last executing test programs: 3.711813354s ago: executing program 1 (id=180): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000b00)="f610e61fc81cc3edc86f2800194d27a5a42cf1880bb5", 0x16}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0xa580}, {r0, 0x21f0}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) flistxattr(r3, &(0x7f0000000180)=""/249, 0xf9) 3.457045309s ago: executing program 1 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x4000000) setresuid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="c9", 0x1}], 0x1}, 0x48051) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 3.290142408s ago: executing program 1 (id=184): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) io_uring_setup(0x6dbb, &(0x7f0000000580)={0x0, 0x2a70, 0x4, 0x1, 0x2c6}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x65bf, 0x40, 0x0, 0x1, 0xcb00, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) close(r0) socket$nl_route(0x10, 0x3, 0x0) 3.217772502s ago: executing program 1 (id=185): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) unshare(0x2c020400) sync_file_range(r0, 0x889, 0x8, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000b00)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000030000000000000000000000000d0800010001000000"], 0x1c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x204010, &(0x7f0000000040)={[{@debug}, {@discard}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@discard}, {@minixdf}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0xa}}]}, 0xfe, 0x46e, &(0x7f00000007c0)="$eJzs3MtvVFUYAPDvTjst5WEr4gMEra9IfLS0PGThBqOJC01MdIFxNZZCkIEaWhMgRNEYXBoS98aliX+BG3Fj1JWJW90bE0LYSFxdc2fuHcYyM+20U0aZ3y+55Zy5Zzjnu+ce5sw53AYwsCazH0nE1oj4LSLG69l/F5is/3HzxlhEXJxLIk3fvJ7Uyv114+JcUbR435Z6Jh3qUO/ldyIq1er82Tw/vXT6/enF8xeeP3m6cmL+xPyZ2cOHD+zfM3Jo9mBP4tyWtXXXhwu7d7769pXX545eefenb7L2bs3PN8fRK5P1q9vSU9mPUq9r7J9tTelkuI8NoSvZGM26q1wb/+MxFGONc+Pxyid9bRywodK0lI62P30pTdN0U60ccPdJjG0YUMUHffb9tzhWP3vYut7pR99dOxKNdYyb+VE/M9z4el7ewPonI+Lopb+/zI7YoHUIAIBmV49ExHOt5n+leKCp3D353tBERNwbEdsj4r6I2BER90fUyj4YEQ91Wf/yHZLb5z/p+JoCW6Vs/vdibW9r+fyvsTkzMZTnttXiT+L4yer8vvya7I3yaJaf6VDH9y//+nm7c83zv+zI6i/mgnk7/hxetkB3rFKurCfmZtc+johkokX8SRTbONn8eGdE7Ory7y72hE4+8/XudmVWjr+DHuwzpV9FPF3v/0uxLP5C0nZ/cuaFQ7MHpzdFdX7fdHFX3O7nXy6/0a7+dcXfA9euprG55f3fiH8i2RSxeP7Cqdp+7WL3dVz+/bO232nWdv8vVUaSt2rpkfy1c5WlpbMzESPJa7e/PnvrvUX+XGVpJGbq9//eJ1qP/+1x60o8HBHZTbwnIh6JiEfztj8WEY9HxKcd4v/xpSff6z7+DqvyPZTFf2yl/o/m/u8ycb1SHTr1w7fdx1/I+v9ALbU3fyXr/5XiWm0D13PtAAAA4P+iVNvFT0pTjXSpNDVV/z/8O2JzqbqwuPTs8YUPzhyr7/ZPRLlUrHTV14PLSbH+OdGUn12W35+vG38xNFbLT80tVLtdKwZ6a0ub8Z/5o9MDPMDdwfNaMLiMfxhcxj8MLuMfBpfxD4Or1fj/qA/tAO68FT7/x+5UO4A7z/wfBpfxD4PL+IeB1PbZ+NLaH/mXaJEYXemC9ybx3ciGV5EnotT3q1qOiP9E5642UYy6duG0fNfwqn+ZxRoToy1P9e/fJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF76JwAA///jGNH6") syz_extract_tcp_res(&(0x7f0000001080), 0xa, 0x2) syz_extract_tcp_res$synack(&(0x7f00000010c0), 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001100)=ANY=[@ANYBLOB="0180c20000031180c200b1ae0000000062c4e0b0edbac6544b7e464a2082d1f842826957b7b90ab26e01c063b8e70ca2f6c2e10500fdb13a9d5c5622d12a6841ba3e557f12a800000000000000000000000000e0b1d18d81db894b999eb1064e6da62574c1fd0876a217c8"], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000240)={0x80, 0x6, 0xc8, 0x0, 0x9, 0x3e}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x15, 0x9, 0x6, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x4004) r6 = syz_clone(0x2820000, &(0x7f00000018c0)="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", 0x1000, &(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0)="676025b46287b24a3245fe9e70defc6d75f35af8ac7b88db29652570d250066114f550f3caae7409f80f778c20576ab05d72f7cd4cb08791e07258c207cf7e5df92e25e8ffec0cf5256ace3815e83ba5a2811f44c9566cdff5c26915af72d297b6cde912235a2fde7010ce3f1ee8f0a0b6e846b7902d54a7758017b2bcb0accba0ec") ptrace(0x11, r6) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb894f"], 0x72) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb01001800000000525fc1626a0188370000006cb5000004000400000008000000f8ffffff00302e5f00"], 0x0, 0x36, 0x0, 0x1, 0x5, 0x10000, @value=r4}, 0x28) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x8205, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8001}}, {@grpid}, {@nouser_xattr}, {@lazytime}, {@usrjquota}, {@noblock_validity}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x13}}]}, 0x1, 0x610, &(0x7f00000028c0)="$eJzs3c9rHNcdAPDvzEqqZKuVXYqpTUsFPdhQrB+uqduebF/qg6GG+lBKDxaW5AqvbGHJUDuGyJBDAgmEkGsIvuQfyD2YXHMLgSS3nANOCA45JMEbZnZHXla78lrR/pDn84FZvXkzu+999+lp3uzo7QRQWtPZQxpxNCKuJBFTTdsmo75xurHf42/uXc2WJGq1f32dRNLIK/Z/0vh5MHtIIsYj4uPzEb+ubC93/c7d6wvVWt3LEbMbq2uz63funlxZXbi2dG3pxvypv54+M/e3+dPzexJnEdeFi//83Ruv/O8vy59UTyZxNi6PvrQYLXHslemYjieNEJvzRyLiTJZo877sN0UIyYDrwe5UGr+PoxFxJKaikq/VTcXK6wOtHNBTtUpEDSipRP+HkirGAcW5fS/Og4fZo3P1E6Dt8Y/UPxuJ8fzc6MDjpOnMqH6+e2gPys/K+PHesXeyJTp8DjGyB+V0snk/In7bLv4kr9uh/FOcLP400qbnZem5iBhrvBfpLsufblnv9+/f88Tf3A5ZvGcbP7P887ssf9DxA1BOD881DuSb2drT4182MizGP9Fm/DPZ5ti1G4M+/nUe/xXH+/H8M/K0ZRyWjXkutX/J0daML1678Fan8pvHf9mSlV+MBfvh0f2IYy3xv5oP5pKt9k/atH+2y5Uuy/jHp19d6LRt0PHXHkQcb3v+8/SKVpaa3VhdK/Jark/OLq9Ul+bqj23L+OCj/77XqfxBx5+1f3SIf6f2z/LWuizj/UsPVjttm3xm/OmXY8nlPDXWyPn/wsbGrfmIseRiY5em/FM716XYp3iNLP4Tf2zf/3eIP2/ozS7jX/v39cf11ParpF23/7a/KrkntS7r0EkW/+Iu2//NLsv47j+3f9+SNVEkdop/YvtLJd2+5wAAAAAAAFBGaX4NNklnttJpOjNTn8P7mziQVm+ub/xp+ebtG4sRJ/L/hxxNiyvdU/X1JFufb/w/bLF+qmX9zxFxOCLerkzk6zNXb1YXBx08AAAAAAAAAAAAAAAAAAAADImDjfn/xX2qv63U5/93ZeNIj2sH9FwvbzAHDDf9H8or7/+7vYMrsK85/kN56f9QXvo/lJf+D+Wl/0N56f9QXvo/lJf+DwAAAAAvpMN/ePh5EhGbf5/Il8xYY9voQGsG9Nrz9/HpntQD6L9KX58GDJOtS/+m/0PpdDX+/77x5YC9rw4wAEm7zHxwUNu58z9s+0wAAAAAAAAAAAAAoAeOHzX/H8oqjQ8HXQVgQH7GRH7fAQD7nK/+h/Jyjg88axb/eKcN5v8DAAAAAAAAAAAAQN9M5kuSzjRuAToZaTozE/HLiDgUo8nySnVpLiJ+FRGfVUZ/ka3PD7rSAAAAAAAAAAAAAAAAAAAA8IJZv3P3+kK1unSrOfHDtpytxEjnTfs3UdwFdVjq05yIpP+FTkTEMMTem8RIU04SsZm1/FBU7NZ6DEU10rwaA/7DBAAAAAAAAAAAAAAAAAAAJdQ097i9Y+/2uUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0H9P7/+/+0TyjNcZdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP70UwAAAP//GAE4wQ==") ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000002c0)={r8, 0x76c3, 0x5, 0x5}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x81, "e43b5ecd51448b64f45d6d588c03cfc9b2e1a24f3870b7ecc684262bb9cd4ceb52bf7dc83a984e1f5489c3371846d0c9ccb01d726033ca845080f9615471c55b81aaa7d6041bdf15fd066b48f2c4f83fad86e1f5112038d6c0e4ccaa1f53c5a6e01a9c617f4bfb80c298c37649e4e2b0909d30611967c1f354e930f6db14c9da2f"}, &(0x7f0000000300)=0x89) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=r10, &(0x7f0000000f00)=0x4) 2.959707437s ago: executing program 1 (id=189): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x6, 0x2, 0x6, 0x0, 0x8, 0x484, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x35}, 0x100820, 0xffffffffffffff0d, 0x9, 0x9, 0x49, 0x9, 0xf8, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) io_uring_setup(0x6dbb, &(0x7f0000000580)={0x0, 0x2a70, 0x4, 0x1, 0x2c6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x65bf, 0x40, 0x0, 0x1, 0xcb00, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) close(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xa, @mcast1, 0x8}, 0xffffffffffffffff, 0x7}}, 0x48) 2.548766941s ago: executing program 1 (id=199): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) socket$unix(0x1, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) (async, rerun: 64) getrusage(0x0, &(0x7f00000011c0)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) r1 = memfd_create(&(0x7f00000006c0)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\xd3\xba\xc8\x87)\xc8\xc2Z[M\xaa2j\xac', 0x1) fallocate(r1, 0x0, 0x7, 0x6) (async, rerun: 64) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000000000)) (rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r3, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) 2.521690883s ago: executing program 32 (id=199): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) socket$unix(0x1, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) (async, rerun: 64) getrusage(0x0, &(0x7f00000011c0)) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) r1 = memfd_create(&(0x7f00000006c0)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\xd3\xba\xc8\x87)\xc8\xc2Z[M\xaa2j\xac', 0x1) fallocate(r1, 0x0, 0x7, 0x6) (async, rerun: 64) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x7, &(0x7f0000000000)) (rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r3, 0x0, 0x0, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2125099, 0x0) 2.500394544s ago: executing program 2 (id=202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) syz_emit_ethernet(0xd8c, &(0x7f0000000a00)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "e0a55a", 0xd56, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', {[@dstopts={0x11, 0x10, '\x00', [@generic={0x1, 0x80, "679eebc4518e677e6b5f5146dd922d9d746e4362093e7492f8c78694e781bf720477601a183924b6b3a0a5f71632805574db6ed23feba2c6bc523b3e7c342aadc5396b5915175561ccd4f4b889790219517d018074d03cc981cf4b2193589c590dba8c829aa4d06681e617cde0ece3f7190df920e9db3b408ee812b92232a818"}, @ra={0x5, 0x2, 0xcc}]}, @dstopts={0x1, 0x18c, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @generic={0x5, 0xdb, "4d512c2feac912bdbbe24004e5143e912c6b7d4ebcad0e60e0d75dbc44166dffe3403c1071ee5226d1745ce94ac7aa9d401704a22091a12e20b42c1ef434d7ead070249aa3f8a10e83f14dbd1a18ca027a91c49b7dfecd862ee1386da499db09238cf3b2e4928472eb435aaef0a8c54c7db2be766e4132bf97ccd173e93196676754f6ea6885dd6e168c873cd77b01e9ba513a153c59c8f44cc99f4f0586dc26e5d3655b346f9ea3caacc69586a8bb0342fb61d012c852bccdbc48249969ee1b38f41fe0794cc140d23348ca60eed6062e1deb010ab2101605b8ca"}, @generic={0x5, 0xb80, "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"}, @enc_lim={0x4, 0x1, 0x8}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x1, 0x40, 0x483a, [@empty]}, @srh={0x2c, 0x0, 0x4, 0x0, 0x9, 0x0, 0x62}], @payload_mcast={{{{{{0x36, 0x0, 0x0, 0x1, 0x1, 0xb, 0x2, 0x2, 0x1, 0x0, 0x0, 0x5, 0x1, 0x1, 0xd28, 0x7, 0x4, 0x4e24, 0x4e21}}, 0x3, 0x4}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 2.40595953s ago: executing program 2 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c01, 0x51a23}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 2.298080446s ago: executing program 2 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x4000000) setresuid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="c9", 0x1}], 0x1}, 0x48051) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 2.246940239s ago: executing program 2 (id=208): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioperm(0x8, 0x9, 0x5a) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="0c68329634255c2becc5d8bf1fc9172e920c0001000000d50697aaa0a9252a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') rt_sigtimedwait(&(0x7f0000000000)={[0x3ff]}, 0x0, 0x0, 0x8) (async) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r5, 0xa, 0x13) (async) fcntl$setlease(r5, 0x400, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async) fchdir(r4) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000270001002abd70000000000000000000000000000000000000000000e000000200000000000000000000000000000000fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000050400000080e154911eced48fc4f32c8d0cbbb0f171dc996633e7242332382fa60f292e9ee38dcbc0aba13ae84b"], 0x50}, 0x1, 0x0, 0x0, 0x20048851}, 0x20040004) (async) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r8, &(0x7f0000000140)={0xcda, 0x20, 0x4, 0x20, 0x8}, 0x48) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x77359400}, {r9, r10+60000000}}, 0x0) (async) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid_for_children\x00') (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) 2.128037615s ago: executing program 2 (id=210): unshare(0x62040200) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ftruncate(r5, 0x2007ffb) (async) sendfile(r6, r5, 0x0, 0x1000000200fff) r7 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) read$snapshot(r5, &(0x7f0000000480)=""/220, 0xdc) (async) io_uring_enter(r7, 0x7b1d, 0x693c, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x701000, 0x0) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, &(0x7f0000000100)=0x4, 0x1) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x3}, 0x7) (async) syz_pidfd_open(r1, 0x0) (async) setns(0xffffffffffffffff, 0x40000000) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) syz_clone(0x12003080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x4e20, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 1.688123042s ago: executing program 0 (id=213): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000240)={[], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") chdir(&(0x7f0000000140)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xff, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000e00)={0x17c04, r0, 0x299f25fd, 0x4000003, 0x400000006, 0x101}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0xdd2, 0x6, 0x9, 0xad}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r9, @ANYBLOB="100001800400048008"], 0x28}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x1, 0x1}, 0x6, 0x20, 0x0, 0x0, 0xfffffff9, 0x9, 0x0, 0x2d20000, 0x7, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000180)=r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000200000008500000095000000b70000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x33, &(0x7f00000003c0)=""/4118, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 1.623055795s ago: executing program 3 (id=214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80c57, 0x42313}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x104}, 0x2000e844) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000000000006910b00000000000c4090000010000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0xffffffad}, 0x49) 1.596701076s ago: executing program 3 (id=215): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20443, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 1.533944421s ago: executing program 3 (id=216): r0 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x80000000, 0x10100, 0x3, 0xffffffbd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 1.496968303s ago: executing program 3 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x4000000) setresuid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="c9", 0x1}], 0x1}, 0x48051) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 1.289254405s ago: executing program 3 (id=219): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001080)={0xff5e, 0x7fff, 0x20a, 0x7ff, 0x5, 0x400, 0x3, 0x7, 0x0}, &(0x7f00000010c0)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001100)=@sack_info={r4, 0x1, 0xd}, &(0x7f0000001140)=0xc) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f00000007c0)={&(0x7f00000002c0)={0xa, 0x4e22, 0x46d74c6e, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000002900000004000000320000000000000014000000000000002900000034000000000000000000000014"], 0x48}, 0x46830) 1.264665256s ago: executing program 4 (id=220): perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x6, 0x2, 0x6, 0x0, 0x8, 0x484, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x35}, 0x100820, 0xffffffffffffff0d, 0x9, 0x9, 0x49, 0x9, 0xf8, 0x0, 0x7, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) io_uring_setup(0x6dbb, &(0x7f0000000580)={0x0, 0x2a70, 0x4, 0x1, 0x2c6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x65bf, 0x40, 0x0, 0x1, 0xcb00, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) close(r0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0xa, @mcast1, 0x8}, 0xffffffffffffffff, 0x7}}, 0x48) 1.187784481s ago: executing program 0 (id=221): mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x9, 0xfdf, 0x8, 0xc, 0x3, "c11625944861acf1541763d1a969c5bc08e5a3", 0x8, 0x8}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000014c0)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33346d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb3655668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0xff10, 0x8000c61) fallocate(r1, 0x8, 0x4000, 0x4000) 1.149706733s ago: executing program 4 (id=222): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)="dc02", 0x2}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) (fail_nth: 1) 852.67503ms ago: executing program 4 (id=223): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000018c0)={0x1, 0x4, 0x3, 0xfffffffa, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x33}, @loopback}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltaction={0x60, 0x31, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xfead, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffcba6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x10001, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x1, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0x921, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x7, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x2, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x3b6, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x10000, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x5, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0xfffff181, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x7f, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0x7, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xfffffffe, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x8003, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1fc, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x200002a8, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r11, 0x25, 0x1a, @void}, 0x10) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r11, 0x3, {0x2, 0x1, 0x3}, 0xff}, 0x18) r12 = socket(0x1, 0xa, 0x5) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x301, 0x5, 0xa, 0x110c}}) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 801.112473ms ago: executing program 2 (id=224): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) (async) setpgid(r4, r4) (async) setpgid(0x0, r4) wait4(r4, 0x0, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = socket$netlink(0x10, 0x3, 0x9) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x2, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) 752.899766ms ago: executing program 0 (id=225): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20443, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 636.210693ms ago: executing program 0 (id=226): r0 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x80000000, 0x10100, 0x3, 0xffffffbd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 581.810956ms ago: executing program 0 (id=227): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x9cf, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100, 0x0, 0x0, 0x100000c00, 0x38, 0x24, 0x42, 0x6e}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}, @TCA_CT_LABELS={0x14, 0x7, "0118aae167fe4bb4d318e45cb16cfc7a"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000300)={[{@nobh}, {@nolazytime}, {@nodioread_nolock}, {@errors_remount}, {@user_xattr}, {@quota}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4c0}}]}, 0x1, 0x7f4, &(0x7f0000000380)="$eJzs3c9rXFsdAPDvnSRNmlYbQbB106xqoXTS1thWEIy4EMFKQde2YTINMZNMyExKEwK2iCBIQYsLQTeuq9adW9Gd4J8gbh6PR0vfaxpeH2/x3jzu/Egmv2byY5Lpj88H7sw5d86953znzpx7Zu5hJoB31nB6k4k4ExG/TSJO1dcnEdFXTfVGjNXKvVpZzqVLEpXKTz5KqmVWV5Zz0bRN6kQ9czoi/vWriAuZpgr/8+PqXWlxaXq8UMjP11ePlGfmRkqLSxenZsYn85P52auXR0evXPvWtav969vOHSzWj/+7dPLZ737wjb+NffrLrz15+O8kxuJk/bHmOJr0H6S+4RiuPyd96VO4wfcPsuPXUNLtBrAv6Vuzp/YujzNxKnqqKQDgbZae/yvt9eyuGADwZkic2AHgHdP4HmB1ZTnXWLr7jcTRev69iBioxd+4vll7pLd+zW6geh10cDWJ3ujLnYvaBZNOXe8ajog//eNnf0mX2Pk6JEDH3X8QEbeHhrf2/8mWOQt7dWnLmodbus3hTfnVleXjbXdssgF0xD/T8c/17cZ/mbXxT6yNf9b1b/Pe3Y/hiGPN+a3jn8zTbTf8bgcqr4//vlOb25YG2jT+q09aG4uhnnruSxExdDYipgr5tG/7ckScj77+O1OF/OUWdZx/+dnLnR5rHv+9ePTzx2n96f16iczT3k2z0CbGy+MHi3rd8wcRX+9dn9v3akv/P1Dtbjcf/3TdzVY7Prue/OG3f/3HnYql8b8YiMdpzNvHf7gqf444F9vH35C0nJ84kh7+S7XbDbte28Hf3/vD4E71Nx//dEnrb3wWOArp8R9sHf9Q0jxfs9TZ+tvHv/3r/1jy02q60XncGy+X5y9HHEt+tHX9lfVtG/lG+TT+WqSb48+0fP2nnwlv7zLG3mcf/nX/8a85lFFPGv/Eno7/3hNPXk337D/+9PiPVlPn62ta9H+9EY3h4/zmKcb3t2vggZ48AAAAAAAAAAAAAAAAAAAAAAAAANilTEScjCSTXUtnMtls7T+8vxqDmUKxVL5wp7gwOxHV/8oeir5M46cuT9XySeP3T4ea8lc25b8ZEV+JiN/3H6/ms7liYaLbwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3Ykd/v8/9UF/t1sHAByagbYlXuY3ZCuVSuUQ2wMAHL7G+f9/XW4HAHB0Wnz+P36U7QAAjk777/8BgLeN8z8AvHuc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhkN2/cSJfKJyvLuTQ/cXdxYbp49+JEvjSdnVnIZXPF+bnsZBQnC/lsrjjTbn+FYnFuNGYX7o2U86XySGlx6dZMcWG2fGtqZnwyfyvfdyRRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDelBaXpscLhfx8mhiKiPkNa3aZSGI/W3U+8ZuIaFrzebfb08FEEq9FM7qSeP/i/0+3KvOozctv7KjbPNi+zPWBiM5UWqlUfnEIUXS7ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4M3wRAAD//+NqHfo=") r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x6e0b6) 462.381803ms ago: executing program 4 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, 0x0, 0x4000000) setresuid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="c9", 0x1}], 0x1}, 0x48051) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 356.132409ms ago: executing program 3 (id=229): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4044014) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000042f000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f000029e000/0x4000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0xfe, 0x847, &(0x7f00000001c0)="$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") sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4815}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="640000000206d2572f54000000000000028c310105000100e6ffffff0800020073797a310000000014000300686173683a00002c706f72742c69700016000300686173683a6e65742c706f72742c6e6574000000050005000a00000005000100000019b398dfe54c7261bfe9cea49d97535f7378f7be7966624c45de9b575939f65448b2f37b08ae62836f85d6fe2858f7325c1ff6514cea765a17408de7d3cb791b65b11cfe75948a5091ea601e7d70993c47a9f66fd44f0f0ae01426c2fff64ddd64874911b3231dd86695648e4ef5e530b2d675b046f2b5f5d1d25b523e10077ffd6f8a0a794da400ce667255db93fd91f9ea"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b40)='\x00', 0x56}], 0x1, 0x0, 0x0, 0x20000000}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x2, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) r5 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c00)=ANY=[@ANYRESDEC=r5], 0x83}], 0x1}, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000000)={0x0, 0x0, 0xfffff185}) ioctl$MON_IOCX_GETX(r7, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x44080) 130.121702ms ago: executing program 4 (id=230): r0 = socket$inet6(0x10, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000440)="3e9105fbb7764685e4bc11f7f70c4f31e446e6f64c510995ed714a12e98336d105dbb7b619bb7a9dbfe8f851f1030e6fafed56c3458edf16127534cde0364baf83673faffcc500e7ff38b19b7d9332fe9f695b1dcba3d24802ac96ff9dbef3d4d13be484882367288d94d547e36dbef2d197cbda9fd5db2777b1a3f38953907c09fddcd14ee8e783a729925327d27d6aa5f5420553b72d4208891d168a261f9f3af9a98eff951528954ec4ee2089e88632089f19d7f0773236435f58e5f8027edfd80feb58ea9ebf4c26e282ba851bdc2e741c3a572c9d9e0b9c09cd4c8719b4ed660e09f117a4bb815f9c", 0xeb}], 0x1) recvfrom$inet6(r0, &(0x7f0000000680), 0x0, 0x10023, &(0x7f00000006c0)={0xa, 0x4e23, 0x81, @mcast1, 0x3}, 0x1c) bind$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) move_pages(0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000600)=[0x0, 0x0], 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ip={@remote, @empty, 0xff000000, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x21, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x0, 0xa, [0x15, 0x1d, 0x3, 0x3b, 0x5, 0x16, 0x26, 0xa, 0x2b, 0x20, 0x29, 0x3, 0x25, 0x15, 0x32, 0x24], 0x0, 0x100, 0x10001}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffff00, 'veth1\x00', 'batadv0\x00', {0xff}, {0xff}, 0x16, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x0, 0x0, 0x5, 0x2], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x5, 0x7, 0x2, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000580)={0x0, 0x36d, 0x400, 0xd, 0x81c}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="dcf40c4ad00728a0b909977d4fc4f23fb9fc4413d176308646bc72257832cfcb7759d2d4d94c52143c861b8510467cb11c557493bb3e04c287091bd7da593c3f4764bf06641a58756c3ee944e8ab886d1f71fdee95bbc2077b22e1f36557b646aa6ab9273cd89248cda7494c8f240fcae58c23ee5e8a15068cf5e9c7bf3b4034b6b5459e0211e7bedc516139ffe174e7d5374970b0c0a27e91977c4c3831233e2528f0f85f25f1e74f94b7218809158a75727192", @ANYRESOCT, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRES64=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r6, 0xffffffffffffffed) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000007c0)="af3c5edfa4e3a3d7ad65bf3ef6e0ac73049f64cfb4ee9445e1de9aa064d8163ff9cd65ab6d39cb686e5ea494482087b06fa5627fff36fd39305ccca59e584af9c4771d127678e1d07a18752634b77d56da61767f05f4bd333dca5eb18dbae1e08227c73519bec3da94d626432a58575ed2e8ee", 0x73}], 0x1, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14000000e208074200000000000000000000000a076091544bcb8471ac7162e08c5af3d089fe6658d1bf23c117d69fee75e91ce3d9018b164ccdb38ac529b15af7307adb2e0b6907d22d69c1a310e07310cdd01461abda66974a98c78ba3cae8ba12baa0e1656007b3f024df67c2593a0a517e0104696cd510c8b7d98055c28e042183cd9f94710fb39c3614754c7a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$pppoe(0x18, 0x1, 0x0) 49.601386ms ago: executing program 0 (id=231): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0xc, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000880)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f0000000000)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 0s ago: executing program 4 (id=232): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000940)=[{&(0x7f00000003c0)="dc02", 0x2}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) (fail_nth: 2) kernel console output (not intermixed with test programs): k" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.060677][ T29] audit: type=1400 audit(1770014977.901:63): avc: denied { search } for pid=3262 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.083415][ T29] audit: type=1400 audit(1770014977.901:64): avc: denied { search } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.106574][ T29] audit: type=1400 audit(1770014977.901:65): avc: denied { search } for pid=3262 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.129592][ T29] audit: type=1400 audit(1770014977.911:66): avc: denied { read open } for pid=3263 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.901169][ T3259] sshd-session (3259) used greatest stack depth: 10320 bytes left Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 33.835193][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.835211][ T29] audit: type=1400 audit(1770014986.691:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.864301][ T29] audit: type=1400 audit(1770014986.721:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.866744][ T3301] cgroup: Unknown subsys name 'net' [ 33.892152][ T29] audit: type=1400 audit(1770014986.751:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.027246][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.033523][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.155317][ T29] audit: type=1400 audit(1770014987.011:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.189908][ T29] audit: type=1400 audit(1770014987.021:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.210513][ T29] audit: type=1400 audit(1770014987.021:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.230984][ T29] audit: type=1400 audit(1770014987.021:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.251283][ T29] audit: type=1400 audit(1770014987.031:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.276108][ T29] audit: type=1400 audit(1770014987.031:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.284813][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.299449][ T29] audit: type=1400 audit(1770014987.041:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.375136][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.609111][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.626904][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.700622][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.745860][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.755139][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.762340][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.769634][ T3318] bridge_slave_0: entered allmulticast mode [ 35.776113][ T3318] bridge_slave_0: entered promiscuous mode [ 35.789623][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.796767][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.803906][ T3312] bridge_slave_0: entered allmulticast mode [ 35.810841][ T3312] bridge_slave_0: entered promiscuous mode [ 35.828186][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.835493][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.842866][ T3318] bridge_slave_1: entered allmulticast mode [ 35.849315][ T3318] bridge_slave_1: entered promiscuous mode [ 35.855831][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.864924][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.872151][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.879409][ T3312] bridge_slave_1: entered allmulticast mode [ 35.885833][ T3312] bridge_slave_1: entered promiscuous mode [ 35.947464][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.958238][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.978557][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.987738][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.994836][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.002077][ T3313] bridge_slave_0: entered allmulticast mode [ 36.008572][ T3313] bridge_slave_0: entered promiscuous mode [ 36.015894][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.037447][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.044584][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.051924][ T3313] bridge_slave_1: entered allmulticast mode [ 36.058443][ T3313] bridge_slave_1: entered promiscuous mode [ 36.072811][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.079972][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.087193][ T3316] bridge_slave_0: entered allmulticast mode [ 36.093736][ T3316] bridge_slave_0: entered promiscuous mode [ 36.105683][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.112852][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.120160][ T3316] bridge_slave_1: entered allmulticast mode [ 36.126801][ T3316] bridge_slave_1: entered promiscuous mode [ 36.152677][ T3312] team0: Port device team_slave_0 added [ 36.159503][ T3312] team0: Port device team_slave_1 added [ 36.175882][ T3318] team0: Port device team_slave_0 added [ 36.187567][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.203260][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.218581][ T3318] team0: Port device team_slave_1 added [ 36.224427][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.231467][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.257499][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.269736][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.280174][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.303874][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.310887][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.336938][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.356928][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.364120][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.371705][ T3320] bridge_slave_0: entered allmulticast mode [ 36.378311][ T3320] bridge_slave_0: entered promiscuous mode [ 36.397608][ T3313] team0: Port device team_slave_0 added [ 36.403301][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.410510][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.418019][ T3320] bridge_slave_1: entered allmulticast mode [ 36.424485][ T3320] bridge_slave_1: entered promiscuous mode [ 36.431184][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.438152][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.464096][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.476666][ T3316] team0: Port device team_slave_0 added [ 36.483235][ T3313] team0: Port device team_slave_1 added [ 36.493405][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.500508][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.526444][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.538658][ T3316] team0: Port device team_slave_1 added [ 36.573145][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.582655][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.589717][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.615761][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.646236][ T3312] hsr_slave_0: entered promiscuous mode [ 36.652427][ T3312] hsr_slave_1: entered promiscuous mode [ 36.659630][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.674098][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.681096][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.707150][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.718390][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.725360][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.751521][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.773994][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.781155][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.807213][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.830869][ T3318] hsr_slave_0: entered promiscuous mode [ 36.837056][ T3318] hsr_slave_1: entered promiscuous mode [ 36.843068][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.848898][ T3318] Cannot create hsr debugfs directory [ 36.866648][ T3320] team0: Port device team_slave_0 added [ 36.873454][ T3320] team0: Port device team_slave_1 added [ 36.916730][ T3316] hsr_slave_0: entered promiscuous mode [ 36.922837][ T3316] hsr_slave_1: entered promiscuous mode [ 36.928768][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.934550][ T3316] Cannot create hsr debugfs directory [ 36.940592][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.947626][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.973699][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.993876][ T3313] hsr_slave_0: entered promiscuous mode [ 37.000149][ T3313] hsr_slave_1: entered promiscuous mode [ 37.006244][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 37.012219][ T3313] Cannot create hsr debugfs directory [ 37.018467][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.025446][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.051379][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.133029][ T3320] hsr_slave_0: entered promiscuous mode [ 37.139222][ T3320] hsr_slave_1: entered promiscuous mode [ 37.145151][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.150936][ T3320] Cannot create hsr debugfs directory [ 37.263203][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.274698][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.286298][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.308711][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.365406][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.374308][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.383674][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.392768][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.429379][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.439888][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.449516][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.458569][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.500295][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.509926][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.518828][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.527915][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.546125][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.554343][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.574902][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.582038][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.599068][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.606179][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.618615][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.628753][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.638258][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.647672][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.707741][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.749308][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.763697][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.784850][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.792009][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.810168][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.818981][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.826095][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.847211][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.857291][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.866599][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.888360][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.895468][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.906219][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.913344][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.927160][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.940218][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.947327][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.958482][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.965559][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.996608][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.033703][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.040841][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.049838][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.056972][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.075147][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.085582][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.167145][ T3312] veth0_vlan: entered promiscuous mode [ 38.192381][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.207067][ T3312] veth1_vlan: entered promiscuous mode [ 38.260521][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.274120][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.288622][ T3312] veth0_macvtap: entered promiscuous mode [ 38.303213][ T3312] veth1_macvtap: entered promiscuous mode [ 38.321152][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.352576][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.372829][ T3316] veth0_vlan: entered promiscuous mode [ 38.380793][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.418646][ T3316] veth1_vlan: entered promiscuous mode [ 38.427740][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.457202][ T3316] veth0_macvtap: entered promiscuous mode [ 38.463986][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.483846][ T3316] veth1_macvtap: entered promiscuous mode [ 38.491868][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.507033][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.528127][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.558178][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.581726][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.592382][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.603345][ T3320] veth0_vlan: entered promiscuous mode [ 38.619085][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.640155][ T3320] veth1_vlan: entered promiscuous mode [ 38.647338][ T3313] veth0_vlan: entered promiscuous mode [ 38.661178][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.679976][ T3313] veth1_vlan: entered promiscuous mode [ 38.687850][ T3481] batadv_slave_1: entered promiscuous mode [ 38.693888][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.722028][ T3320] veth0_macvtap: entered promiscuous mode [ 38.744071][ T3481] batadv_slave_1: left promiscuous mode [ 38.762579][ T3318] veth0_vlan: entered promiscuous mode [ 38.773183][ T3320] veth1_macvtap: entered promiscuous mode [ 38.794351][ T3318] veth1_vlan: entered promiscuous mode [ 38.806006][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.817542][ T3313] veth0_macvtap: entered promiscuous mode [ 38.828970][ T3313] veth1_macvtap: entered promiscuous mode [ 38.837284][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 38.837302][ T29] audit: type=1400 audit(1770014991.701:114): avc: denied { create } for pid=3489 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.841844][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.875290][ T3490] loop1: detected capacity change from 0 to 1024 [ 38.882156][ T3490] ======================================================= [ 38.882156][ T3490] WARNING: The mand mount option has been deprecated and [ 38.882156][ T3490] and is ignored by this kernel. Remove the mand [ 38.882156][ T3490] option from the mount to silence this warning. [ 38.882156][ T3490] ======================================================= [ 38.920357][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.929426][ T3490] EXT4-fs: Ignoring removed bh option [ 38.954452][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.967206][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.994020][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.015873][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.033943][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.048526][ T3318] veth0_macvtap: entered promiscuous mode [ 39.049192][ T3490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.072179][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.081997][ T3318] veth1_macvtap: entered promiscuous mode [ 39.088257][ T29] audit: type=1400 audit(1770014991.951:115): avc: denied { create } for pid=3499 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.114473][ T29] audit: type=1400 audit(1770014991.951:116): avc: denied { allowed } for pid=3499 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.125175][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.133747][ T29] audit: type=1400 audit(1770014991.951:117): avc: denied { create } for pid=3499 comm="syz.0.9" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.161972][ T29] audit: type=1400 audit(1770014991.951:118): avc: denied { map } for pid=3499 comm="syz.0.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.176633][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.185769][ T29] audit: type=1400 audit(1770014991.951:119): avc: denied { read write } for pid=3499 comm="syz.0.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.185799][ T29] audit: type=1400 audit(1770014991.971:120): avc: denied { mounton } for pid=3320 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.249509][ T3506] capability: warning: `syz.0.10' uses deprecated v2 capabilities in a way that may be insecure [ 39.275670][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.284843][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.294126][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.303163][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.312054][ T29] audit: type=1400 audit(1770014992.011:121): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.336339][ T29] audit: type=1400 audit(1770014992.011:122): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.360681][ T29] audit: type=1400 audit(1770014992.011:123): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.398430][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.431049][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.466469][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.483665][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.483950][ C1] hrtimer: interrupt took 146880 ns [ 39.500962][ T3517] random: crng reseeded on system resumption [ 39.510440][ T3520] loop2: detected capacity change from 0 to 128 [ 39.531975][ T3517] loop1: detected capacity change from 0 to 512 [ 39.557959][ T3520] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.619986][ T3517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.653753][ T3508] loop0: detected capacity change from 0 to 512 [ 39.691926][ T3531] Zero length message leads to an empty skb [ 39.709871][ T3517] Restarting kernel threads ... [ 39.720029][ T3517] Done restarting kernel threads. [ 39.742433][ T3508] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.12: invalid indirect mapped block 256 (level 2) [ 39.799006][ T3508] EXT4-fs (loop0): 2 truncates cleaned up [ 39.807898][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.814974][ T3543] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 39.832595][ T3542] loop2: detected capacity change from 0 to 512 [ 39.841507][ T3508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.850952][ T3533] syzkaller0: entered promiscuous mode [ 39.860007][ T3533] syzkaller0: entered allmulticast mode [ 39.872239][ T3544] loop4: detected capacity change from 0 to 1024 [ 39.880105][ T3542] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 39.891136][ T3542] EXT4-fs (loop2): group descriptors corrupted! [ 39.937822][ T3544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.020144][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.063453][ T3546] SELinux: failed to load policy [ 40.079466][ T3552] netlink: 256 bytes leftover after parsing attributes in process `syz.3.20'. [ 40.132570][ T3560] loop1: detected capacity change from 0 to 256 [ 40.161991][ T3561] ip6t_srh: unknown srh invflags 4000 [ 40.175029][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.222863][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.232516][ T3560] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.243428][ T3567] ieee802154 phy0 wpan0: encryption failed: -22 [ 40.252426][ T3568] netlink: 68 bytes leftover after parsing attributes in process `syz.0.25'. [ 40.294551][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 40.356231][ T3577] loop3: detected capacity change from 0 to 512 [ 40.389188][ T3577] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.29: inode has both inline data and extents flags [ 40.429534][ T3577] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.29: couldn't read orphan inode 15 (err -117) [ 40.451417][ T3577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.489646][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 40.528185][ T3591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.539522][ T3589] chnl_net:caif_netlink_parms(): no params data found [ 40.556054][ T3591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.578574][ T3593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.589347][ T3593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.600278][ T3591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.610074][ T3594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.639699][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.654933][ T3593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.657019][ T3591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.666703][ T3594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.680039][ T3593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.765329][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 40.788550][ T3614] capability: warning: `syz.1.39' uses 32-bit capabilities (legacy support in use) [ 40.840630][ T3619] netlink: 300 bytes leftover after parsing attributes in process `syz.3.41'. [ 40.863168][ T3619] loop3: detected capacity change from 0 to 512 [ 40.880605][ T3619] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.41: inode has both inline data and extents flags [ 40.898184][ T3619] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.41: couldn't read orphan inode 15 (err -117) [ 40.919125][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.938317][ T3619] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 6456 vs 220 free clusters [ 41.016628][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.093288][ T3636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 41.108805][ T3639] loop0: detected capacity change from 0 to 128 [ 41.119988][ T3625] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.42: invalid indirect mapped block 256 (level 2) [ 41.141035][ T3625] EXT4-fs (loop1): 2 truncates cleaned up [ 41.150145][ T3305] udevd[3305]: incorrect ext4 checksum on /dev/loop0 [ 41.157942][ T3625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.176094][ T3639] ext2: Unknown parameter 'subj_user' [ 41.270262][ T3647] SELinux: failed to load policy [ 41.454083][ T3650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.468115][ T3650] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.508724][ T3650] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.587225][ T3650] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.608741][ T3650] EXT4-fs (loop4): 1 truncate cleaned up [ 41.626093][ T3650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.701548][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.728607][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.789596][ T3678] netlink: 32 bytes leftover after parsing attributes in process `syz.4.55'. [ 41.842054][ T3684] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.878121][ T3681] 9pnet_fd: Insufficient options for proto=fd [ 41.974448][ T3693] EXT4-fs: Ignoring removed i_version option [ 41.980563][ T3693] EXT4-fs: Ignoring removed bh option [ 42.049133][ T3693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.069970][ T3693] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.143346][ T3710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.203056][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.204750][ T3719] chnl_net:caif_netlink_parms(): no params data found [ 42.242075][ T3725] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=3725 comm=syz.2.69 [ 42.266234][ T3721] Illegal XDP return value 4292476928 on prog (id 17) dev syz_tun, expect packet loss! [ 42.357508][ T3733] program syz.4.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.357953][ T3733] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 42.525802][ T3748] ext4: Bad value for 'sb' [ 42.533576][ T3748] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 42.803856][ T3758] EXT4-fs: inline encryption not supported [ 42.830295][ T3758] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 42.830471][ T3758] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.83: invalid indirect mapped block 2683928664 (level 1) [ 42.830756][ T3758] EXT4-fs (loop2): 1 truncate cleaned up [ 42.831247][ T3758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.927124][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.173244][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.209320][ T3782] 9p: Bad value for 'wfdno' [ 43.296140][ T3790] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 43.422176][ T3788] vlan2: entered allmulticast mode [ 43.439341][ T3788] dummy0: entered allmulticast mode [ 43.450622][ T3788] batman_adv: batadv0: Adding interface: vlan2 [ 43.457616][ T3788] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.499288][ T3788] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 43.560634][ T3802] chnl_net:caif_netlink_parms(): no params data found [ 43.811778][ T3828] Cannot find add_set index 2 as target [ 43.885789][ T3835] random: crng reseeded on system resumption [ 43.896189][ T3835] set_capacity_and_notify: 10 callbacks suppressed [ 43.896205][ T3835] loop4: detected capacity change from 0 to 512 [ 43.941958][ T3839] loop2: detected capacity change from 0 to 128 [ 43.960532][ T3835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.977241][ T3838] loop1: detected capacity change from 0 to 1024 [ 43.992340][ T3839] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.018403][ T3838] EXT4-fs: inline encryption not supported [ 44.028116][ T3839] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.068401][ T3838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.086469][ T3848] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.108: bad entry in directory: directory entry overrun - offset=1012, inode=128, rec_len=65544, size=1024 fake=0 [ 44.115209][ T3851] loop0: detected capacity change from 0 to 512 [ 44.118134][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.149399][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 44.149416][ T29] audit: type=1326 audit(1770014997.001:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.178916][ T29] audit: type=1326 audit(1770014997.001:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.202315][ T29] audit: type=1326 audit(1770014997.001:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.225600][ T29] audit: type=1326 audit(1770014997.001:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.248958][ T29] audit: type=1326 audit(1770014997.001:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.272412][ T29] audit: type=1326 audit(1770014997.001:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.295905][ T29] audit: type=1326 audit(1770014997.001:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.319603][ T29] audit: type=1326 audit(1770014997.001:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.343304][ T29] audit: type=1326 audit(1770014997.001:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.366603][ T29] audit: type=1326 audit(1770014997.001:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3837 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427b7caeb9 code=0x7ffc0000 [ 44.408627][ T3861] syz.4.112 uses obsolete (PF_INET,SOCK_PACKET) [ 44.467486][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.551729][ T3870] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 44.651463][ T3879] loop2: detected capacity change from 0 to 512 [ 44.688590][ T3879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.733500][ T3891] netlink: 'syz.3.123': attribute type 21 has an invalid length. [ 44.743250][ T3892] loop4: detected capacity change from 0 to 512 [ 44.757884][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.767591][ T3891] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 44.784854][ T3892] ext4: Unknown parameter 'dont_measure' [ 44.810152][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.913645][ T3859] loop0: detected capacity change from 0 to 512 [ 44.934531][ T3859] ------------[ cut here ]------------ [ 44.940226][ T3859] EA inode 11 i_nlink=2 [ 44.940322][ T3859] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.0.113/3859 [ 44.956026][ T3859] Modules linked in: [ 44.960092][ T3859] CPU: 0 UID: 0 PID: 3859 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.969820][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.980637][ T3859] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 44.987361][ T3859] Code: e4 e5 9a ff 4c 8d 2d 2d 21 3e 05 49 8d 7e 40 e8 f4 cf b6 ff 49 8b 6e 40 4c 89 e7 e8 28 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f e1 d0 03 66 66 66 66 66 66 2e [ 45.007771][ T3859] RSP: 0018:ffffc9000f7df778 EFLAGS: 00010246 [ 45.013985][ T3859] RAX: ffff88811b62ab90 RBX: ffff88811aceca78 RCX: ffffffff81be19f8 [ 45.022034][ T3859] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 45.030090][ T3859] RBP: 000000000000000b R08: 000188811aceca2b R09: 0000000000000000 [ 45.038662][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.045323][ T3859] R10: ffffc9000f7df6a8 R11: 0001c9000f7df6a8 R12: ffff88811aceca28 [ 45.053398][ T3859] R13: ffffffff86fc3b10 R14: ffff88811acec9e0 R15: 0000000000000001 [ 45.061528][ T3859] FS: 00007f01184976c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 45.071466][ T3859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.078218][ T3859] CR2: 00007f427a1c3ff8 CR3: 000000011b9fa000 CR4: 00000000003506f0 [ 45.086320][ T3859] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.094400][ T3859] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 45.103247][ T3859] Call Trace: [ 45.106644][ T3859] [ 45.109653][ T3859] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 45.115764][ T3859] ? errseq_check+0x2c/0x50 [ 45.120449][ T3859] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 45.125982][ T3859] ? ext4_truncate+0x92b/0xad0 [ 45.131597][ T3859] ext4_evict_inode+0xa1f/0xd40 [ 45.136570][ T3859] ? __pfx_ext4_evict_inode+0x10/0x10 [ 45.142095][ T3859] evict+0x2af/0x510 [ 45.146110][ T3859] ? __dquot_initialize+0x146/0x7c0 [ 45.151427][ T3859] iput+0x4b9/0x650 [ 45.155299][ T3859] ext4_process_orphan+0x1a9/0x1c0 [ 45.161317][ T3859] ext4_orphan_cleanup+0x6a8/0xa00 [ 45.166582][ T3859] ext4_fill_super+0x3476/0x3800 [ 45.171591][ T3859] ? set_blocksize+0x1a3/0x310 [ 45.176479][ T3859] ? setup_bdev_super+0x30e/0x370 [ 45.181564][ T3859] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.187696][ T3859] get_tree_bdev_flags+0x291/0x300 [ 45.192900][ T3859] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.198288][ T3859] get_tree_bdev+0x1f/0x30 [ 45.202828][ T3859] ext4_get_tree+0x1c/0x30 [ 45.207413][ T3859] vfs_get_tree+0x57/0x1d0 [ 45.211912][ T3859] do_new_mount+0x288/0x700 [ 45.217331][ T3859] path_mount+0x4d0/0xbc0 [ 45.221723][ T3859] ? user_path_at+0xbf/0x130 [ 45.227229][ T3859] __se_sys_mount+0x28c/0x2e0 [ 45.232076][ T3859] __x64_sys_mount+0x67/0x80 [ 45.236851][ T3859] x64_sys_call+0x2cca/0x3000 [ 45.241579][ T3859] do_syscall_64+0xc0/0x2a0 [ 45.246163][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.253016][ T3859] RIP: 0033:0x7f0119a3c14a [ 45.258245][ T3859] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.278869][ T3859] RSP: 002b:00007f0118496e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.287603][ T3859] RAX: ffffffffffffffda RBX: 00007f0118496ee0 RCX: 00007f0119a3c14a [ 45.296704][ T3859] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007f0118496ea0 [ 45.304718][ T3859] RBP: 0000200000000180 R08: 00007f0118496ee0 R09: 0000000000800700 [ 45.313615][ T3859] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 45.317539][ T3929] loop4: detected capacity change from 0 to 512 [ 45.323091][ T3859] R13: 00007f0118496ea0 R14: 000000000000046f R15: 000000000000002c [ 45.334589][ T3929] EXT4-fs: Ignoring removed i_version option [ 45.336072][ T3859] [ 45.342185][ T3929] EXT4-fs: Ignoring removed bh option [ 45.352140][ T3859] ---[ end trace 0000000000000000 ]--- [ 45.361021][ T3859] EXT4-fs (loop0): 1 orphan inode deleted [ 45.368073][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.405352][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.418996][ T3929] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.568440][ T3939] IPVS: set_ctl: invalid protocol: 42 172.20.20.64:20001 [ 45.671099][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.722531][ T3947] random: crng reseeded on system resumption [ 45.755866][ T3944] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 45.767671][ T3944] lo speed is unknown, defaulting to 1000 [ 45.773511][ T3944] lo speed is unknown, defaulting to 1000 [ 45.774130][ T3944] lo speed is unknown, defaulting to 1000 [ 45.790045][ T3944] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.791428][ T3944] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.808964][ T3944] lo speed is unknown, defaulting to 1000 [ 45.826054][ T3944] lo speed is unknown, defaulting to 1000 [ 45.832780][ T3944] lo speed is unknown, defaulting to 1000 [ 45.842770][ T3947] loop3: detected capacity change from 0 to 512 [ 45.846326][ T3944] lo speed is unknown, defaulting to 1000 [ 45.864163][ T3947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.872508][ T3944] lo speed is unknown, defaulting to 1000 [ 45.884600][ T3956] __nla_validate_parse: 8 callbacks suppressed [ 45.884618][ T3956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.138'. [ 45.902640][ T3956] lo speed is unknown, defaulting to 1000 [ 45.948113][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.074427][ T3966] SELinux: Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped). [ 46.244294][ T3970] lo speed is unknown, defaulting to 1000 [ 46.577473][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.728186][ T3987] random: crng reseeded on system resumption [ 46.745158][ T3987] loop4: detected capacity change from 0 to 512 [ 46.801232][ T3985] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.832877][ T3987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.882678][ T3987] Restarting kernel threads ... [ 46.941168][ T3987] Done restarting kernel threads. [ 46.979170][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.992569][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 47.055637][ T4014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 47.064864][ T4014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4014 comm=syz.2.159 [ 47.117182][ T3920] Bluetooth: hci0: command 0x1003 tx timeout [ 47.117216][ T3661] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.151884][ T4023] binfmt_misc: register: failed to install interpreter file ./file0 [ 47.290549][ T4045] random: crng reseeded on system resumption [ 47.309396][ T4045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.326692][ T4045] Restarting kernel threads ... [ 47.331725][ T4045] Done restarting kernel threads. [ 47.369739][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.409597][ T4050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.429078][ T4050] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.491263][ T4054] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=4054 comm=syz.2.170 [ 47.518865][ T4057] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.169: Freeing blocks not in datazone - block = 0, count = 16 [ 47.553452][ T31] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 47.569578][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.581892][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.581892][ T31] [ 47.591728][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 47.598405][ T31] EXT4-fs (loop1): Free/Dirty block details [ 47.604314][ T31] EXT4-fs (loop1): free_blocks=16 [ 47.609405][ T31] EXT4-fs (loop1): dirty_blocks=16 [ 47.614591][ T31] EXT4-fs (loop1): Block reservation details [ 47.620779][ T31] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 47.624062][ T4061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'. [ 47.637883][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.670091][ T4063] batadv_slave_1: entered promiscuous mode [ 47.691088][ T4065] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.717189][ T4065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 47.732899][ T4069] netlink: 'syz.0.173': attribute type 4 has an invalid length. [ 47.748334][ T4065] System zones: 1-12 [ 47.752893][ T4065] EXT4-fs (loop1): 1 truncate cleaned up [ 47.763494][ T4065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.778139][ T4063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 47.787088][ T4063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.810001][ T4063] batadv_slave_1 (unregistering): left promiscuous mode [ 47.837956][ T4063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.947000][ T4078] mmap: syz.3.177 (4078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.985884][ T4084] random: crng reseeded on system resumption [ 48.007287][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.071493][ T4084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.100884][ T4081] lo speed is unknown, defaulting to 1000 [ 48.123942][ T4079] iso9660: Unknown parameter 'overridC۝Am' [ 48.133771][ T4084] Restarting kernel threads ... [ 48.151202][ T4084] Done restarting kernel threads. [ 48.192060][ T4090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.261875][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.288101][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.298712][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.547402][ T4101] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.788430][ T3312] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 48.796308][ T3312] FAT-fs (loop1): Filesystem has been set read-only [ 48.892758][ T3312] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.904495][ T4122] random: crng reseeded on system resumption [ 48.918627][ T4122] set_capacity_and_notify: 11 callbacks suppressed [ 48.918644][ T4122] loop0: detected capacity change from 0 to 512 [ 48.958938][ T4122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.974214][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.989824][ T4122] Restarting kernel threads ... [ 49.007420][ T4122] Done restarting kernel threads. [ 49.100752][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.112217][ T4137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4137 comm=syz.3.197 [ 49.149221][ T3441] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.171223][ T4141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=4141 comm=syz.3.197 [ 49.235473][ T3441] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.282327][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 49.282357][ T29] audit: type=1400 audit(1770015002.141:703): avc: denied { getopt } for pid=4116 comm="syz.4.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.343630][ T4153] loop0: detected capacity change from 0 to 512 [ 49.353370][ T3441] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.394822][ T4153] EXT4-fs: Ignoring removed i_version option [ 49.400925][ T4153] EXT4-fs: Ignoring removed bh option [ 49.423332][ T3441] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.438740][ T29] audit: type=1400 audit(1770015002.301:704): avc: denied { associate } for pid=4168 comm="syz.3.204" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.456070][ T4153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.536852][ T4153] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.624764][ T4152] lo speed is unknown, defaulting to 1000 [ 49.633198][ T3441] bridge_slave_1: left allmulticast mode [ 49.633233][ T3441] bridge_slave_1: left promiscuous mode [ 49.633329][ T3441] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.635282][ T3441] bridge_slave_0: left allmulticast mode [ 49.635302][ T3441] bridge_slave_0: left promiscuous mode [ 49.635391][ T3441] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.771174][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.800557][ T29] audit: type=1326 audit(1770015002.651:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 49.823968][ T29] audit: type=1326 audit(1770015002.651:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 49.848004][ T29] audit: type=1326 audit(1770015002.651:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 49.871298][ T29] audit: type=1326 audit(1770015002.661:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 49.895359][ T29] audit: type=1326 audit(1770015002.661:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 49.919499][ T29] audit: type=1326 audit(1770015002.661:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 49.942855][ T29] audit: type=1326 audit(1770015002.661:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 49.966979][ T29] audit: type=1326 audit(1770015002.661:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4201 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0119a3aeb9 code=0x7ffc0000 [ 50.011314][ T3441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.028548][ T3441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.051134][ T4208] loop0: detected capacity change from 0 to 512 [ 50.054319][ T3441] bond0 (unregistering): Released all slaves [ 50.073033][ T4208] EXT4-fs (loop0): failed to initialize system zone (-117) [ 50.081341][ T4208] EXT4-fs (loop0): mount failed [ 50.099731][ T4184] lo speed is unknown, defaulting to 1000 [ 50.186499][ T4208] lo speed is unknown, defaulting to 1000 [ 50.213553][ T3441] hsr_slave_0: left promiscuous mode [ 50.223966][ T3441] hsr_slave_1: left promiscuous mode [ 50.235883][ T3441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.244395][ T3441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.262087][ T3441] veth1_macvtap: left promiscuous mode [ 50.268559][ T3441] veth0_macvtap: left promiscuous mode [ 50.330023][ T4226] netlink: 'syz.4.218': attribute type 6 has an invalid length. [ 50.341410][ T4227] netlink: 'syz.4.218': attribute type 6 has an invalid length. [ 50.352602][ T3441] team0 (unregistering): Port device team_slave_1 removed [ 50.363730][ T4228] usb usb8: usbfs: process 4228 (syz.0.213) did not claim interface 0 before use [ 50.363808][ T3441] team0 (unregistering): Port device team_slave_0 removed [ 50.574171][ T4247] loop0: detected capacity change from 0 to 512 [ 50.588669][ T4246] FAULT_INJECTION: forcing a failure. [ 50.588669][ T4246] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.602609][ T4246] CPU: 0 UID: 0 PID: 4246 Comm: syz.4.222 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 50.602724][ T4246] Tainted: [W]=WARN [ 50.602734][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.602756][ T4246] Call Trace: [ 50.602774][ T4246] [ 50.602785][ T4246] __dump_stack+0x1d/0x30 [ 50.602823][ T4246] dump_stack_lvl+0x95/0xd0 [ 50.602853][ T4246] dump_stack+0x15/0x1b [ 50.602879][ T4246] should_fail_ex+0x263/0x280 [ 50.602922][ T4246] should_fail+0xb/0x20 [ 50.603026][ T4246] should_fail_usercopy+0x1a/0x20 [ 50.603102][ T4246] _copy_from_user+0x1c/0xb0 [ 50.603125][ T4246] __sys_bpf+0x183/0x7b0 [ 50.603167][ T4246] __x64_sys_bpf+0x41/0x50 [ 50.603261][ T4246] x64_sys_call+0x28e1/0x3000 [ 50.603340][ T4246] do_syscall_64+0xc0/0x2a0 [ 50.603382][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.603412][ T4246] RIP: 0033:0x7f2981c6aeb9 [ 50.603507][ T4246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.603531][ T4246] RSP: 002b:00007f29806c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.603557][ T4246] RAX: ffffffffffffffda RBX: 00007f2981ee5fa0 RCX: 00007f2981c6aeb9 [ 50.603576][ T4246] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 50.603593][ T4246] RBP: 00007f29806c7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.603610][ T4246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.603666][ T4246] R13: 00007f2981ee6038 R14: 00007f2981ee5fa0 R15: 00007ffeb1d4ee08 [ 50.603689][ T4246] [ 50.783096][ T4247] EXT4-fs: Ignoring removed i_version option [ 50.789219][ T4247] EXT4-fs: Ignoring removed bh option [ 50.803727][ T4152] chnl_net:caif_netlink_parms(): no params data found [ 50.835213][ T4247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.869170][ T4247] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.893803][ T4270] pimreg: entered allmulticast mode [ 50.939581][ T4270] syzkaller0: entered promiscuous mode [ 50.945161][ T4270] syzkaller0: entered allmulticast mode [ 50.981539][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.997918][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.005073][ T4152] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.056674][ T4152] bridge_slave_0: entered allmulticast mode [ 51.079395][ T4152] bridge_slave_0: entered promiscuous mode [ 51.099417][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.106653][ T4152] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.127293][ T4152] bridge_slave_1: entered allmulticast mode [ 51.137152][ T4152] bridge_slave_1: entered promiscuous mode [ 51.193386][ T4152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.214783][ T4152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.237411][ T4152] team0: Port device team_slave_0 added [ 51.244143][ T4152] team0: Port device team_slave_1 added [ 51.261911][ T4152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.269722][ T4152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.295695][ T4152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.307801][ T4305] loop0: detected capacity change from 0 to 2048 [ 51.314502][ T4305] EXT4-fs: Ignoring removed nobh option [ 51.404218][ T4152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.411327][ T4152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.438145][ T4152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.477826][ T4152] hsr_slave_0: entered promiscuous mode [ 51.484013][ T4152] hsr_slave_1: entered promiscuous mode [ 51.484523][ T4337] loop3: detected capacity change from 0 to 764 [ 51.561987][ T4305] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.227: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 51.599248][ T4305] EXT4-fs (loop0): Remounting filesystem read-only [ 51.605889][ T4305] EXT4-fs (loop0): get root inode failed [ 51.612396][ T4305] EXT4-fs (loop0): mount failed [ 51.719722][ T4367] ================================================================== [ 51.727880][ T4367] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 51.735042][ T4367] [ 51.737403][ T4367] write to 0xffff88811bbe9548 of 8 bytes by task 4365 on cpu 0: [ 51.745073][ T4367] release_task+0x6ef/0xb60 [ 51.749624][ T4367] wait_consider_task+0x1160/0x1670 [ 51.754872][ T4367] __do_wait+0xf9/0x510 [ 51.759074][ T4367] do_wait+0xb6/0x240 [ 51.763094][ T4367] kernel_wait4+0x19f/0x210 [ 51.767650][ T4367] __x64_sys_wait4+0x91/0x120 [ 51.772365][ T4367] x64_sys_call+0x28ec/0x3000 [ 51.777169][ T4367] do_syscall_64+0xc0/0x2a0 [ 51.781706][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.787642][ T4367] [ 51.789997][ T4367] read to 0xffff88811bbe9080 of 3264 bytes by task 4367 on cpu 1: [ 51.797820][ T4367] memcpy_and_pad+0x48/0x80 [ 51.802360][ T4367] arch_dup_task_struct+0x2c/0x40 [ 51.807499][ T4367] dup_task_struct+0x6e/0x940 [ 51.812208][ T4367] copy_process+0x37e/0x1f10 [ 51.816830][ T4367] kernel_clone+0x16b/0x5b0 [ 51.821360][ T4367] __se_sys_clone3+0x1f5/0x230 [ 51.826150][ T4367] __x64_sys_clone3+0x31/0x40 [ 51.830845][ T4367] x64_sys_call+0x2c0f/0x3000 [ 51.835548][ T4367] do_syscall_64+0xc0/0x2a0 [ 51.840104][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.846023][ T4367] [ 51.848367][ T4367] Reported by Kernel Concurrency Sanitizer on: [ 51.854546][ T4367] CPU: 1 UID: 0 PID: 4367 Comm: syz.0.231 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.865777][ T4367] Tainted: [W]=WARN [ 51.869599][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.879684][ T4367] ================================================================== [ 51.909320][ T4152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 51.929666][ T4152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.943019][ T4370] syzkaller0: entered promiscuous mode [ 51.948663][ T4370] syzkaller0: entered allmulticast mode [ 51.956464][ T4152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.977448][ T4152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.047387][ T4152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.070302][ T4152] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.084742][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.091861][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.101364][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.108501][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.195973][ T4152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.358062][ T4152] veth0_vlan: entered promiscuous mode [ 52.366162][ T4152] veth1_vlan: entered promiscuous mode [ 52.383532][ T4152] veth0_macvtap: entered promiscuous mode [ 52.398316][ T4152] veth1_macvtap: entered promiscuous mode [ 52.409438][ T4152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.421766][ T4152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.432466][ T4342] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.441742][ T4342] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.454322][ T4342] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.464141][ T4342] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0