last executing test programs: 11.144384146s ago: executing program 2 (id=49): io_setup(0xbf3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x8000023, 0x0, &(0x7f00000001c0), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={&(0x7f00000002c0), 0x8}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x2d1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x5]}, 0x8, 0x80800) epoll_pwait(r2, &(0x7f0000000d80)=[{}, {}], 0x2, 0x401, &(0x7f0000000e00)={[0x3]}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11c, 0x11c, 0x8, [@fwd={0x5}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x2}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @var={0xd, 0x0, 0x0, 0xe, 0x5}, @union={0x1, 0x5, 0x0, 0x5, 0x0, 0x9, [{0xd, 0x5, 0x1ff}, {0x5, 0x3, 0x3}, {0x2, 0x3, 0x6}, {0x4, 0x2, 0x2}, {0x1, 0x4}]}, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0xb, [{0xd, 0x2, 0x81}, {0xb, 0x2, 0xe8}, {0x4, 0x5}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @struct={0x4, 0x7, 0x0, 0x4, 0x0, 0x6, [{0x9, 0x2, 0x4}, {0x4, 0x2, 0x9}, {0xc, 0x0, 0xfffffb56}, {0x0, 0x4, 0x2}, {0xa, 0x0, 0x9}, {0x0, 0x1, 0x6}, {0x4, 0x1, 0x800}]}]}, {0x0, [0x0, 0x2e, 0x2e, 0x61, 0x2e, 0x0]}}, &(0x7f0000000500)=""/58, 0x13c, 0x3a, 0x1, 0x6}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) write$tun(r10, 0x0, 0x2e) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c40)={0x0, 0x1000, 0x8}, 0xc) r13 = syz_open_procfs(0x0, &(0x7f0000000dc0)='net/udp6\x00') r14 = socket(0x1e, 0x1, 0x0) getsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) writev(r13, 0x0, 0x0) sync_file_range(r13, 0x5, 0x3, 0x3) r15 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1b, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ldst={0x3, 0x1, 0x4, 0x0, 0x7, 0x40, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff}, @jmp={0x5, 0x1, 0x9, 0x5, 0x3, 0x10, 0xffffffffffffffff}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x8, 0x6, 0xa, 0x7fff, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x4a, &(0x7f0000000340)=""/74, 0x0, 0x4, '\x00', r5, @fallback=0x11, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x3, 0x1, 0x0, 0x8}, 0x10, 0x0, r10, 0x0, &(0x7f0000000c80)=[r11, r12, 0xffffffffffffffff, r13, r15], 0x0, 0x10, 0x8}, 0x94) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") 10.76383171s ago: executing program 2 (id=55): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4800) 10.677283154s ago: executing program 2 (id=59): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000001440)={0x60, 0x2, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0xe, &(0x7f0000001380)=[{0x0, 0xcd71, 0x3ff}, {0x6, 0x4, 0x200}, {0xfffffffffffffffd, 0xbc9, 0x200}, {0xfffffffffffffff7, 0x2, 0x56}, {0x5, 0x8001, 0x7}, {0x5, 0x7, 0x7f}, {0x3, 0x7, 0x3}], 0x7, 0x2b35, 0x1c, 0x66, 0x1, 0x9}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.534631308s ago: executing program 2 (id=60): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x150, r0, 0x5, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xfb, 0xc5, "789a6b971e4d3e06ffb280093889304f4639c067a6a8f7e5631145ed81829d36adeeb48cc58705a6cacc0092444b0c3dfbc5b6121e429ef96c5134de92b27a70189b9fd4f0e3b307f586ff0fb7c1da4651b288f88df8d64e1eb976b0fc6001cd0b741eb26727bbb06464c567394e67264650851a31d4293b0c4b73f28c9ad46b1feda66407c9af579668042b9e28de606d036ae2da8342869f2ca2e3397f6b15d0fb4a76dbb81b0dd082f25705645ef3cb1b2aa44ab5292a215a8f02d6916b50fb0321754e10304695c3c2c111e025cab719690ffa035142f29a86789155ea3112e005fbc397eb6e46e01433dd686f5c904b4bf5300eaf"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xd}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989c56, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 10.137346175s ago: executing program 2 (id=62): clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x800000000000008, 0x9, 0x1, 0x2c43, 0x9fe, 0x2800000000000, 0x0, 0x8006, 0x5, 0x2902, 0x20, 0x800ffffffff, 0x8, 0x0, 0x8000000000000a00, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, 0x1ff}) 7.706067481s ago: executing program 2 (id=90): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=ANY=[@ANYBLOB="600000000206010802000000000000000200000005000500020000000900020073797a300000000005000100070000001400078008000840000000d30800064000000000050004000000000011000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 7.587593021s ago: executing program 32 (id=90): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)=ANY=[@ANYBLOB="600000000206010802000000000000000200000005000500020000000900020073797a300000000005000100070000001400078008000840000000d30800064000000000050004000000000011000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 2.306865014s ago: executing program 5 (id=91): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) (fail_nth: 1) 2.306616014s ago: executing program 5 (id=137): mmap$xdp(&(0x7f0000e5d000/0x1000)=nil, 0x1000, 0x2000005, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="831026bd7000fcdbdf25160000000c000180140002006e657464657673696d300000000021000500040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000440), 0x2}, 0x4000, 0x1000, 0x800000, 0x8, 0xe0000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0xc, 0x6, "bc3090", 0x10, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x7, 0x1000, 0x1000000000000a}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x4858080, &(0x7f00000002c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72742d912015b4244c916e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac868155689f58dcc0a0000fde385a44088a9c4ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=r5], 0x3, 0x232, &(0x7f0000000640)="$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") r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 1.862363258s ago: executing program 3 (id=140): creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='tran.=rdma,') 1.793894759s ago: executing program 3 (id=141): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0x4e21, 0x898, @remote, 0x8001}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000080)}, {&(0x7f0000000240)="cc09652ca6371dbf4d81a5f1dd505b26e099462bc9b1214796cf1e75d5225c8374a1394548aacb0da8676d4fc3175e6a61fb52d02263b2614a2194fe8cc578ee9fd7660e27dbf5f69836142a6aa8832ea0629fd38b00e7d4895bdd0bccc32ae900e3447c177a83a401ce303eb45e1cbf508642312c233493faae101998d85df0cc9d4ceed572a220ebaea804de1dbcc7d3da7fcc6ae907596802c5ff7e5a880716c5c08d679ef6d9dd", 0xa9}, {&(0x7f0000000400)="c1e1cc4e6d0e279e7a931ca35bfd25aac1bf75c70f9be39dfdc03a9df9c7d66994489a2708458c525923a3140999562a92b3667a4a0f72ac0028a7c492f18f50331630db222ffeb142887979dccccb3d402aca75a143f334ff8ffbef7429356f4342399b8caf6166ff332975ec31f104371c3ad3242e6c173a61ee3dca674776060d9b054bc4c12f5f15ec", 0x8b}, {&(0x7f00000007c0)="2a05ef9e165229394b269ebe904e84879cf663b880b94caf060cd0151b6f89b76a2e41828333c0f7e58402c7cdb96b6eaf5ba1ba050d54d9451063015c1633ac05428f1bda7b07ab260cee71ba25b063e472fb7534bbdc0791c9a889f5e5ee33e0f8d0fcce0ff2d3b57588301576c942ba86e2d99812f62c1954bb32100b67b3ca677082359835a597618c513454f22b103e5b50446ad9a46297c87f178c38738491dab43a8008af9320c55ff81afd703d14bb30eefa5e3ccd84a1e057c936587ecfaf43c7d0b131f678eaaffcf30ccbef91d343c03e34d45c171da99ceb928771d9a1e7b163bc8c1efa38213dc7244cb3174fd37545da76eab813622a7102e35db2302a0760310923872fc73f606b0d1abc3cecccba0b29b53f010e2a369ec12c3f1034614dc3b2dbac43eed468f12fa9487f9ca964cc0622af35230f638889e4857dfd3e79af8d1e8dbb2e0f057ea0fcc859ed853c775a7c496fa0d20446446271387364d3924216b9a59e808d1b025e4ba1542a6f7191a741756f049fd1a64e864a0cc399f63aa930cf3ed611da97f27fc58d41851f78d7c384c0e52e030344a817b9401007259338096b9f023be17862ae977c0d5b887bfd0accb9601cc36fbb6e433805c01fc9352398ba3468a9e43fb07b9235ded9d0710b075357f13176b050490bd0da17715ad7574696b369f106213b0fb9a848de771edc3546607a7646cbb64dbf554c22ebe1bb26bd63913390c960062a8f2fbb6510a9401b2c374a5ae707626dfeff5eb5cefdfe9e60d3306f8249cfedfd2518dbe06c64c099e234e065b96fcd92391e5c102460d9cbd0ffea931903893e70bd7ea2a7efbad3a8a6eb677040af76c2801a0700ee578be33bc529b92cb083994fe7cec00e0a458631a0ce2588eb665616a90943286f0d8101ef414f1a18723b4b0c312c540abee0da829aa00849314585c5343fe69592e876401e4b751c1899ee3bc2ff508d361cd9495f7da66fe010fd042e1f4382a3d74a519507562e32d974856733a321e8321054c1e514c8da763a5cc33f5c46830170d20194b3e4743daf3ad9efe37f0937faccba5bbb17693c69a4d616f633b79d8f3177bab0acfc23d0c4cb38845c16e160e2d49130b75b86a8a6150c9d4ce71cc81e9ea84596415a167b5e6be89026d1acd15734ad8c791b1f50fd1d34880c4dfa83b3daff49437df131bf3b9662bc288330159b79349361f8ed45e2085bc7ed65e3d7332b4cd82c02822931378d19b7224cf98a07f0625f4692d6a228ff39eeceb13c778a54f188054bcd18a6b1f8f1077fed80c9caa691c9063a4131d2abbaa8347020dd80a4ad8ff56607432ddaf459afb4821e075f2f5294d9428d6c9094677b9d8aed17008752737432be1429f25e945e59a04c69db0a43c33e447db9dbb1d6e1036b3340b13abe1da86e5f49c8aa878b41a5bb090775b8a579f11f60829aa963376916a0e43a7371907713f72659fe75afc071ccc658f35c856dec06fa20115e67c60f912cf8b4ad68648e7d5dcd1868a97820aeb3b4eed2a4019bfa18d7ce0d66ed55d558933d2c326494038293c539019954966668d3ede5f9f9f4efb84c901bc509644ec6089685fe359212484cea3aa0294b37e1d07f27d097614927a595c97805157a3a26ff3a63c2e16ecf336aac441d8e0fe5166f2df17281f8dc9a98f00a073b630f6cae2afb047b51a510a5b0cf534324c797f5555fcf1016b98368e033a1a1ae172054e74cd2f2c23435a02575546e16315bb69ca1cc962be1a0e479711287b4e73b6f1849025d935d4b77ea4d9c79c5776ffd033e0048bf08c8d2015ebe54f84337b8f506273b3acbf92709a649279de96892b4121aeb4278ef06cbddf24b404bc02600a7561f164ee2f7722fa186cb88bbf40aaee88fee30cead1b8dec5d5ded8eddb6230bd3f4e4922ac87e56923efd6a5323661b3292b40a80eaad9678662a340b71420fda55d18ddec1d321900cf4dc1533d2e6515b31e6f430d0e28462b23f3c67b8f6690e1b7ed94256f22134cb374333c26f0fdbf1830d69f6889a8041a4510590ad9a0428f13512259d683350544eb685c3f2e0357d43d0fda77f45a7f1c82de278873362b30e70d09500e741edc37de786c0c17371ac2b7a67dd7462fe735d4e99bd9daacf20ad4317a451bb227da0ebf4bc06c7ce6b546af14908bade77413118f4a16fbd4bf109bdeda78c1c79456297bca2b569831421a7d17a105d9a51c93b0c49d7d648a61746ce55840eff6b7e6031d1ed30e662a56f52c08aa564626af8b03a75bb1053d797f4d2169207cfd5838d6d9e48ca93df1e3bccb16efaca375e428c9129b9405b795cd05a87ba785e4809fb662ff4a4d1644d88c0a24579c250441e7399906c507e96385185e33d03b30e41dc28e4c7982b4bb471f86aa7c7c6f2a3a12b84a7be8cef02532e8a4aff859c5351b90cfb1c89eb2f3be7da4deb18d63a2c1fb8e4f949df6116261998c543c2aed9f77d8675e6103b0d4027263fc8f490f5de1ef1480876c28ad22c65cfcf929a3743bf2ab47e7bb3bd694c79a5664662166c7f3ba8ad16119fb033d611412fae24d79d7e92aa6c04c8e104c618555af1d7568ef96890be03d5c6fa3c1d6066eee9bb4fbab99ffbb691f327486ddcf38f1d651a34fe1e35ca2f88a9a262b2b8b90247bd6e112b8f370ace880ef611be5966c55270dc07bb253544230ce522a0ba7b97f49733a6baa791818861ce7e5f58dd5da123455730d644b4acf461523e74ed21b51d59addc84c72e3c0749d6a7f3d306f1631e2a69481ec51bd1c3fa58a7ad2215313e36f319365ea0cc59d9da6ee02f7be01cad95df0b511bad333d730821214f88c77dac91a0528ed28f2e52de2cb23ad378961adb735074ea964fa4e6130348147ae288b867dbd8bd1269d4ba8b6d56e4c71cb2cc080c1fd23d97467be05a3d7ce228f3bd0368de164f9875916233486e139391adf18b5feb4dd816ce628482096046042001492348d6dbfd11be096893d25df0b6d80e94123c2ae2bb5d89ba84264826efa8a7cadabb575327764e38c62cfed31c548414eba6b3b373c2ead97418ae81cc82cf95ec48f26c7891c33d0bde01fc3eb690ec06c1004f4d88c4c047939817ba7ba91616ec128cb32ffd748cb54d80f217cefe128bd744453b9d99d1815af71bb6188f532f0586e9d0676271ab9a074da1f1d7ff1463d4419ed5d44c456a36568151caddfd775be7a2b18da0075db6fd17849091859e702e07117ad2fec34a8cd3ddf83cb088f2461297ab07a169e5dce6f226d742afbc26749868726eb24beeb3e2590bea13d2739b983e36c6c18909e41c01a35a12474e89dfb9bd5523cf9eed19b29eb442680cac8075ca12d7088ef32eaef317687535547d331c124d11ae1f25883a78838df927dcc462323d5ac6a0dc7edb1cea0578ff14cccb7098039bfe584b2c4000a48bca51e44204d6b157937c0cb24daee05533e17df7abd9b78d32ddd95ae2b48f6cb2a2f8be65c8634743254c79c8a5cc8ffbed6c85b845858ac19fddf4234930aa0b8e0e76d93d7f2c5fda257576d0c00181c5ff9518654198cf2952a57d74bcb29f3ff919a375407b0b2d452c2f3ceb490857cfe74de3e17d2c538bd9682c914335f87599fd680b6951efaebb360930a06827c9e93e94831c3a87be80b11d1e9d55ef7885200492573fcf908d485d1cf394eb2105b47253295b72ee90d2acf07400c3b332546fff42ef620448ee59297b0ff495efac9b8f706acbebc05cec2300a3aa62fb39c51a19ba3ff8c5d1befe6e546559a78a25fa5d2e7ef2cd73917c68ab4783e05f0145f4275d44980557ce06104c5b448908f7b3a0b7c4e28e4abf9f5f9b754f559b8f909bc7ef1585c570edf56c271f068cb80cee0dff07d01ccc43dd34b398848c62d90ed58b83a7d7bcf395e50226255a0a01fcf5c76d67e24852c5bfd1dd9614a4f729bb3013a6ccc144775f868cb2bb30bc242143323fbcf01b467de48534ced5f84c2a6516b0ac72cde1cfcaf7f3f484c282e143dec1bcf30008cb99748345e2240d1186d3e4865ebc73293bbeef565a13a80aac8e04a345bea5218b28636b706baeeb04732e42daf7857b96b1f59ffbd31fe89eb4d1e09f3b13bafc36599277766290a32e70191298990b1dd1ad85b3cefc144ae2d9a3319906939b1f69132fdf7930224ddfbbdf05476505d8042ea0330ed9fcf8db6d637b8785176d1b9196ebe14eaadc4a0380141c92b8879d6649afb52301679812bf98cabace5a5c605258e86ce81cf2d695cc58aa002331872760315901cb834b6387457a2806fdd7b29d7e08a8141b48377c3342b67cb64da1d6d4021612c8363973e7701dec55150273e1719b0cd70c4bec08b3029dcaba599798291f895fe1577d5bf045a3347220e49da756b9af81be74c60760b1dac5deb14e5fb70447a038fdfc6c43de3330d16541ee36dccaf0ed4d167508d90b44e99cbe39c56ca0c08610f0fb14931a01094dc2cea3d4be01800863dca43acbdcaeb2fd2110544b8eb7688712903dd540dcf39d8ca29240f597c68528995092bc3d8b5168c0f4f9d02fe0c9fa975a48047090951222ea5104e9726f1c75c408ab0201b6cd0f07c96e0423bf7f8df14cb77f04efade9d226978013fd2361588057be81d7db3a5cad6e3e4013db8b5f25767c4ebe76f20623525273d4a1beb10ff58a525442ea365fdbe79617a9920b1746dd3d9dc4189bd838232fe00f8f24780d21f180e1786b28a44f2920bb4c87292c93686c23adc7601cd5ed625e176bfe3f741cd96414bd9bf8d4833397e5f7c57ebd086d7e735dd108e5af5c83f9f59963edf58785207698ba0b33cbfbfa3da7e13d35c724507519138d68dfbaf207879fc48b2e05ad6591b10289d3fc51277fae00bbc484f4f4daa94b2a91c3d08093305485fd4a1aa73685b43ce71050fcbb0228eb7756dcef37d4c7b55b5fac8df943d7907834c7f4cbf040fd2d6b53ce56802164915afc7f20db069d2fdc513b7600867b193990c276583187a79843ca6caf3637b1f9281a178c7486a619b48f8ec6aa8a28bb6ece7486cddaf8eb0eda42a6e06ca0fe1e3539dff00429d0302f7261f693619e2bb1ae97d0ede9ae69eb85cb660a5e68fe6b42bd70a7d321de7d0e508dc5c16eef3013c3a41a678a651442b0dcf22481783005d37408c5ea139c456754920a83913c930a7ccc1f7a6f4e0b9cd6cf662392f882e4a713e7ce98c4f70079d55fe6adb0577190e958255e277aa883613284bf5de74f26c89133ad2bed5e5f4f1b7b883c9513a74797d5a103b1659595743426e49723d3cab1f0e95c41a49fe6253cc27cafbee4b8b06ff2c78f0290995f1c0985f54cf9a3d9d1a61faa05321f86a2ae470ed8438eb0c01a267c53f32307bbccd1b80d1eb6b040e8d587a93a88a072ee22ea466c3d813d73fc93ff56409c4ba6bfd25ef93df76eaf178645a7963aaf05e7a33e03af84b7c27de7f166e5414a7152492fabce114b07ea43434d3ee699c5abd981fe84835e8104f48a9f4c3bb4751283653678bc263b7409cc0230350fb8d70cec6a8cb158f62be223a4f256231f6975b73a5cdcaf9ee85c2d8e57b1df8eba9dd10dc7cf3355c1f18b68e5f90dad0ecd2c5ef3486f905c66efc55cc647425b55bbd2595f762b73aaaa66cdcd8fd959457ac303ca90cb3b679e5b1d1b95aabf9fa2579ec6ab2e913e7eda670b75b2dc8f3d26c373a2777a66538dbf9f0c829a36f8d5cc", 0x1000}], 0x4, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x3d8}, 0x8000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x2, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0xb, @mcast2, 0x80000001}}}, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180040ad1aed19e5e18c00", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = syz_open_dev$vcsa(&(0x7f0000000300), 0x101, 0x500) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f00000004c0)={0x5d, "d7037ceefa76a2b8d8f8638ea83399629ec507379c887c9125693fa5b387959c9915266939c7a9c54e3c7ae36c758191e63204b9cca5b6ad07ed47f28ddcd2fd"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.752933907s ago: executing program 4 (id=143): r0 = open(&(0x7f0000000080)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x2, 0x3, 0x2, 0xff, "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", 0x2, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fgetxattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)=""/213, 0xd5) fcntl$setown(r0, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.752612737s ago: executing program 4 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/251, 0xfb}, {0x0}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x2c, 0x3, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x21, 0x10, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000", @ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.702056365s ago: executing program 3 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0xfffd, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) 1.700330026s ago: executing program 3 (id=146): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x74373, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0xfd, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.589300044s ago: executing program 3 (id=148): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe2$9p(&(0x7f0000000000), 0x80800) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$eJzs3E9sFFUcAODfbLe0hSIVEaWiFtHYaGyhoHAwMRhNPGhixIMem7YQZKGmrYkQAkti8GhIvBrj0asHr2q8GE4mXvFoYkiI4QJ4WjO7s+12O136Z9tK+33Jsu/NvJn33r55s2/eYxvAljWQ/pNE9EbEzYjYFRGF5gQDtbd7dy6N3b9zaSzKlcrJf5L0sLibxjNJ9r4jiwwWIgpfJHM7GkxfuHh2tFSamMriwzPnPh2evnDxlTPnRk9PnJ44P3L8+NEjh4+9NvLq8iuVk19ar7v9lyf373vn4+vvjRXr27uz98Z6tMtADOQVpeqFdme2wXY2hJNiq5RvrH1hWLL0+k+bq7Pa/3dFR7RsPGATqVQqla4s3Llwd7nS7OqCLcBDK4mNLgGwMepf9Onzb/2VN07YtnZDkA11+0TtASit973sFfFsdWN9HqSz6fm2nQaiGB+V//02faXx4hrMQwAANPr5RH0k2DT+64vY25DukWwNpS8iHo2I3RHxWETsiYjHo5b2iYh4sun8HRFRaZH/QFN84fizcGt1NWwtHf+9nq1tzY3/onEVrK8ji+2MqA+YJw5ln8lgdHadOlOaONwij1/e+uOrxfal9a+P/9JXmn99LJiV41axa/4x46MzoyuucJPbVyP6i831T4oRyexKQBIR+yKi/9dvlnzevobwmZe+3z8baZpkfHD9qyq562htWKqofBfxYq39yzGv/edyTFqvTw53R2ni0HB6FRzKzePG79fez9ueLKX+P/7VfNjbx346mfWs1Uvbf3vD9R/19du5+vclEcnseu30Iie6snge1/78ctFnmpVe/9uSD3ui4bn089GZmanDEduSd2PB9pHZZd56vPoe5Vr9Bw/m9//d2THpJ/FURKQX8dMR8UzUnhAHonLlQEQ8FxEHF69+/Pbm85+svP5rK63/eO79b177z63Xp4F069S8LaOlpFxLPbdlNtBx9sDN+/35+S+t/Y9WQ4PZlvz7XzLvFrGwFPmBVX58AAAA8FAoRERvw1xSbxQKQ0O1OaA9sb1QmpyeeTmZ/Oz8eO03An0NaWvzwZ1Jff6zryE+0hQ/ks0bf93RU40PjU2WxjeozkDNjmqfTwpDs/eCWv9P/d2eKWbg/8xPfmDrelD/33t9nQoCrDvf/7BVTV1uiJQXSVT2P2Vgc1rK97+5QNic8vp/i//P7YEBNomK7gxb2nL6//y0N3a1vTDAuirGB7PhwoaWBFhvxv+wJS3pR/IrDlS68nd1x8LE0d36hB2xsmL05OS1IYF0ZLXK89RbbXlH9eTuKrY+qv7XFBZNE4XlFb5r7k9GJKtp01Orb4vTe9t98XdWsvWxdl82P6xJP31g454dLbW+b4z0tv1WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCb+CwAA//+0FNMg") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r2, &(0x7f0000000280)=""/237, 0xed) 1.48999903s ago: executing program 1 (id=149): memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r0 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0xc0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$eJzs3M9OG0ccwPFZMCp1JVQpaiCEw6TpgR7i7C7FyMppux6bSdY7q5l1BKcqKhChQlo1qdRwKhfaSu1D5NqH6BtFfYRWu2un/HcKCU6j70eCGXt/O/ObxZqRF80KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgvLjt+4EnEp321+TZ4rY1vXOOD9v79EhxTr9CeMWPmJ4Wc9Vbc9f+PfxJ1chs9WpWTBfFtNj76PrH967ValUTnjgnoSvx9PneN492dja/l3Uhxp7N1euqVDuje1FXSe2MbDWb/t3VjpMdnSi37nLVk7FVUW6sXIw/l0GrtSRVY9300247StTwzZU7oe835f1GpiLrTHr3fsPFqzpJdNotY4rDRcxK8UF8oHOZq6gn5db2zubSqCSLoOB1gkIpa+f+GUM/DIMgDIPmcmt5xfdrJ97wjxEnIsb/ocV4vdH5G7iMvwfrPwAAAAAAeH955T324vv/VHkf3hMdnSh/3GkBAAAAAIA3qPzP/2xRTBW1OeHx/R8AAAAAgPfNL2ftsZsY7tFz2Qfen38Jqz6sAnej4ne0O1m9nDzeYt6Z92YGjZRFszZ4FasF70YVdGMY/XJQbI3Kw7N2ytvP1j7zLp6A+E3MVzHzG1W5MTxS9VLv6EQ1YpPcC0QUzUzkai3/4cn2j0IUvf+a9mY8sbW9s9n4+tudjTKX/aKV/d3BBooT+yjOyeXZq32Pp494qrwRM+i3XvXrHx7/RHX6xH/o80DcrGJu1quyfnT800WfQeOs0Q+yCC458gOxUMUsLN4uituLp2QRjsoiPJzFha7Fa2SxNCoL76fLZQEA47I1YhXyxIl19wKz3NWs7gfiVhVza76cWGvzp8zo/qgZ3b/k6vbHiWcgnLXGFv3+fmxVfVGc8OLMfl0SesUlnHy2+524/vT53p3t3UePNx9vPgnDpab/he8vh2KqHMagYO0BAJxC2ZdePf/Zs1ZnXwWtVhDlq0paEz+QVre7Suo0VzZejdKukpk1uYlNUlQe6rZy0vWzzNhcdoyVmXF6rXzyixw8+sWpXpTmOnZZoiKnZGzSPIpz2dYulln/y0S7VWXLk12mYt3RcZRrk0pn+jZWDSmdUocCdVulue7ooprKzOpeZNflQ5P0e0q2lYutznJTNTjsS6cdY3tls41xX2wAAN4Rr55g9xYr4x4jAAA4ilUaAAAAAAAAAAAAAAAAAAAAAIB331Xs/6NChcr/rTLumQnA2/ZPAAAA//9yAaF0") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$P9_RLERRORu(r0, 0x0, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000240)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) 1.469700724s ago: executing program 0 (id=150): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d00000000000030001280080001006873720024", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.416243543s ago: executing program 0 (id=151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c) 1.383692878s ago: executing program 5 (id=152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x1100}, 0x1c) 1.341030916s ago: executing program 0 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000100010009000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 1.331319577s ago: executing program 3 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2140404}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8b1}, 0x40404) 1.293154313s ago: executing program 5 (id=155): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a20032080203fcebff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000280)="a9b13f6775c936c20ca79c4b00bb56bd604911c194106520f76d4abb954fd2e341eaca48f228f9ca32ad8dc9d9b7947d15f48836b6b01b69b63ecfd0516b5ce2f8427f83c708e3a16b1b4142531f67ce77b04d744081bf9946ff399a1dc563550c354594af4e9f04d3fdd55c200356269d56a0d44e5db8d44cedbe9c874e39bc8e0d88c1754ba4582b50e2f5e9950d4fcd2e488ee111cd1e0a17434c3c410cc5098c011ab99235cf746e69dee5ebefbad74d90a9adf264b6d434298798c9cc45274a301b787c7730e247a56744a9cdb8b219f4960f1a424cb764a139dc1fe3ec999a47eda3dc931c7120e200") setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x5, 0x0, @void}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000240)='syz1\x00', 0x1ff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="05000000050000000200000007000000006c7b061176e35a168fec69029046e35143632bd3f144f96f9cedee53962892f3017c993ff9712d6fbefbfb3dd21642218ed72392093d643ab5d633f8bf5916763c7bc7848f6584724b83a9f1193d3f8fdc000000000000004704dbf8fb85b73f50c197e1ff6fca00000000009ebb96e21ee7848eda9e416e681cd8e4e381e2b4", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB='\x00'/28], 0x50) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000097e37c8dbc4fb10300000085000000050000008520000001000000185500000b0000000000000000000000185b00000700000000000000000000001857000010000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r4}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000500)={0x7, 0x8, 0xfa00, {r8, 0x4734}}, 0x10) close_range(r7, r7, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r9 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x10) 1.241994312s ago: executing program 0 (id=156): socket(0x10, 0x2, 0x0) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x74d240, 0x0) (rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x68}, 0x1, 0x0, 0x0, 0x40884}, 0x800) r1 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async, rerun: 32) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000e40)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="332b9d996a9f", @remote, @remote, @broadcast}}}}, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x9, 0x6}]}) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x16, 0xa1, 0xfa, 0xc}]}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x1000, 0x10, 0x2, 0x7, 0x0, 0x401}, [@TCA_NETEM_DELAY_DIST={0x42, 0x2, "2bb078ed475f21438bdbb540e65e6c9cd9fb5853abab9d78bed4ca6845a3eed06cf584e0b1dacfe46a8d314cf9d293bf94ea88743ca351f75e7aaf0fbdce"}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async, rerun: 64) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x802, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x84, 0x0, 0xfff, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) 1.224761805s ago: executing program 0 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bind(r2, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x4, @local, 'veth0_to_batadv\x00'}}, 0x80) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0xe) r5 = eventfd(0x6) fsetxattr(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="62747266732e5c5d2a00c7c01d4e930cf36aee5b6cdb75fe51f96a5850ebd14795f8800b6308770a7bc1ebeb29732eb38ecc21d6285437f4f36e17f66a8c12d26419dcb0709981666f79ed6833bbfef086d1dcb90f1bb7429a0b845d9b089c3224bd6c7cee52b00d6a5e13aea1be9dac1e159637e71d664bd30b5dbb9973bf83c920faf1ffb0ff48d566e1d21f4d627096f9c54b3e724bb731e34998471228d1275339f8b11028fb85d1cf38fea0bd061168ed0e11533aee39f531ffee05ca6b725f8e391c"], 0x0, 0x0, 0x3) socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x104201, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2000000, 0x0) syz_open_dev$vcsn(&(0x7f0000000200), 0x4, 0x400000) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x0, 0x0, 0x50, 0x67, 0x14, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1, {[@generic={0x44, 0xe, "6d1ae808bbee36a7a27c7c0a"}, @noop, @end, @ssrr={0x89, 0x7, 0x5c, [@multicast1]}, @cipso={0x86, 0x14, 0x3, [{0x2, 0x2}, {0x5, 0x6, "11cb3d05"}, {0x7, 0x6, "ba83676f"}]}]}}, {0xa000, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x6e, 0x100}}}}}}}}, 0x62) 927.420395ms ago: executing program 5 (id=158): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x4) unshare(0x20000400) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x12) fcntl$setlease(r4, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) preadv2(r5, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000011cc0), 0x0, 0x40000042, &(0x7f0000010140)={0x0, 0x3938700}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {}, {@usrjquota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@nomblk_io_submit}]}, 0xfe, 0x483, &(0x7f0000001040)="$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") mq_unlink(&(0x7f0000000340)='eth0\x00') 853.746207ms ago: executing program 4 (id=159): syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaffffffffffff08004510003c006700000306f9d8c98490787f000001ffffffff0000000000000000000000000000000300004e2200004e240000000400000001000000030000f6de0cf72993379c015977ec319742db7098f4fa1e16ddeecfe424c22267d8060df9be4a226c8dd9ea6fd7375b5cbe69820290361d0d055ed0ee3df27e37d0e9f613fe27ae9397c029a737df801d6832f6526366d6c9b8f7f81d4d156f2b14a087d383ecf2b2536688aa7fce72930be0deb9aa"], 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000000940)={{0xffffffffffff62c8, 0x4, 0xfffffffe, 0x80, 0x5}, &(0x7f0000000580)=[{}, {}, {}, {}, {}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0xa0}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) mq_notify(r0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000080)=0x9, 0x4) 777.72519ms ago: executing program 4 (id=160): r0 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x00\x00\x00\x80\x00\x00\x00\x00X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc9Z\x82@\xb1=\xc4\xb6=\xed\xec\x8d\xa2lI\xffK\xfd\xbc6\x90{s\xebr=/]d;\xc4VE\xdb\t\xc0\xe1\xcc\x0e\xf6+\x16\xc2\x17\xe0\f%n\xb3u\xa2~\x86,\xdek\x05\xda\xf5\xb6!\xfc\xdbl\x96\xedm\xd9nf\x00\x00\x00M\x1c\a\x81\x1d\xa24\x8e\xe8\xf3\x9e\\\x17*Ip\xbf1\xd4\x0f\xcc\x1e\x85A\x85\tH\xc2\xe6X\xc7\xc5\v\x1cZ56Buj\x81G\xca5\xed\xda\xd9{|\x18gY\x06\x9a\xa1\x04\xbd\x85\xbaq\xb1\xaduR\f\x01\xc65\xe7\x81K\xbf\xab\xc1hUd\xb7\x8b^\x06\xdbZ\xa4>\x1dg5\x1bFFs\x1c\xf5\a\xef\x97\xa5|\x01\x9e\x13\x1e\x8a\xecY!JW\xb3\x1a\xc4\x9d\xc1\xf5\xdcU3\xee\x8ddz\x00a\x95oKc\xd6\xf4/\x9a\x9c6c\x98\bxz\x04\xf7\xecj\x99\xc1=\x01Q\xb2\xdfR\xd5\x17\x9a=\xf3s\xbc\xac\"7\xb8Z\xa4\x04\xf9\xf8\x86\x8f\xb3\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\xa8\x9aJ\xc6\x03\xb4\x9b\x14\xb1+\xa1\x93\xeb/\xd3tq\x98\xd3L\x1a\xfc\xb14i_aFlb\xa3h0\xee.?\x90h\xc9\xc9m\xe1C\xe1\xa9\xf5\xf6\vf', 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a40000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d04001280140000001100010000000000e80000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) sendto$inet(r1, &(0x7f0000000300)="72bf", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom$inet(r1, 0x0, 0x0, 0x21, 0x0, 0x0) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) write(r0, &(0x7f0000000080)="8419", 0x2) 717.47115ms ago: executing program 4 (id=161): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d00000000000030001280080001006873720024", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 697.511073ms ago: executing program 4 (id=162): mmap$xdp(&(0x7f0000e5d000/0x1000)=nil, 0x1000, 0x2000005, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="831026bd7000fcdbdf25160000000c000180140002006e657464657673696d300000000021000500040000000000"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000440), 0x2}, 0x4000, 0x1000, 0x800000, 0x8, 0xe0000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0xc, 0x6, "bc3090", 0x10, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x7, 0x1000, 0x1000000000000a}}}}}}, 0x0) syz_emit_ethernet(0x68, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 410.035241ms ago: executing program 0 (id=163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x1}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "e3de3d7b4cd07ec3ee777dee74fc7986cc8df2165c"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 312.314167ms ago: executing program 1 (id=164): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe2$9p(&(0x7f0000000000), 0x80800) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$eJzs3E9sFFUcAODfbLe0hSIVEaWiFtHYaGyhoHAwMRhNPGhixIMem7YQZKGmrYkQAkti8GhIvBrj0asHr2q8GE4mXvFoYkiI4QJ4WjO7s+12O136Z9tK+33Jsu/NvJn33r55s2/eYxvAljWQ/pNE9EbEzYjYFRGF5gQDtbd7dy6N3b9zaSzKlcrJf5L0sLibxjNJ9r4jiwwWIgpfJHM7GkxfuHh2tFSamMriwzPnPh2evnDxlTPnRk9PnJ44P3L8+NEjh4+9NvLq8iuVk19ar7v9lyf373vn4+vvjRXr27uz98Z6tMtADOQVpeqFdme2wXY2hJNiq5RvrH1hWLL0+k+bq7Pa/3dFR7RsPGATqVQqla4s3Llwd7nS7OqCLcBDK4mNLgGwMepf9Onzb/2VN07YtnZDkA11+0TtASit973sFfFsdWN9HqSz6fm2nQaiGB+V//02faXx4hrMQwAANPr5RH0k2DT+64vY25DukWwNpS8iHo2I3RHxWETsiYjHo5b2iYh4sun8HRFRaZH/QFN84fizcGt1NWwtHf+9nq1tzY3/onEVrK8ji+2MqA+YJw5ln8lgdHadOlOaONwij1/e+uOrxfal9a+P/9JXmn99LJiV41axa/4x46MzoyuucJPbVyP6i831T4oRyexKQBIR+yKi/9dvlnzevobwmZe+3z8baZpkfHD9qyq562htWKqofBfxYq39yzGv/edyTFqvTw53R2ni0HB6FRzKzePG79fez9ueLKX+P/7VfNjbx346mfWs1Uvbf3vD9R/19du5+vclEcnseu30Iie6snge1/78ctFnmpVe/9uSD3ui4bn089GZmanDEduSd2PB9pHZZd56vPoe5Vr9Bw/m9//d2THpJ/FURKQX8dMR8UzUnhAHonLlQEQ8FxEHF69+/Pbm85+svP5rK63/eO79b177z63Xp4F069S8LaOlpFxLPbdlNtBx9sDN+/35+S+t/Y9WQ4PZlvz7XzLvFrGwFPmBVX58AAAA8FAoRERvw1xSbxQKQ0O1OaA9sb1QmpyeeTmZ/Oz8eO03An0NaWvzwZ1Jff6zryE+0hQ/ks0bf93RU40PjU2WxjeozkDNjmqfTwpDs/eCWv9P/d2eKWbg/8xPfmDrelD/33t9nQoCrDvf/7BVTV1uiJQXSVT2P2Vgc1rK97+5QNic8vp/i//P7YEBNomK7gxb2nL6//y0N3a1vTDAuirGB7PhwoaWBFhvxv+wJS3pR/IrDlS68nd1x8LE0d36hB2xsmL05OS1IYF0ZLXK89RbbXlH9eTuKrY+qv7XFBZNE4XlFb5r7k9GJKtp01Orb4vTe9t98XdWsvWxdl82P6xJP31g454dLbW+b4z0tv1WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCb+CwAA//+0FNMg") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r2, &(0x7f0000000280)=""/237, 0xed) 176.32204ms ago: executing program 5 (id=165): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) listen(r0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES64, @ANYBLOB="8e4a3cfeabf5abfc29ff00306345ccdcb28b0a29cfde8e4c9715feea9bcee6f4793fdefdb7229f7ce577f9e32eb2bceaf8d34ea60cb9cc8e704a2411aeeb5f4eedf6e41c8c80e86a378840bd6955fd4b84e4ed32fa91ca686a5da1a2912bd2562a5ce0b693a7667758e17ffab304f480eede8e4868c4c56dc07d202aa4b659a119a9", @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4048010}, 0x2000040) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000f00000008000300d37147f6396c4183bad95c8cc1986e556f6ffdd3427a64ef8832269a5a89564dbb61e135d942400b492b1bdd7a57c394ef7fe44da1b474f19562a6766392d9f9", @ANYRES32=r11, @ANYBLOB="08003100f7ffffff08003200080000000500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x890) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000540)={@private1, 0x0}, &(0x7f0000000580)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x0, 0x3, {{0xf, 0x4, 0x3, 0x2, 0x3c, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x12, "930edb8af6e0b5589b1bb735075fcf82"}, @lsrr={0x83, 0x13, 0x2c, [@dev={0xac, 0x14, 0x14, 0x15}, @local, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="30aebb00596087556eefdd4441680f5ea10a524a01acbb012c0b0b3b7da4679938a53897422b6c95a722f31b20f42028be0c985dda6e96ac21a156a71ad58fd683101a41aa622e40a64834b6e5c6c0d3688aee712fed7ea7f8a8085cd4f048c98730b0720f0c5b092d1563d240c6b1e39be3ca58268224edfb8d13d78cbf8d18322f97318ae32778e60f95b58b0be8f1d6aba8bd2f0e04876895c3854ead34a516d33a80", @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf2513000000280001801400020076657468315f746f5f7465616d000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="5c00018008000100", @ANYRES32=0x0, @ANYRES64=r13, @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="14000200776c616e31000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="300001801400020076657468315f746f5f62726964676500080003000300000008000100", @ANYRES16=r0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000000400014e5800018008000100", @ANYRES32=r12, @ANYBLOB="1400020067656e65766530000000000000000000140002006d6163766c616e30000000000000000014000200766c616e300000000000000000000000080003000300000008000100", @ANYRES32=r13, @ANYBLOB], 0x130}, 0x1, 0x0, 0x0, 0x4004010}, 0x4008093) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x2002067, 0x0, 0x2, 0xe, 0x7f, 0x81}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x2, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xe, 0x4}, {0xa, 0xffe0}, {0xa, 0x5}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca61c55}, 0x48850) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 108.427812ms ago: executing program 1 (id=166): r0 = io_uring_setup(0x5d09, &(0x7f0000000100)={0x0, 0x2881, 0x10, 0x0, 0x59}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x25, &(0x7f0000000000)="01", 0x1) 66.237249ms ago: executing program 1 (id=167): syz_open_dev$usbfs(0x0, 0x1ff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xfffffff9, 0x2376}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0) 65.704029ms ago: executing program 1 (id=168): r0 = shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x4000) r1 = shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x7000) shmdt(r1) socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r4, @ANYBLOB="14000100fff1ffffffffffffff00000000000001080008000204"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r6, @ANYBLOB="080008000604000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) shmdt(r0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000000000/0x2000)=nil) 0s ago: executing program 1 (id=169): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r6, 0x0, 0x7fffffff) r7 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0180c200000d86dd60f9000000303afffe80000000000000000000000000001fff0200000000000000000000000000018700907800000000fe8000000000000000000000000000eaff0200000000000000000000000000010101909f50c21562"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 29.190216][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 29.190233][ T28] audit: type=1400 audit(1776094688.808:70): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.219237][ T28] audit: type=1400 audit(1776094688.838:71): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.219921][ T3301] cgroup: Unknown subsys name 'net' [ 29.246924][ T28] audit: type=1400 audit(1776094688.868:72): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.381148][ T3301] cgroup: Unknown subsys name 'cpuset' [ 29.387368][ T3301] cgroup: Unknown subsys name 'rlimit' [ 29.516871][ T28] audit: type=1400 audit(1776094689.138:73): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.540567][ T28] audit: type=1400 audit(1776094689.138:74): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.561364][ T28] audit: type=1400 audit(1776094689.138:75): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.568529][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.581995][ T28] audit: type=1400 audit(1776094689.138:76): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.611108][ T28] audit: type=1400 audit(1776094689.148:77): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.636066][ T28] audit: type=1400 audit(1776094689.148:78): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.659713][ T28] audit: type=1400 audit(1776094689.168:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.659972][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.758747][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.831455][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.838629][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.846080][ T3314] bridge_slave_0: entered allmulticast mode [ 30.852704][ T3314] bridge_slave_0: entered promiscuous mode [ 30.866971][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.874181][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.881336][ T3314] bridge_slave_1: entered allmulticast mode [ 30.887710][ T3314] bridge_slave_1: entered promiscuous mode [ 30.913299][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.927581][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.939866][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.982344][ T3314] team0: Port device team_slave_0 added [ 30.999589][ T3314] team0: Port device team_slave_1 added [ 31.007511][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.060821][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.068050][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.094300][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.105082][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.112611][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.119743][ T3313] bridge_slave_0: entered allmulticast mode [ 31.126457][ T3313] bridge_slave_0: entered promiscuous mode [ 31.144972][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.151974][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.178889][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.190171][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.197436][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.204634][ T3313] bridge_slave_1: entered allmulticast mode [ 31.210997][ T3313] bridge_slave_1: entered promiscuous mode [ 31.219708][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 31.249973][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.276188][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.285439][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.292813][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.299968][ T3318] bridge_slave_0: entered allmulticast mode [ 31.306407][ T3318] bridge_slave_0: entered promiscuous mode [ 31.313554][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.320979][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.328074][ T3318] bridge_slave_1: entered allmulticast mode [ 31.334550][ T3318] bridge_slave_1: entered promiscuous mode [ 31.362155][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.372378][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.396122][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.408356][ T3313] team0: Port device team_slave_0 added [ 31.416289][ T3314] hsr_slave_0: entered promiscuous mode [ 31.422492][ T3314] hsr_slave_1: entered promiscuous mode [ 31.444434][ T3313] team0: Port device team_slave_1 added [ 31.454058][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.461187][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.468487][ T3322] bridge_slave_0: entered allmulticast mode [ 31.474843][ T3322] bridge_slave_0: entered promiscuous mode [ 31.496907][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.504204][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.511435][ T3322] bridge_slave_1: entered allmulticast mode [ 31.517870][ T3322] bridge_slave_1: entered promiscuous mode [ 31.525203][ T3318] team0: Port device team_slave_0 added [ 31.533790][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.540793][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.566987][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.588114][ T3318] team0: Port device team_slave_1 added [ 31.601003][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.608428][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.634412][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.676697][ T3313] hsr_slave_0: entered promiscuous mode [ 31.682828][ T3313] hsr_slave_1: entered promiscuous mode [ 31.688640][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 31.694537][ T3313] Cannot create hsr debugfs directory [ 31.701221][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.721709][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.729064][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.736424][ T3317] bridge_slave_0: entered allmulticast mode [ 31.743022][ T3317] bridge_slave_0: entered promiscuous mode [ 31.752700][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.766535][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.773556][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.799558][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.815098][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.822301][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.829451][ T3317] bridge_slave_1: entered allmulticast mode [ 31.835979][ T3317] bridge_slave_1: entered promiscuous mode [ 31.862081][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.869046][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.895176][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.918484][ T3322] team0: Port device team_slave_0 added [ 31.937765][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.947960][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.957831][ T3322] team0: Port device team_slave_1 added [ 31.999608][ T3318] hsr_slave_0: entered promiscuous mode [ 32.005703][ T3318] hsr_slave_1: entered promiscuous mode [ 32.011652][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.017409][ T3318] Cannot create hsr debugfs directory [ 32.027300][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.034282][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.060425][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.082929][ T3317] team0: Port device team_slave_0 added [ 32.092940][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.099898][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.125944][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.143521][ T3317] team0: Port device team_slave_1 added [ 32.186452][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.193466][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.220011][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.233091][ T3322] hsr_slave_0: entered promiscuous mode [ 32.239096][ T3322] hsr_slave_1: entered promiscuous mode [ 32.244976][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 32.250867][ T3322] Cannot create hsr debugfs directory [ 32.259490][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.266567][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.292513][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.323645][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.345166][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.367283][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.377603][ T3317] hsr_slave_0: entered promiscuous mode [ 32.383738][ T3317] hsr_slave_1: entered promiscuous mode [ 32.389461][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 32.395254][ T3317] Cannot create hsr debugfs directory [ 32.412009][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.463204][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.476114][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.485445][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.496309][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.560091][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.569855][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.582399][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.593712][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.627850][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.636594][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.645392][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.654084][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.688158][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.698534][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.707535][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.716258][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.742043][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.750753][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.772571][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.789544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.796722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.807055][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.817969][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.835174][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.842281][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.851768][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.858809][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.871993][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.879067][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.893337][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.919352][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.926511][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.941354][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.951981][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.976924][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.994359][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.001664][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.024112][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.046323][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.057260][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.086467][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.106002][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.125152][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.136840][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.166080][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.173296][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.183868][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.190953][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.215041][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.234159][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.241307][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.249894][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.257055][ T2050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.275094][ T3313] veth0_vlan: entered promiscuous mode [ 33.292607][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.302435][ T3313] veth1_vlan: entered promiscuous mode [ 33.318052][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.346493][ T3313] veth0_macvtap: entered promiscuous mode [ 33.371732][ T3313] veth1_macvtap: entered promiscuous mode [ 33.378003][ T3314] veth0_vlan: entered promiscuous mode [ 33.398085][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.412813][ T3314] veth1_vlan: entered promiscuous mode [ 33.431440][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.469334][ T3318] veth0_vlan: entered promiscuous mode [ 33.492019][ T3314] veth0_macvtap: entered promiscuous mode [ 33.498662][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.507764][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.517208][ T3318] veth1_vlan: entered promiscuous mode [ 33.527282][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.536154][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.544975][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.557324][ T3314] veth1_macvtap: entered promiscuous mode [ 33.593378][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.602490][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.612498][ T3318] veth0_macvtap: entered promiscuous mode [ 33.619766][ T3318] veth1_macvtap: entered promiscuous mode [ 33.630041][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.632236][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.679817][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.713107][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.733577][ T3472] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 33.743494][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.755220][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.765211][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.776958][ T3472] loop3: detected capacity change from 0 to 256 [ 33.781440][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.809279][ T3317] veth0_vlan: entered promiscuous mode [ 33.837995][ T3317] veth1_vlan: entered promiscuous mode [ 33.850425][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.876925][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.892438][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.906332][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.952184][ T3317] veth0_macvtap: entered promiscuous mode [ 33.966983][ T3322] veth0_vlan: entered promiscuous mode [ 33.973878][ T3317] veth1_macvtap: entered promiscuous mode [ 33.985669][ T3322] veth1_vlan: entered promiscuous mode [ 34.011041][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.026469][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.037457][ T3488] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 34.045498][ T3488] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 34.053222][ T3488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.081712][ T3322] veth0_macvtap: entered promiscuous mode [ 34.089048][ T3322] veth1_macvtap: entered promiscuous mode [ 34.131676][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.149233][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.180576][ T3365] IPVS: starting estimator thread 0... [ 34.186579][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.213276][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 34.213294][ T28] audit: type=1400 audit(1776094693.838:105): avc: denied { create } for pid=3495 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.242396][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.259670][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.270711][ T3494] IPVS: using max 2736 ests per chain, 136800 per kthread [ 34.279355][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.281532][ T3498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 34.296277][ T28] audit: type=1400 audit(1776094693.868:106): avc: denied { getopt } for pid=3495 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.325435][ T1888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.337303][ T28] audit: type=1400 audit(1776094693.868:107): avc: denied { connect } for pid=3495 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.374525][ T3498] dummy0: entered promiscuous mode [ 34.379777][ T28] audit: type=1400 audit(1776094693.868:108): avc: denied { name_connect } for pid=3495 comm="syz.0.8" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 34.379860][ T3498] macsec1: entered promiscuous mode [ 34.403655][ T28] audit: type=1400 audit(1776094693.868:109): avc: denied { map_read map_write } for pid=3492 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.423758][ T3498] macsec1: entered allmulticast mode [ 34.443274][ T3498] dummy0: entered allmulticast mode [ 34.451689][ T28] audit: type=1400 audit(1776094693.878:110): avc: denied { create } for pid=3492 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.471580][ T28] audit: type=1400 audit(1776094693.878:111): avc: denied { open } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.493311][ T3498] dummy0: left allmulticast mode [ 34.498442][ T3498] dummy0: left promiscuous mode [ 34.506970][ C0] hrtimer: interrupt took 45883 ns [ 34.508452][ T28] audit: type=1400 audit(1776094693.878:112): avc: denied { perfmon } for pid=3497 comm="syz.3.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.534525][ T1888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.535939][ T28] audit: type=1400 audit(1776094693.878:113): avc: denied { kernel } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.543721][ T1888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.563370][ T28] audit: type=1400 audit(1776094693.888:114): avc: denied { tracepoint } for pid=3497 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.592517][ T1888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.606240][ T3504] loop3: detected capacity change from 0 to 128 [ 34.621807][ T3517] sctp: [Deprecated]: syz.1.2 (pid 3517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 34.621807][ T3517] Use struct sctp_sack_info instead [ 34.658362][ T3515] loop2: detected capacity change from 0 to 4096 [ 34.680898][ T3504] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 34.695375][ T3515] EXT4-fs: Ignoring removed bh option [ 34.744416][ T3515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.769913][ T3522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.835891][ T3515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.883744][ T3526] loop4: detected capacity change from 0 to 128 [ 34.894789][ T3498] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 34.911466][ T3526] ======================================================= [ 34.911466][ T3526] WARNING: The mand mount option has been deprecated and [ 34.911466][ T3526] and is ignored by this kernel. Remove the mand [ 34.911466][ T3526] option from the mount to silence this warning. [ 34.911466][ T3526] ======================================================= [ 34.940585][ T3498] FAT-fs (loop3): Filesystem has been set read-only [ 34.961610][ T3528] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 34.969771][ T3528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12'. [ 34.990444][ T3498] syz.3.6: attempt to access beyond end of device [ 34.990444][ T3498] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 34.996388][ T3528] .`: renamed from bond0 (while UP) [ 35.017302][ T3498] syz.3.6 (3498) used greatest stack depth: 10328 bytes left [ 35.100070][ T3534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.228071][ T3556] loop4: detected capacity change from 0 to 1024 [ 35.244975][ T3556] ext4: Unknown parameter 'smackfstransmute' [ 35.266546][ T3545] syz.4.16 (3545): /proc/3544/oom_adj is deprecated, please use /proc/3544/oom_score_adj instead. [ 35.359885][ T3562] loop6: detected capacity change from 0 to 7 [ 35.442733][ T3527] syz.2.11 (3527) used greatest stack depth: 10296 bytes left [ 35.448500][ T3565] loop4: detected capacity change from 0 to 128 [ 35.490416][ T3570] loop1: detected capacity change from 0 to 4096 [ 35.500269][ T3570] EXT4-fs: Ignoring removed bh option [ 35.517010][ T3570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.539046][ T3570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.549060][ T3565] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.565064][ T3565] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.640342][ T3570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.714454][ T3582] Zero length message leads to an empty skb [ 35.735319][ T3570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.830253][ T3515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.951015][ T3596] loop3: detected capacity change from 0 to 136 [ 36.019801][ T3596] Attempt to read inode for relocated directory [ 36.218835][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.271562][ T3570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.356801][ T3593] syz.3.24 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 36.366970][ T3593] CPU: 0 UID: 0 PID: 3593 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT(full) [ 36.367075][ T3593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 36.367089][ T3593] Call Trace: [ 36.367098][ T3593] [ 36.367107][ T3593] __dump_stack+0x1d/0x30 [ 36.367144][ T3593] dump_stack_lvl+0x95/0xd0 [ 36.367167][ T3593] dump_stack+0x15/0x1b [ 36.367191][ T3593] dump_header+0x80/0x240 [ 36.367287][ T3593] oom_kill_process+0x295/0x350 [ 36.367312][ T3593] out_of_memory+0x97d/0xb80 [ 36.367335][ T3593] try_charge_memcg+0x62e/0xa10 [ 36.367383][ T3593] __mem_cgroup_charge+0x65/0x150 [ 36.367416][ T3593] do_wp_page+0xf84/0x2590 [ 36.367452][ T3593] ? __rcu_read_lock+0x36/0x50 [ 36.367478][ T3593] handle_mm_fault+0x8cb/0x3020 [ 36.367575][ T3593] ? mt_find+0x291/0x3d0 [ 36.367610][ T3593] do_user_addr_fault+0x3fd/0x1050 [ 36.367692][ T3593] exc_page_fault+0x62/0xa0 [ 36.367712][ T3593] asm_exc_page_fault+0x26/0x30 [ 36.367732][ T3593] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 36.367797][ T3593] Code: 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 19 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 36.367819][ T3593] RSP: 0018:ffffc90001403998 EFLAGS: 00050206 [ 36.367841][ T3593] RAX: ffff8881026a8ac8 RBX: ffff88811d9200c8 RCX: 0000000000005e30 [ 36.367859][ T3593] RDX: 0000000000000000 RSI: ffff88811d92a468 RDI: 0000200000c00000 [ 36.367875][ T3593] RBP: 0000200000bf5c60 R08: 000000000000068c R09: 0000000000000000 [ 36.367985][ T3593] R10: 000188811d9200c8 R11: 000188811d930297 R12: 0000200000c05e30 [ 36.368037][ T3593] R13: ffffc90001403e70 R14: 00000000000101d0 R15: 00007ffffffff000 [ 36.368056][ T3593] _copy_to_iter+0x141/0xea0 [ 36.368127][ T3593] ? __free_pages_ok+0x1b7/0x420 [ 36.368158][ T3593] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 36.368178][ T3593] __skb_datagram_iter+0xc6/0x680 [ 36.368198][ T3593] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 36.368283][ T3593] ? tipc_wait_for_rcvmsg+0x307/0x370 [ 36.368385][ T3593] skb_copy_datagram_iter+0x3f/0x120 [ 36.368411][ T3593] tipc_recvstream+0x4d7/0x780 [ 36.368447][ T3593] ? __pfx_tipc_recvstream+0x10/0x10 [ 36.368475][ T3593] sock_recvmsg+0xf5/0x120 [ 36.368583][ T3593] ____sys_recvmsg+0xf5/0x280 [ 36.368608][ T3593] ___sys_recvmsg+0x11f/0x3b0 [ 36.368632][ T3593] __x64_sys_recvmsg+0xd1/0x160 [ 36.368655][ T3593] x64_sys_call+0x2b1a/0x3020 [ 36.368759][ T3593] do_syscall_64+0x12c/0x370 [ 36.368787][ T3593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.368821][ T3593] RIP: 0033:0x7f469482c819 [ 36.368840][ T3593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.368862][ T3593] RSP: 002b:00007f4693266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 36.368886][ T3593] RAX: ffffffffffffffda RBX: 00007f4694aa6090 RCX: 00007f469482c819 [ 36.368903][ T3593] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000004 [ 36.368990][ T3593] RBP: 00007f46948c2c91 R08: 0000000000000000 R09: 0000000000000000 [ 36.369007][ T3593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.369020][ T3593] R13: 00007f4694aa6128 R14: 00007f4694aa6090 R15: 00007ffd02a41e78 [ 36.369038][ T3593] [ 36.369181][ T3593] memory: usage 307200kB, limit 307200kB, failcnt 2270 [ 36.414339][ T3598] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.430608][ T3593] memory+swap: usage 319756kB, limit 9007199254740988kB, failcnt 0 [ 36.721908][ T3593] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 36.729347][ T3593] Memory cgroup stats for /syz3: [ 36.729816][ T3593] cache 4096 [ 36.744711][ T3593] rss 4096 [ 36.747870][ T3593] shmem 0 [ 36.751042][ T3593] mapped_file 4096 [ 36.754776][ T3593] dirty 0 [ 36.757789][ T3593] writeback 0 [ 36.761218][ T3593] workingset_refault_anon 18 [ 36.765918][ T3593] workingset_refault_file 179 [ 36.770917][ T3593] swap 12857344 [ 36.774463][ T3593] swapcached 12935168 [ 36.775529][ T3600] loop4: detected capacity change from 0 to 8192 [ 36.778455][ T3593] pgpgin 8103 [ 36.778467][ T3593] pgpgout 8101 [ 36.778476][ T3593] pgfault 11133 [ 36.778484][ T3593] pgmajfault 11 [ 36.798686][ T3593] inactive_anon 4096 [ 36.802734][ T3593] active_anon 0 [ 36.806293][ T3593] inactive_file 4096 [ 36.810212][ T3593] active_file 0 [ 36.813968][ T3593] unevictable 0 [ 36.817465][ T3593] hierarchical_memory_limit 314572800 [ 36.822914][ T3593] hierarchical_memsw_limit 9223372036854771712 [ 36.829090][ T3593] total_cache 4096 [ 36.832965][ T3593] total_rss 4096 [ 36.836591][ T3593] total_shmem 0 [ 36.840055][ T3593] total_mapped_file 4096 [ 36.844347][ T3593] total_dirty 0 [ 36.847836][ T3593] total_writeback 0 [ 36.851812][ T3593] total_workingset_refault_anon 18 [ 36.857463][ T3593] total_workingset_refault_file 179 [ 36.862746][ T3593] total_swap 12857344 [ 36.866734][ T3593] total_swapcached 12935168 [ 36.871331][ T3593] total_pgpgin 8103 [ 36.875209][ T3593] total_pgpgout 8101 [ 36.879125][ T3593] total_pgfault 11133 [ 36.883273][ T3593] total_pgmajfault 11 [ 36.887333][ T3593] total_inactive_anon 4096 [ 36.891923][ T3593] total_active_anon 0 [ 36.895908][ T3593] total_inactive_file 4096 [ 36.900334][ T3593] total_active_file 0 [ 36.904379][ T3593] total_unevictable 0 [ 36.908377][ T3593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.24,pid=3591,uid=0 [ 36.923132][ T3593] Memory cgroup out of memory: Killed process 3591 (syz.3.24) total-vm:100580kB, anon-rss:1228kB, file-rss:26496kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 36.941017][ T3594] syz.3.24 (3594) used greatest stack depth: 9072 bytes left [ 36.968858][ T3593] syz.3.24 (3593) used greatest stack depth: 8688 bytes left [ 37.117563][ T1624] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.136344][ T1624] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.166920][ T1624] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.190610][ T1624] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.201025][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.314697][ T3623] rock: directory entry would overflow storage [ 37.325508][ T3623] rock: sig=0x4f50, size=4, remaining=3 [ 37.333806][ T3623] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 37.353355][ T3515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.414148][ T3515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.486586][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.497829][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.508981][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.621796][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.653847][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.097568][ T3635] syzkaller0: entered promiscuous mode [ 38.103839][ T3635] syzkaller0: entered allmulticast mode [ 38.115540][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.38'. [ 38.230994][ T3637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39'. [ 38.239971][ T3637] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39'. [ 39.248535][ T3648] set_capacity_and_notify: 1 callbacks suppressed [ 39.248556][ T3648] loop4: detected capacity change from 0 to 512 [ 39.292702][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 39.292720][ T28] audit: type=1400 audit(1776094698.908:205): avc: denied { name_bind } for pid=3649 comm="syz.0.41" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.374402][ T28] audit: type=1400 audit(1776094698.908:206): avc: denied { node_bind } for pid=3649 comm="syz.0.41" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 39.398950][ T3652] loop3: detected capacity change from 0 to 4096 [ 39.405761][ T3648] journal_path: Non-blockdev passed as './file0' [ 39.415868][ T3652] EXT4-fs: Ignoring removed bh option [ 39.431232][ T3648] EXT4-fs: error: could not find journal device path [ 39.472888][ T3652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.548483][ T3659] loop2: detected capacity change from 0 to 1764 [ 39.560287][ T3652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.583861][ T3659] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 39.594612][ T28] audit: type=1400 audit(1776094699.218:207): avc: denied { map } for pid=3660 comm="syz.0.43" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.718986][ T28] audit: type=1400 audit(1776094699.218:208): avc: denied { read write } for pid=3660 comm="syz.0.43" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.764736][ T3652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.808984][ T3670] netlink: 'syz.4.45': attribute type 25 has an invalid length. [ 39.827189][ T3670] netlink: 'syz.4.45': attribute type 9 has an invalid length. [ 39.859290][ T3652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.938525][ T3676] loop4: detected capacity change from 0 to 1024 [ 39.953507][ T3652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.977297][ T3676] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.028841][ T3676] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.046448][ T3676] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #2: comm syz.4.47: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 32(4), depth 0(0) [ 40.095825][ T1624] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.100677][ T3676] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 40.110515][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 40.121010][ T1624] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.126081][ C1] EXT4-fs (loop4): initial error at time 1776094699: ext4_ext_check_inode:521: inode 2 [ 40.144309][ C1] EXT4-fs (loop4): last error at time 1776094699: ext4_ext_check_inode:521: inode 2 [ 40.157895][ T3676] EXT4-fs (loop4): no journal found [ 40.187751][ T1624] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220113][ T1624] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.231331][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.250523][ T28] audit: type=1400 audit(1776094699.868:209): avc: denied { setopt } for pid=3680 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.285678][ T3679] loop1: detected capacity change from 0 to 4096 [ 40.292520][ T28] audit: type=1400 audit(1776094699.868:210): avc: denied { write } for pid=3680 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.313686][ T3679] EXT4-fs: Ignoring removed bh option [ 40.320176][ T28] audit: type=1400 audit(1776094699.898:211): avc: denied { getopt } for pid=3680 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.345404][ T3681] loop2: detected capacity change from 0 to 2048 [ 40.353444][ T28] audit: type=1400 audit(1776094699.918:212): avc: denied { create } for pid=3687 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.392941][ T3679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.398940][ T28] audit: type=1400 audit(1776094699.978:213): avc: denied { write } for pid=3687 comm="syz.0.51" path="socket:[5525]" dev="sockfs" ino=5525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.429630][ T28] audit: type=1326 audit(1776094700.018:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3694 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469482c819 code=0x7ffc0000 [ 40.438192][ T3691] loop4: detected capacity change from 0 to 512 [ 40.469074][ T3691] EXT4-fs: inline encryption not supported [ 40.469207][ T3679] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.497170][ T3691] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.510902][ T3691] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.527078][ T3691] EXT4-fs (loop4): inodes count not valid: 15 vs 32 [ 40.575264][ T3679] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.627140][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 40.631897][ T3707] loop4: detected capacity change from 0 to 128 [ 40.748617][ T3711] FAULT_INJECTION: forcing a failure. [ 40.748617][ T3711] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 40.762021][ T3711] CPU: 0 UID: 0 PID: 3711 Comm: syz.4.57 Not tainted syzkaller #0 PREEMPT(full) [ 40.762052][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.762066][ T3711] Call Trace: [ 40.762095][ T3711] [ 40.762102][ T3711] __dump_stack+0x1d/0x30 [ 40.762133][ T3711] dump_stack_lvl+0x95/0xd0 [ 40.762156][ T3711] dump_stack+0x15/0x1b [ 40.762239][ T3711] should_fail_ex+0x263/0x280 [ 40.762270][ T3711] should_fail_alloc_page+0xf2/0x100 [ 40.762347][ T3711] __alloc_frozen_pages_noprof+0x108/0x360 [ 40.762376][ T3711] alloc_pages_mpol+0xb3/0x260 [ 40.762522][ T3711] folio_alloc_noprof+0x96/0x150 [ 40.762622][ T3711] filemap_alloc_folio_noprof+0x92/0x220 [ 40.762649][ T3711] __filemap_get_folio_mpol+0x295/0x680 [ 40.762677][ T3711] cont_write_begin+0x5ca/0x970 [ 40.762736][ T3711] ? generic_write_end+0x133/0x150 [ 40.762766][ T3711] fat_write_begin+0x4f/0xe0 [ 40.762859][ T3711] ? __pfx_fat_get_block+0x10/0x10 [ 40.762922][ T3711] cont_write_begin+0x1b0/0x970 [ 40.762958][ T3711] fat_write_begin+0x4f/0xe0 [ 40.763020][ T3711] ? __pfx_fat_get_block+0x10/0x10 [ 40.763049][ T3711] generic_cont_expand_simple+0xb0/0x150 [ 40.763086][ T3711] fat_cont_expand+0x3e/0x170 [ 40.763166][ T3711] fat_fallocate+0x177/0x1c0 [ 40.763270][ T3711] vfs_fallocate+0x3b6/0x450 [ 40.763297][ T3711] __x64_sys_fallocate+0x7a/0xd0 [ 40.763322][ T3711] x64_sys_call+0x298e/0x3020 [ 40.763412][ T3711] do_syscall_64+0x12c/0x370 [ 40.763441][ T3711] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 40.763473][ T3711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.763536][ T3711] RIP: 0033:0x7fe3ffb3c819 [ 40.763555][ T3711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.763575][ T3711] RSP: 002b:00007fe3fe576028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 40.763597][ T3711] RAX: ffffffffffffffda RBX: 00007fe3ffdb6090 RCX: 00007fe3ffb3c819 [ 40.763612][ T3711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 40.763685][ T3711] RBP: 00007fe3fe576090 R08: 0000000000000000 R09: 0000000000000000 [ 40.763699][ T3711] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000002 [ 40.763713][ T3711] R13: 00007fe3ffdb6128 R14: 00007fe3ffdb6090 R15: 00007fffd176fdc8 [ 40.763733][ T3711] [ 40.766434][ T3679] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.779745][ T3702] loop0: detected capacity change from 0 to 164 [ 40.834465][ T3709] loop3: detected capacity change from 0 to 128 [ 41.068301][ T3713] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.092184][ T3713] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.106808][ T3713] EXT4-fs (loop2): 1 truncate cleaned up [ 41.111705][ T3679] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.113097][ T3713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.153052][ T3719] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 41.156678][ T3318] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 41.172920][ T3719] 8021q: VLANs not supported on wg2 [ 41.175979][ T3318] EXT4-fs (loop2): Remounting filesystem read-only [ 41.182890][ T3719] netlink: 36 bytes leftover after parsing attributes in process `syz.0.61'. [ 41.249741][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 41.262296][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 41.266986][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.280216][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.291226][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.292459][ T3723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.64'. [ 41.300145][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.540246][ T3733] netlink: 'syz.3.67': attribute type 10 has an invalid length. [ 41.551526][ T3733] geneve1: entered promiscuous mode [ 41.572058][ T3733] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 41.603182][ T3735] netlink: 176 bytes leftover after parsing attributes in process `syz.3.68'. [ 41.747300][ T3746] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 41.836345][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 41.997132][ T3761] netlink: 'syz.4.79': attribute type 2 has an invalid length. [ 42.785539][ T3781] FAULT_INJECTION: forcing a failure. [ 42.785539][ T3781] name failslab, interval 1, probability 0, space 0, times 1 [ 42.798855][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.3.85 Not tainted syzkaller #0 PREEMPT(full) [ 42.798881][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 42.798892][ T3781] Call Trace: [ 42.798900][ T3781] [ 42.798909][ T3781] __dump_stack+0x1d/0x30 [ 42.798942][ T3781] dump_stack_lvl+0x95/0xd0 [ 42.798974][ T3781] dump_stack+0x15/0x1b [ 42.798998][ T3781] should_fail_ex+0x263/0x280 [ 42.799027][ T3781] should_failslab+0x8c/0xb0 [ 42.799118][ T3781] __kmalloc_noprof+0xb8/0x4e0 [ 42.799147][ T3781] ? security_inode_init_security+0xb4/0x320 [ 42.799185][ T3781] ? __pfx_shmem_initxattrs+0x10/0x10 [ 42.799240][ T3781] security_inode_init_security+0xb4/0x320 [ 42.799276][ T3781] ? simple_acl_create+0x328/0x370 [ 42.799306][ T3781] shmem_mknod+0xaa/0x170 [ 42.799405][ T3781] shmem_create+0x34/0x50 [ 42.799439][ T3781] ? __pfx_shmem_create+0x10/0x10 [ 42.799475][ T3781] path_openat+0xd75/0x2050 [ 42.799506][ T3781] do_file_open+0x16c/0x290 [ 42.799557][ T3781] do_sys_openat2+0x94/0x130 [ 42.799588][ T3781] __x64_sys_openat+0xf2/0x120 [ 42.799632][ T3781] x64_sys_call+0x1e39/0x3020 [ 42.799661][ T3781] do_syscall_64+0x12c/0x370 [ 42.799734][ T3781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.799794][ T3781] RIP: 0033:0x7f469482c819 [ 42.799863][ T3781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.799884][ T3781] RSP: 002b:00007f4693287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 42.799906][ T3781] RAX: ffffffffffffffda RBX: 00007f4694aa5fa0 RCX: 00007f469482c819 [ 42.799920][ T3781] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 42.799984][ T3781] RBP: 00007f4693287090 R08: 0000000000000000 R09: 0000000000000000 [ 42.799999][ T3781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.800077][ T3781] R13: 00007f4694aa6038 R14: 00007f4694aa5fa0 R15: 00007ffd02a41e78 [ 42.800095][ T3781] [ 43.404048][ T3794] EXT4-fs: test_dummy_encryption option not supported [ 43.581688][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.594727][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.112183][ T3799] EXT4-fs (loop3): Invalid log block size: 64 [ 44.436873][ T3801] set_capacity_and_notify: 5 callbacks suppressed [ 44.437262][ T3801] loop0: detected capacity change from 0 to 512 [ 44.683589][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 44.683607][ T28] audit: type=1400 audit(1776094704.278:285): avc: denied { read write } for pid=3793 comm="syz.3.89" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.683730][ T3578] IPVS: starting estimator thread 0... [ 44.719680][ T28] audit: type=1400 audit(1776094704.278:286): avc: denied { open } for pid=3793 comm="syz.3.89" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.744627][ T3801] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 44.754669][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 44.927771][ T3801] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 44.950531][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 44.957029][ C1] EXT4-fs (loop0): initial error at time 1776094704: mb_free_blocks:2049: inode 11: block 64 [ 44.967262][ C1] EXT4-fs (loop0): last error at time 1776094704: mb_free_blocks:2049: inode 11: block 64 [ 44.997411][ T3814] loop4: detected capacity change from 0 to 128 [ 45.058565][ T3801] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.92: corrupted inode contents [ 45.071701][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.085719][ T3801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.087055][ T3801] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #11: comm syz.0.92: mark_inode_dirty error [ 45.122125][ T3801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.122651][ T3801] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.92: invalid indirect mapped block 1 (level 1) [ 45.148509][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.174017][ T3801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.175046][ T3801] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.92: corrupted inode contents [ 45.202400][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.219685][ T3801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.220798][ T3801] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 45.291865][ T3801] loop0: lost filesystem error report for type 5 error -117 [ 45.292243][ T3801] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #11: comm syz.0.92: corrupted inode contents [ 45.405153][ T28] audit: type=1400 audit(1776094705.028:287): avc: denied { write } for pid=3821 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.435846][ T3822] sctp: [Deprecated]: syz.4.96 (pid 3822) Use of int in maxseg socket option. [ 45.435846][ T3822] Use struct sctp_assoc_value instead [ 45.470857][ T3801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.478295][ T36] bridge_slave_1: left allmulticast mode [ 45.494364][ T3801] EXT4-fs error (device loop0): ext4_truncate:4602: inode #11: comm syz.0.92: mark_inode_dirty error [ 45.514945][ T28] audit: type=1400 audit(1776094705.058:288): avc: denied { shutdown } for pid=3821 comm="syz.4.96" lport=55187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.550659][ T3801] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.551802][ T3801] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 45.570687][ T36] bridge_slave_1: left promiscuous mode [ 45.576371][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.597206][ T3801] loop0: lost filesystem error report for type 5 error -117 [ 45.599561][ T3801] EXT4-fs (loop0): 1 truncate cleaned up [ 45.620611][ T28] audit: type=1400 audit(1776094705.098:289): avc: denied { module_request } for pid=3804 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.650766][ T36] bridge_slave_0: left allmulticast mode [ 45.663307][ T3801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.680699][ T36] bridge_slave_0: left promiscuous mode [ 45.707609][ T28] audit: type=1400 audit(1776094705.328:290): avc: denied { read write } for pid=3833 comm="syz.3.97" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.707823][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.731818][ T28] audit: type=1400 audit(1776094705.328:291): avc: denied { open } for pid=3833 comm="syz.3.97" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 45.763951][ T28] audit: type=1400 audit(1776094705.378:292): avc: denied { append } for pid=3800 comm="syz.0.92" path="/17/file0/file0/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.770373][ T3836] loop4: detected capacity change from 0 to 512 [ 45.794423][ T3812] IPVS: using max 2544 ests per chain, 127200 per kthread [ 45.798063][ T28] audit: type=1400 audit(1776094705.388:293): avc: denied { lock } for pid=3833 comm="syz.3.97" path="socket:[6330]" dev="sockfs" ino=6330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.810913][ T3801] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.92: invalid fast symlink length 39 [ 45.881641][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.899459][ T3846] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.92: invalid fast symlink length 39 [ 45.944703][ T3801] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz.0.92: invalid fast symlink length 39 [ 46.046267][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.058906][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.071342][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.085251][ T36] bond0 (unregistering): Released all slaves [ 46.110193][ T1624] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.119322][ T3804] chnl_net:caif_netlink_parms(): no params data found [ 46.140820][ T3852] syz.0.98 uses obsolete (PF_INET,SOCK_PACKET) [ 46.155384][ T1888] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.217039][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.226653][ T36] hsr_slave_0: left promiscuous mode [ 46.247085][ T36] hsr_slave_1: left promiscuous mode [ 46.260524][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.271201][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.291331][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.298921][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.326511][ T36] veth1_macvtap: left promiscuous mode [ 46.339453][ T36] veth0_macvtap: left promiscuous mode [ 46.345275][ T36] veth1_vlan: left promiscuous mode [ 46.351336][ T36] veth0_vlan: left promiscuous mode [ 46.461802][ T36] team0 (unregistering): Port device team_slave_1 removed [ 46.473721][ T36] team0 (unregistering): Port device team_slave_0 removed [ 46.522029][ T309] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.544611][ T3866] bridge_slave_0: left allmulticast mode [ 46.550615][ T3866] bridge_slave_0: left promiscuous mode [ 46.556406][ T3866] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.568269][ T3866] bridge_slave_1: left allmulticast mode [ 46.574939][ T3866] bridge_slave_1: left promiscuous mode [ 46.581733][ T3866] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.591872][ T3866] bond0: (slave bond_slave_0): Releasing backup interface [ 46.602363][ T3866] bond0: (slave bond_slave_1): Releasing backup interface [ 46.614942][ T3866] team0: Port device team_slave_0 removed [ 46.623833][ T3866] team0: Port device team_slave_1 removed [ 46.631392][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.639019][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.647936][ T3866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.655688][ T3866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.665149][ T3866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 46.698220][ T309] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.755225][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.783575][ T28] audit: type=1400 audit(1776094706.398:294): avc: denied { bind } for pid=3881 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.806722][ T3883] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 46.815015][ T3883] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 46.850649][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 46.862635][ T3804] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.869878][ T3804] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.898145][ T3804] bridge_slave_0: entered allmulticast mode [ 46.915418][ T3804] bridge_slave_0: entered promiscuous mode [ 46.923603][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.929590][ T3887] loop6: detected capacity change from 0 to 7 [ 46.930925][ T3804] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.944868][ T3804] bridge_slave_1: entered allmulticast mode [ 46.951777][ T3804] bridge_slave_1: entered promiscuous mode [ 46.986466][ T3897] loop1: detected capacity change from 0 to 512 [ 47.004518][ T3804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.034505][ T3897] EXT4-fs (loop1): 1 truncate cleaned up [ 47.051290][ T3897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.052347][ T3804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.106135][ T3804] team0: Port device team_slave_0 added [ 47.113534][ T3804] team0: Port device team_slave_1 added [ 47.132287][ T3804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.139270][ T3804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.166081][ T3804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.175268][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.177508][ T3804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.193370][ T3804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.226761][ T3804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.269486][ T3916] loop4: detected capacity change from 0 to 1024 [ 47.294372][ T3916] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.305439][ T3916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.327703][ T3804] hsr_slave_0: entered promiscuous mode [ 47.353134][ T3923] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 47.360954][ T3804] hsr_slave_1: entered promiscuous mode [ 47.381021][ T3804] debugfs: 'hsr0' already exists in 'hsr' [ 47.392074][ T3804] Cannot create hsr debugfs directory [ 47.585759][ T3942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.116'. [ 47.628437][ T3804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.642006][ T3942] loop1: detected capacity change from 0 to 512 [ 47.652712][ T3804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.666380][ T3949] FAULT_INJECTION: forcing a failure. [ 47.666380][ T3949] name failslab, interval 1, probability 0, space 0, times 0 [ 47.701239][ T3949] CPU: 0 UID: 0 PID: 3949 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 47.701276][ T3949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.701288][ T3949] Call Trace: [ 47.701295][ T3949] [ 47.701303][ T3949] __dump_stack+0x1d/0x30 [ 47.701334][ T3949] dump_stack_lvl+0x95/0xd0 [ 47.701403][ T3949] dump_stack+0x15/0x1b [ 47.701478][ T3949] should_fail_ex+0x263/0x280 [ 47.701508][ T3949] should_failslab+0x8c/0xb0 [ 47.701578][ T3949] kmem_cache_alloc_noprof+0x66/0x400 [ 47.701605][ T3949] ? dst_alloc+0xbd/0x100 [ 47.701639][ T3949] dst_alloc+0xbd/0x100 [ 47.701735][ T3949] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 47.701769][ T3949] ip_route_output_flow+0x65/0x110 [ 47.701820][ T3949] udp_sendmsg+0x1383/0x1590 [ 47.701846][ T3949] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 47.701875][ T3949] ? avc_has_perm+0x101/0x190 [ 47.701910][ T3949] ? __pfx_udp_sendmsg+0x10/0x10 [ 47.701947][ T3949] inet_sendmsg+0xac/0xd0 [ 47.701969][ T3949] ? __pfx_inet_sendmsg+0x10/0x10 [ 47.701990][ T3949] ____sys_sendmsg+0x519/0x5b0 [ 47.702082][ T3949] ___sys_sendmsg+0x195/0x1e0 [ 47.702112][ T3949] __sys_sendmmsg+0x185/0x320 [ 47.702141][ T3949] __x64_sys_sendmmsg+0x57/0x70 [ 47.702165][ T3949] x64_sys_call+0x27aa/0x3020 [ 47.702202][ T3949] do_syscall_64+0x12c/0x370 [ 47.702317][ T3949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.702342][ T3949] RIP: 0033:0x7f43fda9c819 [ 47.702365][ T3949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.702428][ T3949] RSP: 002b:00007f43fc4f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 47.702453][ T3949] RAX: ffffffffffffffda RBX: 00007f43fdd15fa0 RCX: 00007f43fda9c819 [ 47.702524][ T3949] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 47.702540][ T3949] RBP: 00007f43fc4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 47.702555][ T3949] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 47.702570][ T3949] R13: 00007f43fdd16038 R14: 00007f43fdd15fa0 R15: 00007ffc8c22b9e8 [ 47.702590][ T3949] [ 47.932248][ T3928] loop3: detected capacity change from 0 to 32768 [ 47.941068][ T3804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.951765][ T3928] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 47.957182][ T3928] loop3: p1 start 460800 is beyond EOD, truncated [ 47.963737][ T3928] loop3: p2 size 83886080 extends beyond EOD, truncated [ 47.964299][ T3934] xt_hashlimit: max too large, truncated to 1048576 [ 47.988821][ T3804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.012340][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 48.054451][ T3934] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.063219][ T3958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 48.082204][ T3928] loop3: p5 start 460800 is beyond EOD, truncated [ 48.088952][ T3928] loop3: p6 size 83886080 extends beyond EOD, truncated [ 48.131903][ T3934] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.198635][ T3804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.221610][ T3804] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.263965][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.271162][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.295555][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.302793][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.316311][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 48.327705][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 48.338980][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.350184][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 48.457107][ T3983] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 48.459062][ T3983] bond1: (slave lo): Enslaving as an active interface with an up link [ 48.460693][ T3983] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 48.510248][ T3804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.526150][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 48.579334][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.706308][ T3804] veth0_vlan: entered promiscuous mode [ 48.718098][ T3804] veth1_vlan: entered promiscuous mode [ 48.741474][ T3804] veth0_macvtap: entered promiscuous mode [ 48.748935][ T3804] veth1_macvtap: entered promiscuous mode [ 48.760455][ T3804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.776948][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 48.778206][ T3804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.820065][ T1624] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.830180][ T1624] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.845417][ T1624] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.864609][ T1624] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.885799][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 48.906197][ T4021] netlink: 96 bytes leftover after parsing attributes in process `syz.4.134'. [ 48.916568][ T4021] netlink: 192 bytes leftover after parsing attributes in process `syz.4.134'. [ 48.980614][ T4026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 48.996061][ T4026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.012278][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.137'. [ 49.029937][ T4030] loop4: detected capacity change from 0 to 512 [ 49.039542][ T4026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.051525][ T4026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.064263][ T4030] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.076949][ T4030] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.138: bad orphan inode 131083 [ 49.087616][ T4030] loop4: lost filesystem error report for type 5 error -117 [ 49.090507][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 49.104323][ C1] EXT4-fs (loop4): initial error at time 1776094708: ext4_orphan_get:1423 [ 49.112882][ C1] EXT4-fs (loop4): last error at time 1776094708: ext4_orphan_get:1423 [ 49.133611][ T4030] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.158537][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.171118][ T4026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.181997][ T4026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.314629][ T4036] loop5: detected capacity change from 0 to 128 [ 49.445832][ T4050] 9pnet_virtio: no channels available for device ./bus [ 49.488124][ T4026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.504411][ T4026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.579716][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.589694][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.598697][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.607819][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.617125][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.626045][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.636998][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.648217][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.728044][ T4070] loop3: detected capacity change from 0 to 512 [ 49.742618][ T4070] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.148: corrupted in-inode xattr: e_value out of bounds [ 49.756735][ T4070] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.757455][ T4070] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.148: couldn't read orphan inode 15 (err -117) [ 49.767067][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 49.767091][ C1] EXT4-fs (loop3): initial error at time 1776094709: ext4_iget_extra_inode:5040: inode 15 [ 49.767125][ C1] EXT4-fs (loop3): last error at time 1776094709: ext4_iget_extra_inode:5040: inode 15 [ 49.805591][ T4070] loop3: lost filesystem error report for type 5 error -117 [ 49.809215][ T4070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.847528][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 49.847543][ T28] audit: type=1400 audit(1776094709.468:315): avc: denied { read } for pid=4073 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.915417][ T28] audit: type=1400 audit(1776094709.518:316): avc: denied { write } for pid=4073 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.970382][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.997976][ T4086] loop1: detected capacity change from 0 to 136 [ 50.024721][ T28] audit: type=1400 audit(1776094709.648:317): avc: denied { ioctl } for pid=4089 comm="syz.5.155" path="socket:[6810]" dev="sockfs" ino=6810 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.063768][ T4086] Attempt to read inode for relocated directory [ 50.111985][ T4103] loop5: detected capacity change from 0 to 4096 [ 50.121464][ T4103] EXT4-fs: Ignoring removed bh option [ 50.142191][ T28] audit: type=1400 audit(1776094709.708:318): avc: denied { connect } for pid=4089 comm="syz.5.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.163632][ T28] audit: type=1400 audit(1776094709.718:319): avc: denied { read write } for pid=4089 comm="syz.5.155" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.164646][ T4103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.188797][ T28] audit: type=1400 audit(1776094709.718:320): avc: denied { open } for pid=4089 comm="syz.5.155" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.375657][ T3804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.418597][ T28] audit: type=1400 audit(1776094710.038:321): avc: denied { unmount } for pid=4109 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.505711][ T28] audit: type=1400 audit(1776094710.118:322): avc: denied { setopt } for pid=4109 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.702907][ T4113] loop5: detected capacity change from 0 to 128 [ 50.920009][ T28] audit: type=1400 audit(1776094710.538:323): avc: denied { relabelfrom } for pid=4123 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 50.943730][ T28] audit: type=1400 audit(1776094710.568:324): avc: denied { relabelto } for pid=4123 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 51.030338][ T4127] loop1: detected capacity change from 0 to 512 [ 51.040213][ T4127] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.164: corrupted in-inode xattr: e_value out of bounds [ 51.059925][ T4127] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.060260][ T4127] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.164: couldn't read orphan inode 15 (err -117) [ 51.069517][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.069547][ C0] EXT4-fs (loop1): initial error at time 1776094710: ext4_iget_extra_inode:5040: inode 15 [ 51.069581][ C0] EXT4-fs (loop1): last error at time 1776094710: ext4_iget_extra_inode:5040: inode 15 [ 51.120572][ T4127] loop1: lost filesystem error report for type 5 error -117 [ 51.122223][ T4127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.191150][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.285735][ T4143] loop1: detected capacity change from 0 to 4096 [ 51.293095][ T4143] EXT4-fs: Ignoring removed bh option [ 51.301537][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.332583][ T3578] ================================================================== [ 52.340894][ T3578] BUG: KCSAN: data-race in wg_socket_set_peer_endpoint / wg_socket_set_peer_endpoint [ 52.352729][ T3578] [ 52.355092][ T3578] write to 0xffff88811afc9414 of 4 bytes by task 3424 on cpu 1: [ 52.371568][ T3578] wg_socket_set_peer_endpoint+0x3d2/0x440 [ 52.378461][ T3578] wg_socket_set_peer_endpoint_from_skb+0x6d/0xa0 [ 52.384895][ T3578] wg_packet_handshake_receive_worker+0x3c4/0x5d0 [ 52.391331][ T3578] process_scheduled_works+0x513/0xa10 [ 52.396918][ T3578] worker_thread+0x58a/0x780 [ 52.401700][ T3578] kthread+0x22a/0x280 [ 52.405778][ T3578] ret_from_fork+0x150/0x360 [ 52.412221][ T3578] ret_from_fork_asm+0x1a/0x30 [ 52.417000][ T3578] [ 52.419321][ T3578] read to 0xffff88811afc9414 of 4 bytes by task 3578 on cpu 0: [ 52.426859][ T3578] wg_socket_set_peer_endpoint+0x270/0x440 [ 52.432755][ T3578] wg_socket_set_peer_endpoint_from_skb+0x6d/0xa0 [ 52.439177][ T3578] wg_packet_handshake_receive_worker+0x3f1/0x5d0 [ 52.448127][ T3578] process_scheduled_works+0x513/0xa10 [ 52.453799][ T3578] worker_thread+0x58a/0x780 [ 52.458392][ T3578] kthread+0x22a/0x280 [ 52.462456][ T3578] ret_from_fork+0x150/0x360 [ 52.467049][ T3578] ret_from_fork_asm+0x1a/0x30 [ 52.471822][ T3578] [ 52.474143][ T3578] value changed: 0x00000000 -> 0x0100007f [ 52.480092][ T3578] [ 52.482585][ T3578] Reported by Kernel Concurrency Sanitizer on: [ 52.488816][ T3578] CPU: 0 UID: 0 PID: 3578 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 52.498186][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 52.508326][ T3578] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 52.515534][ T3578] ================================================================== [ 53.000060][ T4088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.044803][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.