62.565541][ T5684] netlink_sendmsg+0x58b/0x6b0 [ 62.565587][ T5684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.565607][ T5684] __sock_sendmsg+0x145/0x180 [ 62.565634][ T5684] ____sys_sendmsg+0x31e/0x4e0 [ 62.565672][ T5684] ___sys_sendmsg+0x17b/0x1d0 [ 62.565768][ T5684] __x64_sys_sendmsg+0xd4/0x160 [ 62.565844][ T5684] x64_sys_call+0x2999/0x2fb0 [ 62.565866][ T5684] do_syscall_64+0xd2/0x200 [ 62.565886][ T5684] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.565914][ T5684] ? clear_bhb_loop+0x40/0x90 [ 62.565977][ T5684] ? clear_bhb_loop+0x40/0x90 [ 62.566001][ T5684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.566023][ T5684] RIP: 0033:0x7f5c325ee929 [ 62.566039][ T5684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.566058][ T5684] RSP: 002b:00007f5c30c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.566077][ T5684] RAX: ffffffffffffffda RBX: 00007f5c32815fa0 RCX: 00007f5c325ee929 [ 62.566121][ T5684] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 62.566133][ T5684] RBP: 00007f5c30c57090 R08: 0000000000000000 R09: 0000000000000000 [ 62.566146][ T5684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.566180][ T5684] R13: 0000000000000000 R14: 00007f5c32815fa0 R15: 00007ffeb706e368 [ 62.566200][ T5684] [ 62.890953][ T5684] syz.0.786 (5684) used greatest stack depth: 10440 bytes left [ 62.942007][ T5690] IPVS: Unknown mcast interface: ser [ 63.018724][ T3386] IPVS: starting estimator thread 0... [ 63.026703][ T5700] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 63.070592][ T5710] loop4: detected capacity change from 0 to 1024 [ 63.078425][ T5712] loop3: detected capacity change from 0 to 512 [ 63.099372][ T5712] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.130954][ T5706] IPVS: using max 2352 ests per chain, 117600 per kthread [ 63.161896][ T5728] netlink: 64 bytes leftover after parsing attributes in process `syz.4.796'. [ 63.275518][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a04e600: rx timeout, send abort [ 63.284012][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a04e600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 63.332840][ T5764] netlink: 32 bytes leftover after parsing attributes in process `syz.2.808'. [ 63.342922][ T5764] netlink: 'syz.2.808': attribute type 21 has an invalid length. [ 63.350783][ T5764] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.408312][ T5777] loop2: detected capacity change from 0 to 512 [ 63.423434][ T5784] FAULT_INJECTION: forcing a failure. [ 63.423434][ T5784] name failslab, interval 1, probability 0, space 0, times 0 [ 63.423615][ T5777] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.436228][ T5784] CPU: 1 UID: 0 PID: 5784 Comm: syz.1.814 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 63.436309][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.436328][ T5784] Call Trace: [ 63.436336][ T5784] [ 63.436348][ T5784] __dump_stack+0x1d/0x30 [ 63.436379][ T5784] dump_stack_lvl+0xe8/0x140 [ 63.436407][ T5784] dump_stack+0x15/0x1b [ 63.436430][ T5784] should_fail_ex+0x265/0x280 [ 63.436490][ T5784] ? __se_sys_mount+0xef/0x2e0 [ 63.436517][ T5784] should_failslab+0x8c/0xb0 [ 63.436551][ T5784] __kmalloc_cache_noprof+0x4c/0x320 [ 63.436590][ T5784] ? memdup_user+0x99/0xd0 [ 63.436690][ T5784] __se_sys_mount+0xef/0x2e0 [ 63.436720][ T5784] __x64_sys_mount+0x67/0x80 [ 63.436746][ T5784] x64_sys_call+0xd36/0x2fb0 [ 63.436777][ T5784] do_syscall_64+0xd2/0x200 [ 63.436804][ T5784] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.436843][ T5784] ? clear_bhb_loop+0x40/0x90 [ 63.436873][ T5784] ? clear_bhb_loop+0x40/0x90 [ 63.436959][ T5784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.436989][ T5784] RIP: 0033:0x7f2300c0e929 [ 63.437013][ T5784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.437116][ T5784] RSP: 002b:00007f22ff277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.437143][ T5784] RAX: ffffffffffffffda RBX: 00007f2300e35fa0 RCX: 00007f2300c0e929 [ 63.437161][ T5784] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 63.437179][ T5784] RBP: 00007f22ff277090 R08: 0000200000000240 R09: 0000000000000000 [ 63.437232][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.437249][ T5784] R13: 0000000000000000 R14: 00007f2300e35fa0 R15: 00007ffdced5daa8 [ 63.437275][ T5784] [ 63.686420][ T5808] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 63.687849][ T5809] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 63.703055][ T5808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.720643][ T5805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.727759][ T5805] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.739418][ T5805] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 63.764952][ T5808] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.776498][ T5808] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 63.987929][ T5833] loop1: detected capacity change from 0 to 512 [ 64.018860][ T5833] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.162166][ T5859] loop1: detected capacity change from 0 to 1024 [ 64.183256][ T5857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.838'. [ 64.230674][ T5863] netlink: 64 bytes leftover after parsing attributes in process `syz.1.839'. [ 64.243407][ T5865] loop2: detected capacity change from 0 to 256 [ 64.326483][ T5865] GUP no longer grows the stack in syz.2.840 (5865): 200000004000-200000008000 (200000002000) [ 64.337030][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.2.840 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 64.337096][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.337110][ T5865] Call Trace: [ 64.337116][ T5865] [ 64.337123][ T5865] __dump_stack+0x1d/0x30 [ 64.337145][ T5865] dump_stack_lvl+0xe8/0x140 [ 64.337166][ T5865] dump_stack+0x15/0x1b [ 64.337182][ T5865] __get_user_pages+0x199d/0x1fb0 [ 64.337219][ T5865] ? __rcu_read_unlock+0x4f/0x70 [ 64.337300][ T5865] get_user_pages_remote+0x1dc/0x7a0 [ 64.337332][ T5865] __access_remote_vm+0x156/0x560 [ 64.337363][ T5865] access_remote_vm+0x32/0x40 [ 64.337389][ T5865] proc_pid_cmdline_read+0x30f/0x6a0 [ 64.337457][ T5865] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 64.337499][ T5865] vfs_readv+0x3f8/0x690 [ 64.337539][ T5865] __x64_sys_preadv+0xfd/0x1c0 [ 64.337596][ T5865] x64_sys_call+0x1503/0x2fb0 [ 64.337624][ T5865] do_syscall_64+0xd2/0x200 [ 64.337647][ T5865] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.337680][ T5865] ? clear_bhb_loop+0x40/0x90 [ 64.337766][ T5865] ? clear_bhb_loop+0x40/0x90 [ 64.337795][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.337822][ T5865] RIP: 0033:0x7feebeeee929 [ 64.337841][ T5865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.337909][ T5865] RSP: 002b:00007feebd557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 64.337930][ T5865] RAX: ffffffffffffffda RBX: 00007feebf115fa0 RCX: 00007feebeeee929 [ 64.337942][ T5865] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 000000000000000e [ 64.337954][ T5865] RBP: 00007feebef70b39 R08: 0000000000000200 R09: 0000000000000000 [ 64.337966][ T5865] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 64.338031][ T5865] R13: 0000000000000000 R14: 00007feebf115fa0 R15: 00007ffcf116ce78 [ 64.338049][ T5865] [ 64.562689][ T5874] loop4: detected capacity change from 0 to 512 [ 64.573488][ T5874] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.739094][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 64.753933][ T5896] loop2: detected capacity change from 0 to 512 [ 64.761606][ T5896] ======================================================= [ 64.761606][ T5896] WARNING: The mand mount option has been deprecated and [ 64.761606][ T5896] and is ignored by this kernel. Remove the mand [ 64.761606][ T5896] option from the mount to silence this warning. [ 64.761606][ T5896] ======================================================= [ 64.797592][ T5898] 9pnet: Could not find request transport: et/tun [ 64.798540][ T5896] EXT4-fs: Ignoring removed i_version option [ 64.810558][ T5896] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 64.823354][ T5896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0002] [ 64.830452][ T5904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=5904 comm=syz.3.853 [ 64.832978][ T5901] FAULT_INJECTION: forcing a failure. [ 64.832978][ T5901] name failslab, interval 1, probability 0, space 0, times 0 [ 64.844124][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 64.844136][ T29] audit: type=1326 audit(1751444588.481:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 64.844162][ T29] audit: type=1326 audit(1751444588.481:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 64.856777][ T5901] CPU: 0 UID: 0 PID: 5901 Comm: syz.4.852 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 64.856814][ T5901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.856849][ T5901] Call Trace: [ 64.856860][ T5901] [ 64.856870][ T5901] __dump_stack+0x1d/0x30 [ 64.856902][ T5901] dump_stack_lvl+0xe8/0x140 [ 64.856930][ T5901] dump_stack+0x15/0x1b [ 64.856961][ T5901] should_fail_ex+0x265/0x280 [ 64.857007][ T5901] should_failslab+0x8c/0xb0 [ 64.857041][ T5901] kmem_cache_alloc_node_noprof+0x57/0x320 [ 64.857081][ T5901] ? __alloc_skb+0x101/0x320 [ 64.857167][ T5901] __alloc_skb+0x101/0x320 [ 64.857206][ T5901] ? audit_log_start+0x365/0x6c0 [ 64.857301][ T5901] audit_log_start+0x380/0x6c0 [ 64.857360][ T5901] audit_seccomp+0x48/0x100 [ 64.857398][ T5901] ? __seccomp_filter+0x68c/0x10d0 [ 64.857492][ T5901] __seccomp_filter+0x69d/0x10d0 [ 64.857527][ T5901] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 64.857576][ T5901] ? vfs_write+0x75e/0x8e0 [ 64.857610][ T5901] ? __rcu_read_unlock+0x4f/0x70 [ 64.857712][ T5901] ? __fget_files+0x184/0x1c0 [ 64.857745][ T5901] __secure_computing+0x82/0x150 [ 64.857777][ T5901] syscall_trace_enter+0xcf/0x1e0 [ 64.857812][ T5901] do_syscall_64+0xac/0x200 [ 64.857899][ T5901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.857955][ T5901] ? clear_bhb_loop+0x40/0x90 [ 64.857985][ T5901] ? clear_bhb_loop+0x40/0x90 [ 64.858155][ T5901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.858185][ T5901] RIP: 0033:0x7ffa3e7ae929 [ 64.858228][ T5901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.858256][ T5901] RSP: 002b:00007ffa3ce17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 64.858374][ T5901] RAX: ffffffffffffffda RBX: 00007ffa3e9d5fa0 RCX: 00007ffa3e7ae929 [ 64.858393][ T5901] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 64.858410][ T5901] RBP: 00007ffa3ce17090 R08: 0000000000000000 R09: 0000000000000000 [ 64.858427][ T5901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.858445][ T5901] R13: 0000000000000000 R14: 00007ffa3e9d5fa0 R15: 00007fff3a696018 [ 64.858471][ T5901] [ 64.858489][ T5901] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 64.862871][ T29] audit: type=1326 audit(1751444588.481:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3e7ae929 code=0x7ffc0000 [ 64.862903][ T29] audit: type=1326 audit(1751444588.481:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa3e7ad290 code=0x7ffc0000 [ 64.886204][ T5901] audit: out of memory in audit_log_start [ 64.909419][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119e82e00: rx timeout, send abort [ 64.909481][ T29] audit: type=1326 audit(1751444588.481:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa3e7ad3df code=0x7ffc0000 [ 64.921832][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119e82e00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 64.946841][ T5896] System zones: [ 64.947956][ T29] audit: type=1326 audit(1751444588.591:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ffa3e7ad33c code=0x7ffc0000 [ 64.951555][ T5896] 1-12 [ 64.962558][ T5896] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.966817][ T29] audit: type=1326 audit(1751444588.591:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa3e7ad3df code=0x7ffc0000 [ 65.006388][ T29] audit: type=1326 audit(1751444588.591:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa3e7ad58a code=0x7ffc0000 [ 65.019183][ T5896] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.851: invalid indirect mapped block 12 (level 1) [ 65.335075][ T5896] EXT4-fs (loop2): Remounting filesystem read-only [ 65.341963][ T5896] EXT4-fs (loop2): 1 truncate cleaned up [ 65.349188][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 65.404402][ T5918] loop2: detected capacity change from 0 to 512 [ 65.443155][ T5918] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.482998][ T5921] loop1: detected capacity change from 0 to 164 [ 65.570107][ T5947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=5947 comm=syz.4.866 [ 65.616952][ T5953] ================================================================== [ 65.625108][ T5953] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 65.632454][ T5953] [ 65.634802][ T5953] write to 0xffff888104db7200 of 8 bytes by task 5950 on cpu 0: [ 65.642447][ T5953] mas_wmb_replace+0x20d/0x14a0 [ 65.647335][ T5953] mas_wr_store_entry+0x1773/0x2b50 [ 65.652576][ T5953] mas_store_prealloc+0x74d/0x9e0 [ 65.657632][ T5953] vma_iter_store_new+0x1c5/0x200 [ 65.662678][ T5953] vma_complete+0x125/0x580 [ 65.667225][ T5953] __split_vma+0x591/0x650 [ 65.671663][ T5953] vma_modify+0x21e/0xc80 [ 65.676009][ T5953] vma_modify_flags+0x101/0x130 [ 65.680885][ T5953] mprotect_fixup+0x2cc/0x570 [ 65.685583][ T5953] do_mprotect_pkey+0x6d6/0x980 [ 65.690451][ T5953] __x64_sys_mprotect+0x48/0x60 [ 65.695326][ T5953] x64_sys_call+0x2794/0x2fb0 [ 65.700019][ T5953] do_syscall_64+0xd2/0x200 [ 65.704571][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.710483][ T5953] [ 65.712817][ T5953] read to 0xffff888104db7200 of 8 bytes by task 5953 on cpu 1: [ 65.720372][ T5953] mas_state_walk+0x485/0x650 [ 65.725076][ T5953] mas_walk+0x30/0x120 [ 65.729258][ T5953] lock_vma_under_rcu+0xa2/0x2f0 [ 65.734218][ T5953] do_user_addr_fault+0x233/0x1090 [ 65.739361][ T5953] exc_page_fault+0x62/0xa0 [ 65.743888][ T5953] asm_exc_page_fault+0x26/0x30 [ 65.748758][ T5953] [ 65.751090][ T5953] value changed: 0xffff88810415bf81 -> 0xffff888104db7200 [ 65.758204][ T5953] [ 65.760535][ T5953] Reported by Kernel Concurrency Sanitizer on: [ 65.766694][ T5953] CPU: 1 UID: 0 PID: 5953 Comm: syz.4.868 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 65.779034][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.789104][ T5953] ================================================================== [ 66.818584][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a0c9200: rx timeout, send abort [ 66.826911][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a0c9200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.