last executing test programs: 6.330335993s ago: executing program 4 (id=4822): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000000000007910b8000000000005200000000000009500000b00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x2000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f00003ea000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe8c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe78, 0x1, [@m_pedit={0xe74, 0x1, 0x0, 0x0, {{0xa}, {0xe48, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe8c}}, 0x0) madvise(&(0x7f000019e000/0x4000)=nil, 0x200000, 0x9) socket(0x28, 0x801, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r6, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x21000}], 0x2, 0x1800, 0x0, 0x3) 5.566789635s ago: executing program 4 (id=4825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(&(0x7f0000000000)=@sg0, 0x0, 0x0, 0x12400, &(0x7f00000000c0)='-[:,}:\'$\x00') lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000180)='system_u:object_r:tun_tap_device_t:s0\x00', 0x26, 0x0) ioperm(0x0, 0xf1, 0x7) prctl$PR_GET_NAME(0x41555856, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x600, 0x358, 0x11, 0x148, 0x0, 0x10, 0x568, 0x2a8, 0x2a8, 0x568, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x358, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@CLUSTERIP={0x60}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x660) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000180)={0x60, 0x2, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x10000, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x33}) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmr'], 0xa) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b +'], 0xa) execve(0x0, &(0x7f0000000340)=[0x0, &(0x7f0000000280)='&$[,-!f${&\x00', &(0x7f00000002c0)='-[:,}:\'$\x00', &(0x7f0000000300)='-[:,}:\'$\x00'], 0x0) r8 = creat(0x0, 0x141) utime(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x3f, 0x6}) mknod(&(0x7f0000000580)='./file0\x00', 0xc242, 0xfffffff9) recvmsg$kcm(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000040)=""/119, 0x77}, {&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/30, 0x1e}, {&(0x7f0000000440)=""/91, 0x5b}, {&(0x7f00000004c0)}, {&(0x7f0000000b40)=""/81, 0x51}, {&(0x7f0000000bc0)=""/67, 0x43}, {&(0x7f0000000c40)=""/96, 0x60}, {&(0x7f0000001080)=""/4096, 0x1000}], 0xa, &(0x7f0000000ec0)=""/168, 0xa8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 5.282553938s ago: executing program 4 (id=4833): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x3}, {0x34, 0x0, 0x0, 0x7}, {0x6}]}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0xc248, &(0x7f0000000180), 0x83, 0x5e8, &(0x7f0000000c00)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000100)={0x1, 0x60d, 0xe2, &(0x7f00000002c0)=""/226}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{}, {0x2}, {0x6}]}, 0x10) syz_emit_ethernet(0xe0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000000)='system_u:object_r:apt_var_lib_t:s0\x00', 0x62, 0x0) lchown(0x0, 0x0, 0xee01) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000301150000ef8b000002000000001805bf49069371b21942"], 0x20}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x21f, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x3, [0xda5, 0x550, 0x848, 0x8c9]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0xff28, 0x4}]}]}}]}, 0x9c}}, 0x0) shutdown(r5, 0x1) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/231, 0xe7}], 0x1, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r9, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x80004507, 0x0) 4.27831083s ago: executing program 1 (id=4842): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x10000}, 0x48) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4500}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b00004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) 3.367357885s ago: executing program 1 (id=4854): syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@private}, {@private}, {@local}, {@remote}]}]}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$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") sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x1d0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000400)=[{&(0x7f0000000980)="10", 0x1}], 0x1, 0x80000, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2.965477347s ago: executing program 1 (id=4856): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) 2.783246242s ago: executing program 0 (id=4859): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0x5}, 0x103000, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20}, {0x1000, 0x6, 0x0, 0x1}]}) creat(&(0x7f0000000300)='./bus/file0\x00', 0x122) (async) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file2\x00', 0x0, 0x101000, 0x0) (async) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x4c802, 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r4 = getpid() (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4800) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) close_range(r3, r1, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$eJzs3EFsVEUfAPD/27a0QPnoh4iCqEU0NhpbKCgcTAxGEw+aGPGgx6YtBFmooTURQmRJDB4NiXfj0asHr+rNcDLxikcTQ0IMF8DTM2/3bXe73V3a7bYr9PdLlp2Znbczs/Pm7bwZtgFsWqPZP0nEcETcjIidEVFozDBaebp35/L0/TuXp6OUpif/TrLD4m4WzyX58/Y8MlaIKHyZ1F6oM3/x0tmpYnH2Qh6fWDj36cT8xUuvnDk3dXr29Oz5yePHjx45fOy1yVdX36gm5WXturvvi7n9e9/5+Pp70/3V9KH8ub4d3TIao82qUvZCtwvrsR114aS/Xc431r8yrFh2/mfdNVAe/zujL9p2HvAISdM0HWz9ciltdHVZCvDQSqLXNQB6o/pFn93/Vh/NJgJb1mf60XO3T1RugLJ238sfEc+WE6vrIAMN97fdNBoRH5X++TZ7xDqtQwAA1Pv5RHUm2DD/G4nYU5fvf/keykhE/D8idkXEYxGxOyIej0reJyLiyYb374uItE35ow3x5fOfwq21tbC9bP73er63VZv/Rf0u2EhfHtsRUZ0wzx7KP5OxGBg8daY4e7hNGb+89fvXrV6rn/9lj6z86lwwr8et/oYFupmphamOG9zg9tWIff2N7U/6I5LFnYAkIvZGxL5VvO9IXfjMS9/vX4wMLM334PaXpU330bqwVZF+F/Fipf9LsaT/ayUm7fcnJ4aiOHtoIjsLDjUt48Zv195vVf4D2//jn42HvH3sp5P5yFq7rP+31Z3/Ud2/rbV/JIlIFvdr51dfxrU/vmp5T9Pp+b8l+bAcrt6Xfj61sHDhcMSW5N3l6ZO1Y6vx7DlKlfaPHWw+/nflx2SfxFMRkZ3ET0fEM1G5QxyN9MqBiHguIg62af+vbz7/SeftX19Z+2eaXv+W9H9tvz4LZKkXlqRMFZNSJXctZTHQd/bAzfstLh4r6/+j5dBYntL8+pcsuUQsr0XzwBo/PgAAAHgoFCJiuG4taTgKhfHxyhrQ7thWKM7NL7x8au6z8zOV3wiMxEChutJVWQ8eSKrrnyN18cmG+JF83fibvq3l+Pj0XHGmpy0HtpfHfFIYX7wWVMZ/5q/uLDED/2V+8gOb14PG/57rG1QRYMP5/ofNq278l1pkKfmfMvBoWsn3v7VAeDQ1G/9XOjgGeLikxjJsaqsZ/0vz3tjZ9coAG6o/PlgMF3paE2Cjmf/DprSiH8l3HEgHm780FMszx1D7N+yLzqqxtUlZPQlkM6uelL61k6Oqf02hZZ4orO4NB5f9yYjO+vTU2j+W03u6fvKn+f5Yt3vwhw0Zp80C7a8bk8Prd00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADopn8DAAD//7x926o=") (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus/file0\x00', 0x0, 0x20) (async) fadvise64(r0, 0x2, 0x3, 0x2) (async) sched_setscheduler(r4, 0x0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x0, 0x0) (async) ptrace$setopts(0x4206, r4, 0x3, 0x3) (async) socket$netlink(0x10, 0x3, 0x6) (async) r5 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r5, 0x227d, 0xfffffffffffffffe) 2.523637153s ago: executing program 0 (id=4861): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x669) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 1.923138263s ago: executing program 4 (id=4864): r0 = syz_open_dev$usbmon(&(0x7f0000000500), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xb70ae) (fail_nth: 59) 1.619837997s ago: executing program 2 (id=4866): ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'ip6erspan0\x00', {0xfffff3e3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000000c0)={0x7e8, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x17, 0xf, [@gcr_ga={0xbd, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0xb6, 0x3}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0x7, 0x9}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x3c, 0x7f, [@mesh_chsw={0x76, 0x6, {0x4, 0x4, 0x3, 0x7}}, @link_id={0x65, 0x12}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xc3d423b70fbc7c7e}}, @peer_mgmt={0x75, 0x8, {0x0, 0x4, @val=0x5, @val=0x1d, @void}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x130, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x102, 0x3, "fb52784db64fef1cb63a222046ef25d1366e2bb5cd68726adccab3eef82422a0e5a7091044b945714a84e0a27c342fcea27450c5bbdcc8513fed7ae0547e4a64a2a54009e04b0d194c7a5cfe30b0eae4ca2af9dafe7aa2750aab381c2e99c205b7429b0bcad606753873f42fdda2fe1c9ab646aa0d1e0015ac9dd3e4ece82a3830539fcd90829a123cd3ab7214f276026b6a61bed1995b8400ce6c45f655086d68c0763c82e9143abe95817aa492c9faca022c8b1b2c2667ae8f8c07b8bcfb553a59636d9ebf8aa7e19ea7ea555f4c7290ab97f55c37aa7642e64683b14ac9a641f8ad3778fb376cf8f5e8697ef81e7c8e24d1f5ee7258273a6f087b4780"}, @NL80211_FTM_RESP_ATTR_LCI={0x21, 0x2, "b432ecb6c57d313a125bbd1ef5a45d6f914b0de475fbc60723ab02a057"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x13, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0xb5, 0x9}}, @peer_mgmt={0x75, 0x8, {0x1, 0x7, @val=0x7, @val=0xa, @void}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x4c, 0x7f, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2, 0x0, 0x40}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ibss={0x6, 0x2, 0x3}, @mic={0x8c, 0x10, {0xbc1, "c35787f8226f", @short="b46e0355404b5023"}}, @mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x14, {0x0, 0x4, @void, @void, @val="3da5cb87b932c0e35034209b011ab093"}}, @peer_mgmt={0x75, 0x6, {0x0, 0x101, @val=0xffff, @void, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x5ea, 0x91, "a8a76fa847d32667a61a6e31b71b3dd8d3fa48c4e5776deebded237d30708653f505c1968b51aa2051ac0fe6110495cdaf7acff66eb1dd21318f6447ebe6b0b4f7eb0c4cc9e82a3a2a7829bdec741c512ec9832e8d7eac04bd15d9472181555746bf27f897ee5ff4d6ea436b6336c92389e1128e7235953c7fbcfd5f251f60d037f266e427e4514afbe135828539a3d6276a706967f6fca9af3c9b72b225377e73fe283785da17d51f77668b19e6b2879cc0865c3e3bbe7ab7fa1d3fece2f7851eed4e401507934aa37bd50f1f90fa5a6bfbd80320b68456fe0c542c152fe818e07930352b4eb1f3f1355c9fb061945a67ec3c82cfa6ab6ec4a8a77b578b3fd174fcf2304f29d161425b2ed7fa8b402d3265a2c5e2a037930666a5151355c2282e3247ba54900e624af59899bf17b60a043fcf67d883ffe1994de37bde06ecff4ca7994c859282d30fa3e88c825bef2bfc77625bf097d748ee5d64e08369a656648987a22432dc1b950923bebd1d485d7af1c1c75085cbcd9741f7ca7a646ac85f9a423c8a49cda33e7b46bb9252ba0b30f2c293ad7a88d599c1293ccbc6935c4357fc9d9d1dfdc393daa7e1a5e82507819b5ea86bc4e299a720fed2a14e7870788a4d14e86b76c032a4d5b8bf1a9db5bc3373bd429b4798b7d4c221381664e68070c028bfbf8575e45672ff07967236563235e052266fafb6074498191bd0ba1ebf7435a53e93cf858f5c157eadcb8a219877437defbf2e363bcf22fd710a53dbfd5506aa6b0ec14d203f0153b9204ae261f32a0b89b0aa6465a52cc2d5884d3e19a7b59d09c6be74d9e6d93935d65628822bc0f15cb9b1db7ff0e540a8d598d26c1fa92f16fe7e625d8f1bfcc1427951ac4d6c1991209a08b986542e43703d623c884d19faa61c7aa62708ce0f321a432f91b1ee676afe33a3c332a14307b2f63d3e8c7cd8b4b34dc37f15b1e718c126c786891b4922bad96c22c963fb406bc7a994f696cab9b983ea8b62096a7201518a19c04a7da7f67c2f03fbd71fead5a823179aa294e5437aec57485adbed8b51f1da271fbb6835b27fc824243e15e5347e6abbba69fc8e261d925e7fcca36d7aa51bb37063b94acaa2cf49f87532e97870d88c4a113a63aa0c4aefb3f8cc754eb30076bd2ec10ccea24d55303cd100c412961e79bc7ca1e0c104568d5630f0397a9c765b49778b671b553d6479064b521bb27beac3bdfb0d0a57ea7081d508fe7531014a67aa04e40772a270beea70ac9867a2fd28f46b8fa153466be44d757c31a460d119dc3f6a5e21050ebb0e7ec1dc7b1744713b79a11b2f458d906f032958992e235320a310b2a3027f573d7c4bad69aabbf865b8c3fd2adfe6ab58bb5d8971e47c629851fa7ab405c77333d29b94c7a3091721e671c3ea964d922a1bc76ab6c5152a697f05a329220fee3830e34d8e77451c7efb0f59606e0d4a4697809326d67f9c02a3ae25ef33adf73c1bf8c8b9031ee724ebefa05b8e63962bef1deb2e1b2792a9f1386d2d830517de4ce60edbc03542a4a66341a254eba2722833f9f2e945e86b32a925591d715e114fafaeaf41b5ee18fd1bc431d3ea300327e3ca5f2f6aaaf2f337dc2c555c7bd4b005547cdc6c5829f8252309c65b9108ccd29fc3722badd358d034cd151bf4328c8f23e6416a98d8511950375b3be5123700ed9c6d73fe2316f9910070ed6229426f4902c94521d283009fcd9fc3c1d18e29991a833cdc936e724a51582357e8bbf7e6d68bdf227e12f722828315fa8d76012c46b50b7315548934f58cda5444215806f7339dcadeb74284b9da0a27b05ff869d6aac167d658683223c3694db60d401589bda13956858e3988f89e1ff88ea611880381c6dda01bf39b32ad4e6bd3123586d0af0dd624de90b5885ff2a22f3ec035fa7b9e7856252b65c7930188a7a69eb4ac52427792503c84d8e915cb8cf4cb6120a56f39e3a0ea0d2a491d1a7c98bc56aa40a40d9dff82ccdf4d28f0236306ca390b2e65f89b727939022d92cddf68be3c2fa74fb419d58b5b6c4ce46c062c9a428ae2233f6c6e8d9bd441316552b368863030fa3021507c71f1c36b27b8a14b4c30f026b68b73423e5ead327d27903b17ac30"}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x63}, @val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x24}}, 0x4090) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000ac0)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000b00)='children\x00') sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, 0x3, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) r6 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) setns(r6, 0x80) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x128, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2003}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x232}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) socket$inet_icmp_raw(0x2, 0x3, 0x1) fchdir(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x9, 0x8001}, {0xb, 0x4}, {0xf, 0xff}]}, @var={0x9, 0x0, 0x0, 0xe, 0x4, 0x1}, @volatile={0xf}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0xb, 0xf5}, {0x10, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x53, 0x4}, @ptr={0x7, 0x0, 0x0, 0x2, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0xc0}}, @restrict={0x10, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000f80)=""/11, 0xcf, 0xb, 0x1, 0x687}, 0x20) r8 = syz_open_procfs$userns(0x0, &(0x7f0000001000)) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000001040)) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000001080), &(0x7f00000010c0)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001340)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000001180)={0x15c, r2, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x7, 0x4, 0x8, 0x1, 0x400, 0x3]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xcce}, @NL80211_ATTR_FRAME={0xfe, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @random="75a96324e8fc", {0xd, 0x1}}, 0x400, 0xffff, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x18}]}, @void, [{0xdd, 0xd, "97d76c3e2d5a3aa980cc9e790f"}, {0xdd, 0x31, "48acbc93b97a19a976a9146854e089b91b1bf088a95ba3330d826a2bfd75a30211e212f8ba3292116480c632ba5b54f0ec"}, {0xdd, 0x89, "e72029e198dab9886af6d40aaa5aecdfb1abaa6dccad6319ffa9847ed25915ff71836c9eeac0a72435b45065e75118b403bcb8da756ea0070e6854c433aba03312734cfe77f682121314edc7c537d1026683559aba9762a3ea003f1358b056c0b8489225428e62a7a8bd7336f5160a552f9dc76c14d2a9f234efd2a999f6ffe50e351b58dd54ab1f66"}]}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x100d5) ioctl(r8, 0xeaf, &(0x7f0000001380)="7475d1a75c492299f2f7d60d5ad37af75d585b632f2758c19c73ab3faed26e630bdb9cebfd5bdb341dc8b97db1f0f3e17aa4a3b2afb89aaff0978a1332d24ef9aded28a1a79fd7c143992d6c9c1236c31bc06e0aded95bdc1e00c5454ff911ebdb0e5507258493bf27fdfcda40db704801e0b449b53f1929301bc4b2f338a55f10f19b45ea078b1cdc64c78a295a2f21") sendto$inet6(r5, &(0x7f0000001440)="4adc8dbc0dd3b494e8b95d61cfcbf11abc5d5fac3d1860749bc058ad908df124594393e64f5e2c7d890e5cec80a4eb2be24a598f7effe30dbb2cf507483a5840d932efcc0a209ae0617753dd675339b3322fdcf5c31a35971f05389ddd346900ff6180c45389437edc6c41b068e3f35aaee5110f4c5fd116e4de7662f0a0c17d4460426ac6225966220ed25ce1f4160e4e7df127ad15d69daef4c07f5f9dae9487b0de22fda9c23837ddab0a7ee11c8e9f387e0c16ee9ed3d7ec68b1b0d2b00688538b95ef95991a6ebcf80d7940bc970e2341751b6882a130e7c2459c45", 0xde, 0x40040, &(0x7f0000001540)={0xa, 0x4e21, 0x7, @local, 0x10}, 0x1c) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xe4, 0x464, 0x2, 0x70bd28, 0x25dfdbfc, "797b0005dffe94b9d9f3a8822b92e48239a775c357ab333b985332e2468cc3692d06a406b6850f11ace92845e74af3b7fc0434d7e18f12233baa985880aa61be5ed7b9c0edcfce86af7808d94662883ce3335f085ccb15121ecdef43c051c59f199de23b35165164fe5b9418619501809115c02797b8cff1f292f17960470cc7b34f99c23c7ff4b2c3eae95b17fe0dc4ac2daa675f0f082d1435afab4c316341d8c8412a5b1955dda79569fe7592e422ff5221dba4bf41e829336ff54642a96e76e0a8656dacc5420eec2b090c714e3169", ["", "", "", "", ""]}, 0xe4}, 0x1, 0x0, 0x0, 0x24008080}, 0x4040000) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000001740), &(0x7f0000001780)=0xc) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000017c0)={0x3a, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x18, {0x3, 0x4, 0x10, 0x40, [0x39da, 0x2]}}]}, 0x28) r11 = dup(0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000001a00)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/209, 0xd1, 0x0, &(0x7f0000001900)=""/247, 0xf7}, &(0x7f0000001a40)=0x40) 1.508279107s ago: executing program 2 (id=4867): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000028000000000000000000000071121500000000009500000000000000534e9073e0f07c85391195bf07a845b9972e5d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x2040000) 1.507366147s ago: executing program 0 (id=4868): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x1c, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14}, 0x14}}, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x2000a210}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r7, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001440)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r7, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="0800050001000000b4000880"], 0xd8}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) close(r8) (async) close(r8) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000000400)={0x0, @rand_addr, @initdev}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x17cb3325c5736d94}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x64008001) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x9c, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x61, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000005) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x9c, r9, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x61, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000005) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xf, 0x9, 0x6, 0x142, 0x1, 0x8, '\x00', r11, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0x9}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r12}, &(0x7f0000000040), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, &(0x7f0000001480)="ce", &(0x7f0000000440)=""/27}, 0x20) 1.447411392s ago: executing program 4 (id=4869): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000480)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x4, &(0x7f00000000c0)=""/14, 0xe}, 0x40000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x1b, 0x0, 0x0, @prog_fd}, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc014}, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x148, 0x4c, 0x1a, 0x148, 0x25, 0x2f0, 0x258, 0x258, 0x2f0, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'ip6gretap0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@link_local}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [], [], 0x7402}}, @common=@dst={{0x48}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) perf_event_open$cgroup(&(0x7f0000001680)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x58) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) preadv(r6, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 1.446668291s ago: executing program 1 (id=4870): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='hrtimer_init\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="c57cc000cdcc6e2d0f9163d9f31afd7fb084c031423c540db71763ef0f4d328276b35a2a05ffb39951b732295fdd275b0115803aaefc9182519aa0a92c7e66882b1fa485ce8c99640c2ec5a6c6dd2a983b8f46c9015ff0151570a28beea8f42b378d4e56625339fa6240560d1fe3e59a04bf303c5f62050cb665de34038d597cecd8dcb878536b9d416a590008ed1eee2c4815cc3fc56219d046a193e9df2ee4e46527d9d41be27d8ff564712bfce94ad7326df05eeddd4742369eb146feee724b54bbde982164388a3cad6579894b5beb307ed0c1a075774705b28f2471b8896a02bb02ab13b020d9044e4c48ab0159f7da268207f08487", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x3d) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r7}, 0x3d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x3, 0x10001, 0x9}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000088000000880000000800000004000000000000070000000004000000000000010500000000000800000000000100000100000000040000000200000000000000000000000600000d000000000d000000010000000d000000000000000e000000000000000c00000003000000060000000500000004000000050000000f0000000000000c030000000a0000000000000b0300000000000000da51"], &(0x7f0000000340)=""/142, 0xa8, 0x8e, 0x1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52a2}}, 0xa0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8441, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x40086602, &(0x7f0000000240)) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 1.437003952s ago: executing program 2 (id=4871): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) fcntl$setstatus(r0, 0x4, 0x6000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x0, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xb, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaaf0ff50000000bf86000000000000070800", @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000680)={{}, {0xe}, 0x0, 0x2}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX], 0x1, 0x124b, &(0x7f0000001880)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) r6 = open(&(0x7f0000000140)='./file0\x00', 0x64c42, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x278, 0x168, 0x9, 0x278, 0xb, 0x378, 0x250, 0x250, 0x378, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0x278], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x278, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 1.406478395s ago: executing program 0 (id=4872): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$packet(0x11, 0x3, 0x300) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.205557861s ago: executing program 3 (id=4874): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001380)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x8, 0x1000, "7e2748e852063db17e9e8ceb376fb7732e71a32db85781279575861d4b1ae794384ff79865351a73ecf300b8efc152a8286d067b740b20cae0146e87747d4ebe952f4440f270dc35af20a83119741a0834df7d5d3587c5d8ef6f36340951f52705c79342cf3c9e4d06cd01dbb899afdd5a85eeee9c3e6e41a91078b4848578379e77518875e055f64fd52fa57a586dac61a971c4590f7a28c15710ac130877830b58612d6fedef417a268d2d3b92587db7437a862c7dcf79e0943021af6b6916f61abe4170a21f3f2713a1899c5b5eac526f21c628cbff3c79aa3c4c7a35c378a21b3c6797bc87c1062967bd0a68eb18aa4278bef4589a79fd0086a94018a084a771cb0e117b4f9f06b33366bd2c73885268a8c85490698a3c26b85c07134c8d30e80a5cbc157f9e5cdd172ebaaa90594a57542381a8e0f2fed3b09352c8ccac174c59d2f2d760c5301624c5c4ae811c8dd52e20f4b4f08e7b08431c4dc6eb083958e025d6042abfbaf4086cfdfe1871be8f7e44d0189c6fb47206c0b08e993e9939e4f28cb741105139840f3bc8b96263550733454c441909c2c9f054ce28627ab452b599a4f70d18a5803266c8d01a5ba3a9d535516e32d62af75bb3a1ef0749782c6626ee1256e8057dbb2afa5388984af11de7bd9dca4668446249742d4e4542f7dd22e832cfaf8c59ba1b499cbbd844cc00ef30e06b5be80744a3234b5dcaba094ed9ae29464692799f3fde9504c8234ecdac25c6420d56b799b00aa4fb6cad98c58b918ab0a906f9037be5f96d70528089edfb257f51790a8a1e097d053f82351845ab2d0da3afd2d66125f07bff11216a650cfc54613df50ef5011cff43d5be802732656e2d07f37a8c043a1979dc85997d582bbf3441115386e59250c0b628e47aeb8b8962b42bf6810337c1ac9fb558fdac812124c0c1f98d89874e91a896faa42282f339b2f3e2646fd75d42f811883d5f7ce77c4eda8a835cf0d5e2eee57911d49f7500d706aff4637f4a8c3866c9a49430bc6660b90140a232f1ffe9d367fd3cb4ec9f760dbebab6218ef7b70651ec9c11f326bf396cc292cca71439723beddf725b91e81643d6fca003a1454036cba8270adb76b3280ba9f58b1e8764bf70cb64ed56afe053f40eb6f66b8e74c1908bcd045ae55273393e5e9c88adba184574bd2ba8b93714f209212747b7402970e0252a0e2a5812ee02aa98edcb2033e6b5ac030895a3b23a698a6f67ec9e121190bca295e663fb8ed8926b01843942affdf7889d4b70ccfe163fdca815daaa8c5ade8a5c13487dbf4eaf4e0d0571a72f5d72b138488585a70ea51424c0c98aae94b1fdfb7dce41a94f7710b5221ee88c681e37db84bbd8889ccdaf656133b692ae4354e70798b63e8da21883702af280e6a481f5eb70f4cafa049547071d19b34155bdaf6966628de2199c434a6ca0f5e3aa2999a7f1a03493ad274bbe0fa88d5c1148858944cae5c603e97bcdac6724defe100f5831de225e328dd610a44b7d0d96ab559a1229c8225cfb38626b96aac35a7c91b3a06ebdd5f936e154ada94826df1814b0fdda373e66ece251051ad89a266bbd87c998f0840672bc3b98cc58acf8b95ac02e54bddf65f61c00b12aa39c4166a88ee9dfe1874503bd810d263ed47c4802a7d58ed57b1c7e5edd2d1f55b96881392eeaa9a2afc9af602f70d7b32cb2d4ef2e567b86c40ee9eae240f0bd1403de04eff85b46e468f1ed3bbc9b40b8275378ecd842bd1aed8e658e46ada11e37a60812fd19b9754f4eb739c9279f0208c841b6e4fd7e5248963ede02c13b36358e6fa24ccbd264405b9454d3aa0071cb2678733175fc256890163138207c2cd112208b39382d64108f22e19750fb559b6571c95a7280544f3177aa77a18831f936226359cce0e9b154b23fb35833bbb7813cca1f6300897d0e7053909b89bb8171012af4d4d7d84107312388d1c200a501e170afd541e50f25fa20fa0898bc994e693b13236274d5d08491c242b570a09c4cfb02221d4024ceb07799539bfb00250139bcc898f7a364359f079eff7ae476ab9241d8ac4d48b67a8062568c5f30ba6992e190e4103376d588f452817ab698c468eb8633d84f6a75267d6b983740c59fe8b8d658fcf796a33f39d2087fa894ba518fbc6869c45c5429e0f98412b44010c73b8c0c23666d560768b055ec34310b3ee4f51a4974f57eb23d5f121fa9a6ab334bba12c9d4cef149e7cacfc080b819b84277c6cf7d94004cd417379fd79050e2be256c85ea973995c32be3ddefa89f89c6e7aff985f49f1fdfa93cdde550292e6a54f6aeb1c8cc7ffc1ef89b0406fb45f5da9adac2bdd5dd8aacafc110b55a124ed2337373e6359e6c78152e68efe97b64dc45bf6f0e33f0276c0510ed3250ec69bff8177605235e21e2797b1414d6ff14f407fee385b63bb9e03926e5a1fe752a325cb3c004f2134cba0385198b7a98e79f704907507686b297eec2e05f26ae47cd0d79dc0ceb834dbb3f1580436d74778e52757b5673d15f8e8c7100e2c3a4fa326c3119248bc401932536e6a36f6742c2511b0c514f97f826c558cb382103992ada833b62313a4e7d173a722293837509d5ff583a5d37f789e9066689cb17d2fcec151e35cdc973741a3f68194735e03c77b51c28753b56ff62196c5f4bec54984bef551a4972c9df1b07045dc35aa4667a5f3ec7f904a0784bc9ad2592347e223fab6ae49f6c2e85024b26827eb584cf2683a5eb90ad3ff4a90f648a52434745c5f714224ee6495b28bc912afc704f6a497525e759b4faaa9efaed153fcbd3ebcc490615a83e0d7ce0de28c712ae4a6c186cd8ba24ed1ce4779cd482c68ebb4913461a8ce139c868088e5e2c5a28d1650d32488d8485d6e8b73f3b827c293d0f85f5dab1f57b6f5f0970e7ac74047ca77fb4e894a4ee1b8df356f1503651f727d38591e1d944e979a07cf090a10d8acd0329edb088afa5e6b558ff110b4c5ace06cc95fb7a960a0008919b20da5ad33b66b072725eadc3f886cf8079e083c2ec60de227330deecaceb964b779e2fe16ee2c0e5d3cc86d2dcfec4adaf900f15b6304e2e2f11e1cf6f39cc82c7ded5ac45f2bc3f6b3173846525d9db77643ddbf155101bdf8054d923d298b70413192bf73f4becb3422d9085380d0cba5967c44618fa3ef16655d3f245a201e85b34a56dc68f06dcf333ebbc3df19383d961807edf8c520e5891653112df8bbefd2a6a010883544d7c09a5ce78f6c1ae18c4e8c97c83376beba6674f63cb541281911e450e697b90edaf5ba885ef12e6219f36d95a3fb8daa7f0a81f120de16ce81df06871dad508688cdcd73b80db173ee9da9746df36d934d56ae4fc369b6d8682daac44812209cdd925967109745ec4d58d3f6d7fd5fe375f41e92f6d72efe0234614076c2f720a2804b205b6ce6c7b375abcf21e22160e1a04e91671e641330618eab588898b67096ab876a0564edeb0d2985b10f10d35a4e89ea58ef223ad447a52a67139901ad7533b3c3ef802f068b276e7946535260c0dab8d3c6bd015fdce3fa557c237f606ce1ebcf3c8941dda57e5193073a54822b9ed07647312385e31a6018477e3bc98860e41776ade01457030f91da5a234c564ce8a0a21be1e682e313fa16b9020e650054a50e193dd557dea8e147f24cefa2c3c87aeb624946b0b4f4633f9ddc8c3d51fbbe68fa7faa46703ae8c67b74131f4e5669aac3640104ee7ca8e6cba5e0bbe222438b91897c39160a11e3218853c392f0759b5e863417d0cf3551479ec53ed353f20bda940d84b1999994e09b6f4a1a52ef646707905055ee5e0cfabc5b301ba421682f18d8dd41eb74b8403227109734a11c031a9b2eb3849cd8350bbf89d6e6e2507d2a66f31da31c9e5696f07833fd187b69632d2d79537cc6831bcf8e80c6f3becfce02ab3ff8ed387d319c57607eb3fbba66ac91f4aa1589ba519cd88dec6e3dbd850134f86b71c63f83795bb58a7f87b7ef72c3caf7be5d0e8d0c44b9ddb97c47a25e3af472b7d93d1e5f3d896a84c393dc883c2437994f17257b9b6692e1b31908514e9eadb9841526e2df5e8ff47a48dd265a6708602d9e3c1e7ff6ddc2748c5fa28d9ca6b01fa5860c65b21ee784a3ba9b508a0c91cae20c8e1e5be1e193fd6879a1bd74cac30bc6a95720042208ca5c73140bdf46fa1b79692ccdc25090d8559539d4b3d1cb903813098fdf0dd830974673919a0da5451dc48087b7cbe70850736f258b81fccbab0fde1ccdbe015e7f6ec833847613bef9173b988f5a0f431ce8c8ec9b35ae3764cc0e2fe7d567c1f02f9156988175feedd847eeca7428d9a563c627a5a9366d04a016c2d6db806881cca66f6f8f0ad7ed08bd0f8979ffa6be6aaa32344e01af6f4de6fd8da4668da78f422549eedb589d8b312958a70e056172069dc74ed3a3a9510a7becda22d6aeeb7baeb6f537cfeeaf53c365f6926a6d242959f8d2ca50da925b58a77fde6672e2959196bd6911a3eb1cca572cf0c289026a097b549417d1af41d6c6dd53ed34293e9610a4689f88040b52de7d2c8874a2e34ee495b26e2e88a773376d23f4d95a73b67daaad6180e3f53bc35aaf51acc06c8da37d3f3da8e167710d432a7d4c78443e6aecd98b90d9d3220ed998a56bf42061dd1966bf2e43218e77e3c106d37d3ea74a98205a92a4d7b2414004809acd717cdb50d1a8160e7f7c8fe6873364c4275ac48dde421c9e770da52748badf84da498bfdd591c8653caa2804d362d3ebd3fdbf0ad11d7eeddebdf13c74248052cf3b02725c1ce4f4ebbfed445174a1f366a0b35109253071def6da2a97a7e7e3e3d7208d34bb493a64ee32fdbe71ed30ff210845d1476d2f4c391223b780b4add708596ffa8770e174875f1ac0dd5ab536a1a2ba6bc9837d15d4c879e66c4e82c7dc4fa4c98f8267528b4758c5f9aecf09ebaf1223fe7cae8f8545bbf983a766f71a669d40337de6961413580e59fd0d5a692f7e6f3bbbb73d4962914092f6ee25c8f92df89034f7f9e75417a3f518700fffa8c734d0185b10e3ef18cc26ac1d51f2890638587dac24b6c019809bc71e6f0b8a70a5ff7c9696274876fee7b6d3f9b2dcb1598941faab44cbb675c829a7c86ecf9fbcdea9040dcc042747f04b9cc86f236d4235e98d1db683590e645411a957bc887149f53cd3b634062df6d8782b1c49e9be1dc55734a5c26a9319748e5343562b5521b3f649ee5832a47cec8773337f09f54095541cd9ed88a16f0ff6d310f734b89802b20acd2e6d20224f5152fde0766e051a9de8f2beeb508547ba317ed17764a82ed62ac881e9b3231dd818f2ce79730e80d80726f514126c663cf88dd7dfaef42e9aa0fd31142a875c5706c5bdb39630dafd9df426c67e84bc2574367d61bd8094304ad854709028980bbee4856b356368cfde4851131da5711fd3cf9d3667b94c62d7f8116f7b3d6c239c1278b9be4ed0d417936a72e43b5ffb0254afa63cea53252cba2e545bd1cc4a099588264edb21ca9285bfd53e2b6d7a44030743c7d4dab13f5f0697e99931c59e84b88e20875864b9639cbb3982cb0fc2ef9a282bdaac4c54e9dd1b25729e5ed7df313bbd2d86f0a061e33ba57858b075324e4027643e64021e0651bd31b1cf31e5935341ad8cee71e8118fd1d225b5f2064ee9ab9e86e994b32d469338792b81520c1632bde283c46dc6306b90641d0921389fb0d02dcd11195abc94d71a3d4541fdd2572fd59311f017f1e1754c92f8a980197d19a"}}) r3 = socket$inet(0x2, 0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f00000013c0)=0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r3, &(0x7f0000001400)="a5ced69e59fd276fb501fb9683ac68cbb90d7e569f60e2d7a34ab05db1985c40b72983661d25d0c70c1d2497451cc39b25cbd06672632be719e7bfbda48cf7cdd094fac35710f67ff788733a0a790c119055e7d9d2dee8bf1da8b92e056b4c2af90f3a17dc54791109042d35f1a56bd977eee0a662194cca4993b2be105212fa89f808600f14c2a956704b601536b26ee6e14ad46da6094a5ee3f76ba4a40c24beffd077", &(0x7f00000014c0)=@tcp=r3, 0x4}, 0x20) memfd_create(&(0x7f0000001540)='\x00', 0x0) r4 = signalfd(r3, &(0x7f0000001580)={[0x6]}, 0x8) r5 = openat$cgroup_ro(r4, &(0x7f00000015c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001600)={0x0, 0xe}, &(0x7f0000001640)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001680)={r6, @in6={{0xa, 0x4e23, 0x0, @local, 0x5cd}}, 0x9, 0xc47b}, 0x90) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000001740), &(0x7f0000001780)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000017c0)={{r7}, {@void, @max}}) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000001800)=0x2f, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001840)=r5, 0x4) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000001900)={0x20, 0xc, 0x6, 0xa, 0x7c, 0x9, &(0x7f0000001880)="6e1efdf7c9e9bf5ab83c4315127c241ba1d206c641bd7a3cd4aa55c7253230e669e9ba0233a8ecee7548e555845d306089d199ec852a21eca3658ad404f3dcd640fd2f1afc853e74843c871c02f1a49e6c895cfc2db8ca5614c4a00e7e5071ba5f89afef96e0dd193ea60858dd784a1a52031dd559849e5b7ab2269e"}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$kcm(0x29, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x28}}, 0x1) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x64, 0x6, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000) connect(r7, &(0x7f0000001bc0)=@l2tp={0x2, 0x0, @remote}, 0x80) bind$qrtr(r4, &(0x7f0000001c40)={0x2a, 0xffffffffffffffff, 0x8000}, 0xc) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r4) getdents(0xffffffffffffff9c, &(0x7f0000001cc0)=""/60, 0x3c) 1.147259346s ago: executing program 1 (id=4875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xffff80fe, &(0x7f0000000040)={&(0x7f00000007c0)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback={0xfec0ffff00000000}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffffffe}}]}, 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) setfsuid(0xee00) signalfd4(r0, &(0x7f0000000040)={[0x5]}, 0x8, 0x81000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000d80), 0x208e24b) fdatasync(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) fdatasync(r8) socket(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6b4d, 0x0, 0x0, 0x0, 0x0) r10 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000180)=r10, 0x1) 1.146564386s ago: executing program 3 (id=4876): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.067756233s ago: executing program 2 (id=4877): openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xe4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f00000010c0)}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.066778293s ago: executing program 0 (id=4878): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x669) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200), 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) 970.051731ms ago: executing program 2 (id=4879): r0 = socket$netlink(0x10, 0x3, 0x0) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) (async) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'local', '=static', @void}}}]}) (async) r1 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004c00)=@newtaction={0x9c, 0x13, 0x53b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_sample={0x50, 0x0, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x31, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x20000054) 891.022607ms ago: executing program 1 (id=4880): clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) write$tcp_congestion(r1, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x10, 0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) sendfile(r0, r0, &(0x7f0000000040)=0x3, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) gettid() r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r6, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) timer_create(0x2, 0x0, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='netlink_extack\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000006a00010200000000000000000a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 803.605744ms ago: executing program 2 (id=4881): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980100000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r2, @ANYBLOB="000d0000ed087fe80300000008000100677265000800028004001200"], 0x34}}, 0x0) r4 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r4, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000833449155bf3c2640000000000000002000010"], 0xb8}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) syz_emit_ethernet(0x31d, &(0x7f0000000b00)={@dev, @empty, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x32, 0x4, 0x1, 0x2a, 0x307, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @private=0xa010102, {[@ssrr={0x89, 0x1f, 0x71, [@private=0xa010101, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010102, @broadcast, @multicast2]}, @rr={0x7, 0xb, 0x4, [@remote, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x1a, 0x1, 0x3, [{@loopback, 0x10000000}, {@loopback, 0xffff}, {@loopback, 0x8}, {@broadcast}, {@broadcast, 0x77}, {@loopback}, {@broadcast, 0x1}]}, @generic={0x0, 0xc, "e7525bb13ca59a505cd8"}, @timestamp={0x44, 0x14, 0xa7, 0x0, 0xa, [0x2, 0xfffffff9, 0x6, 0x1]}, @timestamp_prespec={0x44, 0x2c, 0xef, 0x3, 0xf, [{@multicast1, 0x5}, {@local, 0x8000}, {@broadcast, 0xfd}, {@private=0xa010100, 0x70000}, {@rand_addr=0x64010100, 0x6}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xa5, 0x0, [0x9], "56bfe7586a558ffa5c777ded036f992d17ad2bfdf5e754dcdba5ff1ee2fe718129f37587c0077ed5cab133c0687ae60c5e4ae62a5075e54be16081454629f99136327c31e1d672d52309cdd025a3b19913412d47145857eae4994cd96134c01ece68de8bdc7ec1a90fc6cbd7618723e2c6df9e4fefe4c5d7d71e3a15a094581b84b63b1329c85b9fbc3aa9a0789a8f92f97c144bb9561436b285dadc0114d72f15541eb691"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xffc0], "b1eaa09a6540c0e6589e4215ac22c3f7ea46dc928660ef03a84b50285012506ff45dea1baa30ebc23a0d250bc04c8dd9c91f029858d680419e81b458c275064923fd818956aaee73"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "979cb843ca0c1429984f62c34400fc060c2f37663e4f824884"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x7, 0x3, 0x0, 0x3, 0x3, 0x8}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x81, 0x3, 0x1, 0x3, 0x7, 0x5d}, 0x2, {0x5, 0x7, 0x2, 0x2, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x3, "d9eb7f8dc07d15ee4cf9e4894c3e914d717bf40243a54b4efc2cb062ba7f5ff40d0aaad7d346bcc679054790e7edc4e5e2122ba9439bad01574948bee48727eaeecdc6d625cfec9db4bb19203e3045225ba693bdb9ce427599d33212db2f277fd6b6d749daaf192dd1410d1f34e9910fa67c3d716eaeebf8a2e7e98eb6efc1a7132bcfb0e3dc146bc7418d7e36ebbda411748aadf399136e10ad879d7d334a911ca3b172851ee8a0d8d140ca71f8845f7106a839127878c20b22ee41d1dac2fe6fe9decaa0617d4f3772f87d3c8eb9cc3e1fcf038612c2966e3a8bdf368e5b00f70a36773670549f0c1b812533946a7b0c"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x7, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) 656.125966ms ago: executing program 3 (id=4882): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05df0000000000007111930000000000851000000200000085000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x11f5e85cb739a026, 0xffffffffffffffff, 0x6}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a34b75e7aa0ee4f05b3d65641d26f195f5fc8226729311643bef113678bd34bdf59cf19bda89ec924cc1e1c3fe47a83962da6b313eaaee80358f45c30613daca04e9ac6e3f1a009ac7f8a6606d689623731", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000020000000000000000009500010000000000360a000000000000180100002020782500000000002a20207b1af8ff00000000bfa100000000000007010000f8ffffffaa02000008000000b702000000000020850095000000000000000000000000009edff94bb15e26ac65f3d57f7739532378db9912ec927af897325a3ce6095207074c6f877123228b65570b06d70a82e495aee9d1c3bebc8295026630e40ea5317c56d625fcbb73c05392"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xe4, &(0x7f00000006c0)=""/228}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x3, 0x1, 0x7ff13ce6, 0x200, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r2, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @prog_fd}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8, 0xff, 0x100, 0x6}, 0x10) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0xfffff000) r5 = gettid() socket$inet(0x2, 0x3, 0x0) (async) waitid(0x2, r5, &(0x7f00000005c0), 0x80000000, &(0x7f0000000880)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) (async) process_vm_writev(r5, &(0x7f0000000040)=[{&(0x7f0000002140)=""/62, 0x3e}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000000300)=""/199, 0xc7}], 0x4, &(0x7f0000002640)=[{&(0x7f0000002600)=""/13, 0xd}], 0x1, 0x0) (async) lseek(r3, 0x4, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) (async) tkill(0x0, 0x12) tkill(0x0, 0x11) (async) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f0000000940)={0x2, 0x4e20, @remote}, 0xe, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}], 0x20}, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') 388.681178ms ago: executing program 3 (id=4883): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x0, 0x800000003, 0x0) r1 = open(0x0, 0x40542, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000700)=ANY=[@ANYBLOB="e8040000", @ANYRES16=0x0, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4c01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400f7ffffff3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400f7ff03b905000000010007c0ff00000006008000010000000400100287e70000010100040a00000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="1401028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040009000302040000006400006bf8fffffff51c92990500000000f001080900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000a00000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB], 0x4e8}, 0x1, 0x0, 0x0, 0x40}, 0x40804) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) listen(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) socket$netlink(0x10, 0x3, 0x0) 203.306873ms ago: executing program 4 (id=4884): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040004) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) 127.422629ms ago: executing program 3 (id=4885): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/meminfo\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0xdf98c000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 73.375394ms ago: executing program 3 (id=4886): socket$vsock_stream(0x28, 0x1, 0x0) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x201, 0x0, 0x6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) clock_gettime(0xfffffffffffffff6, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0x1, 0x0}, 0x20) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001418) ioctl$TUNSETOFFLOAD(r0, 0x40107447, 0x0) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x98000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = io_uring_setup(0x0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000300)={0x0, 0x9696, 0x20, 0xfffffffd, 0x7b}, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r2], 0x420}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000057) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='-\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000ffdbdf250c000000080005000000000004000280080006000100000020000280080008000000000014000100fe8000000000000000000000000000bb"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4811) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) 0s ago: executing program 0 (id=4887): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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") (async) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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") socket(0x2a, 0x2, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000280)=0xc) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0xff2e) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @mcast1, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) memfd_create(&(0x7f0000000040)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00J_\xcc\xc43#\xab\xba\xff\xa5\x99\x87<;bWW,\xcf\xc8\xc5\x12\xd4\xbf\xbc\xb4\xee\xb8\xea\xc2^\xc3!\xb6\x13\xf0\x8fe)\xe2\xc1\t\x1c\x1a\xb0=S\x17d@\x04\xe1\x91\x1dt\xce8\xff\x18\x1a', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x12}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xa3}, 0x4d2}, 0x0, @in6=@remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x2}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x12}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xa3}, 0x4d2}, 0x0, @in6=@remote, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x2}}, 0xe8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001500)=ANY=[], 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x80) socketpair(0x29, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0x4, 0xb, 0x4, 0x200, 0xffffffffffffffff, 0xffff8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0xfffffffffffffe91) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x503}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}, @FRA_FLOW={0x8}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ridge_slave_1: left allmulticast mode [ 428.317669][T13948] bridge_slave_1: left promiscuous mode [ 428.349017][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.357381][T13948] bridge_slave_0: left allmulticast mode [ 428.363047][T13948] bridge_slave_0: left promiscuous mode [ 428.368832][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.524031][ T29] audit: type=1400 audit(1721778075.407:2391): avc: denied { ioctl } for pid=19200 comm="syz.2.4533" path="socket:[71660]" dev="sockfs" ino=71660 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 428.663274][T13948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.683771][T13948] bond0 (unregistering): Released all slaves [ 428.689510][T19206] loop2: detected capacity change from 0 to 1024 [ 428.706308][T13948] bond1 (unregistering): Released all slaves [ 428.710132][T19206] loop2: detected capacity change from 0 to 1024 [ 428.719730][T19206] EXT4-fs (loop2): inodes count not valid: 32 vs 7 [ 428.731583][T19087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.755156][T19160] team0: Port device team_slave_1 added [ 428.790027][T19087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.849893][T19209] loop2: detected capacity change from 0 to 512 [ 428.850379][T19160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.875275][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.925448][T19160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.927318][T15424] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2792: inode #2: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 428.961585][T19160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.968563][T19160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.980040][T19210] ip6t_srh: unknown srh match flags 7402 [ 428.994705][T19160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.997119][T15424] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 428.997350][T15424] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 429.099970][T13948] hsr_slave_0: left promiscuous mode [ 429.105691][T13948] hsr_slave_1: left promiscuous mode [ 429.111375][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.118873][T13948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.138635][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.146241][T13948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.155977][T13948] veth1_macvtap: left promiscuous mode [ 429.161579][T13948] veth0_macvtap: left promiscuous mode [ 429.184190][T13948] veth1_vlan: left promiscuous mode [ 429.189459][T13948] veth0_vlan: left promiscuous mode [ 429.452470][T13948] team0 (unregistering): Port device team_slave_1 removed [ 429.471877][T13948] team0 (unregistering): Port device team_slave_0 removed [ 429.713891][T19160] hsr_slave_0: entered promiscuous mode [ 429.724407][T19212] loop2: detected capacity change from 0 to 1024 [ 429.738968][T19160] hsr_slave_1: entered promiscuous mode [ 429.750347][T19160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.762117][T19160] Cannot create hsr debugfs directory [ 429.770889][T19212] netlink: 'syz.2.4537': attribute type 4 has an invalid length. [ 429.812261][T19212] netlink: 'syz.2.4537': attribute type 17 has an invalid length. [ 429.886454][T19087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.957211][T19087] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.984382][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.991479][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.038601][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.050063][T19218] loop2: detected capacity change from 0 to 2048 [ 430.050359][T19218] EXT4-fs: Ignoring removed i_version option [ 430.077328][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.188277][T19087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.270688][T13948] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.303457][T19248] loop2: detected capacity change from 0 to 128 [ 430.363260][T19250] FAULT_INJECTION: forcing a failure. [ 430.363260][T19250] name failslab, interval 1, probability 0, space 0, times 0 [ 430.365909][T13948] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.376124][T19250] CPU: 1 UID: 0 PID: 19250 Comm: syz.2.4543 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 430.376152][T19250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 430.376212][T19250] Call Trace: [ 430.376219][T19250] [ 430.376227][T19250] dump_stack_lvl+0xf2/0x150 [ 430.376274][T19250] dump_stack+0x15/0x20 [ 430.376353][T19250] should_fail_ex+0x229/0x230 [ 430.376383][T19250] ? mas_alloc_nodes+0x1d3/0x4a0 [ 430.376408][T19250] should_failslab+0x8f/0xb0 [ 430.376440][T19250] kmem_cache_alloc_noprof+0x4c/0x290 [ 430.376490][T19250] mas_alloc_nodes+0x1d3/0x4a0 [ 430.376577][T19250] ? __rcu_read_unlock+0x4e/0x70 [ 430.376598][T19250] mas_preallocate+0x773/0xc30 [ 430.376621][T19250] ? __percpu_counter_init_many+0x3e/0x1f0 [ 430.376651][T19250] ? pcpu_alloc_noprof+0xb92/0x10c0 [ 430.376681][T19250] vma_link+0x8f/0x370 [ 430.376708][T19250] insert_vm_struct+0x17b/0x210 [ 430.376737][T19250] alloc_bprm+0x4c6/0x760 [ 430.376795][T19250] do_execveat_common+0x134/0x800 [ 430.376812][T19250] ? getname_flags+0x15a/0x3b0 [ 430.376830][T19250] __x64_sys_execveat+0x75/0x90 [ 430.376924][T19250] x64_sys_call+0x2ac2/0x2e00 [ 430.376949][T19250] do_syscall_64+0xc9/0x1c0 [ 430.376977][T19250] ? clear_bhb_loop+0x55/0xb0 [ 430.376997][T19250] ? clear_bhb_loop+0x55/0xb0 [ 430.377017][T19250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.377096][T19250] RIP: 0033:0x7f943ddd5f19 [ 430.377112][T19250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.377132][T19250] RSP: 002b:00007f943ca36048 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 430.377152][T19250] RAX: ffffffffffffffda RBX: 00007f943df66038 RCX: 00007f943ddd5f19 [ 430.377163][T19250] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 430.377180][T19250] RBP: 00007f943ca360a0 R08: 0000000000000000 R09: 0000000000000000 [ 430.377220][T19250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.377232][T19250] R13: 000000000000006e R14: 00007f943df66038 R15: 00007ffdb57c8128 [ 430.377246][T19250] [ 430.811571][T19252] loop2: detected capacity change from 0 to 512 [ 430.940921][T19219] chnl_net:caif_netlink_parms(): no params data found [ 430.978395][T13948] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.046069][T19219] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.062102][T19219] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.077705][T19219] bridge_slave_0: entered allmulticast mode [ 431.084168][T19219] bridge_slave_0: entered promiscuous mode [ 431.098763][T19219] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.114776][T19219] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.122574][T19219] bridge_slave_1: entered allmulticast mode [ 431.136568][T19219] bridge_slave_1: entered promiscuous mode [ 431.166568][T13948] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.225094][T19219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.241950][T19219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.323292][T19087] veth0_vlan: entered promiscuous mode [ 431.334120][T19219] team0: Port device team_slave_0 added [ 431.349588][T19219] team0: Port device team_slave_1 added [ 431.387153][T19087] veth1_vlan: entered promiscuous mode [ 431.437305][T19160] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.461261][T19219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.475445][T19219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.514487][T19219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.527555][T19219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.534550][T19219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.560602][T19219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.579549][T19271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4545'. [ 431.612005][T19160] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.654125][T19219] hsr_slave_0: entered promiscuous mode [ 431.664614][T19219] hsr_slave_1: entered promiscuous mode [ 431.671351][T19219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.680496][T19219] Cannot create hsr debugfs directory [ 431.689855][T19160] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.702285][T13948] vlan0: left allmulticast mode [ 431.707171][T13948] veth0_vlan: left allmulticast mode [ 431.712507][T13948] vlan0: left promiscuous mode [ 431.717401][T13948] bridge0: port 3(vlan0) entered disabled state [ 431.728140][T13948] bridge_slave_1: left allmulticast mode [ 431.733788][T13948] bridge_slave_1: left promiscuous mode [ 431.739530][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.753461][T13948] bridge_slave_0: left allmulticast mode [ 431.759154][T13948] bridge_slave_0: left promiscuous mode [ 431.764753][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.941577][T13948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.953400][T13948] bond0 (unregistering): Released all slaves [ 431.973094][T19160] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.012518][T19087] veth0_macvtap: entered promiscuous mode [ 432.034760][T19087] veth1_macvtap: entered promiscuous mode [ 432.069974][T13948] hsr_slave_0: left promiscuous mode [ 432.078008][T13948] hsr_slave_1: left promiscuous mode [ 432.083992][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.091564][T13948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.103036][T13948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.110475][T13948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.122752][T13948] veth1_macvtap: left promiscuous mode [ 432.128299][T13948] veth0_macvtap: left promiscuous mode [ 432.133845][T13948] veth1_vlan: left promiscuous mode [ 432.139272][T13948] veth0_vlan: left promiscuous mode [ 432.272711][T19274] loop2: detected capacity change from 0 to 512 [ 432.290267][T13948] team0 (unregistering): Port device team_slave_1 removed [ 432.290664][T19274] loop2: detected capacity change from 0 to 1024 [ 432.318067][T13948] team0 (unregistering): Port device team_slave_0 removed [ 432.416771][T19277] loop2: detected capacity change from 0 to 1024 [ 432.467078][T19277] netlink: 'syz.2.4547': attribute type 4 has an invalid length. [ 432.520612][T19277] netlink: 'syz.2.4547': attribute type 17 has an invalid length. [ 432.583296][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.593797][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.603701][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.614261][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.624214][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.634675][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.644573][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.655077][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.664950][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.675388][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.687452][T19087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.723053][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.733621][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.743458][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.754051][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.763964][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.774776][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.784710][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.795184][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.805015][T19087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.815551][T19087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.828208][T19087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.872356][T19087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.881131][T19087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.889924][T19087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.898719][T19087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.912678][T19287] FAULT_INJECTION: forcing a failure. [ 432.912678][T19287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.932286][T19287] CPU: 0 UID: 0 PID: 19287 Comm: syz.2.4549 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 432.942755][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 432.952797][T19287] Call Trace: [ 432.956132][T19287] [ 432.959041][T19287] dump_stack_lvl+0xf2/0x150 [ 432.963666][T19287] dump_stack+0x15/0x20 [ 432.967797][T19287] should_fail_ex+0x229/0x230 [ 432.972522][T19287] should_fail+0xb/0x10 [ 432.976656][T19287] should_fail_usercopy+0x1a/0x20 [ 432.981742][T19287] _copy_to_user+0x1e/0xa0 [ 432.986213][T19287] simple_read_from_buffer+0xa0/0x110 [ 432.991612][T19287] proc_fail_nth_read+0xfc/0x140 [ 432.996531][T19287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 433.002077][T19287] vfs_read+0x1a2/0x6e0 [ 433.006292][T19287] ? __sys_bpf+0x613/0x7a0 [ 433.010881][T19287] ? 0xffffffffff600000 [ 433.015007][T19287] ksys_read+0xeb/0x1b0 [ 433.019160][T19287] __x64_sys_read+0x42/0x50 [ 433.023646][T19287] x64_sys_call+0x2a36/0x2e00 [ 433.028301][T19287] do_syscall_64+0xc9/0x1c0 [ 433.032781][T19287] ? clear_bhb_loop+0x55/0xb0 [ 433.037439][T19287] ? clear_bhb_loop+0x55/0xb0 [ 433.042110][T19287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.047988][T19287] RIP: 0033:0x7f943ddd49fc [ 433.052391][T19287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 433.071994][T19287] RSP: 002b:00007f943ca57040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 433.080391][T19287] RAX: ffffffffffffffda RBX: 00007f943df65f60 RCX: 00007f943ddd49fc [ 433.088339][T19287] RDX: 000000000000000f RSI: 00007f943ca570b0 RDI: 0000000000000004 [ 433.096292][T19287] RBP: 00007f943ca570a0 R08: 0000000000000000 R09: 0000000000000000 [ 433.104307][T19287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.112265][T19287] R13: 000000000000004d R14: 00007f943df65f60 R15: 00007ffdb57c8128 [ 433.120242][T19287] [ 433.238849][T19160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.261413][T19160] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.284753][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.291902][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.321975][T19160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.332495][T19160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.345148][ T3164] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.352279][ T3164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.413135][T19160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.531344][T19160] veth0_vlan: entered promiscuous mode [ 433.540006][T19160] veth1_vlan: entered promiscuous mode [ 433.557615][T19160] veth0_macvtap: entered promiscuous mode [ 433.565350][T19160] veth1_macvtap: entered promiscuous mode [ 433.575653][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.586615][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.596674][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.607149][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.617079][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.627646][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.637539][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.647963][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.657790][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.668204][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.678060][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.688633][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.790752][T19308] loop2: detected capacity change from 0 to 512 [ 433.804643][T19160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.826639][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.837129][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.846995][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.857440][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.867286][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.877758][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.887565][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.897977][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.907904][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.918375][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.928194][T19160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.938611][T19160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.958887][T19160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.974232][T19160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.983101][T19160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.991811][T19160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.000619][T19160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.234774][ T29] audit: type=1400 audit(1721778081.107:2392): avc: denied { override_creds } for pid=19312 comm="syz.4.4554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 434.306347][T19319] loop0: detected capacity change from 0 to 2048 [ 434.437306][T19319] loop0: p1 < > p4 [ 434.441712][T19319] loop0: p4 size 8388608 extends beyond EOD, truncated [ 434.530060][T19323] loop0: detected capacity change from 0 to 1024 [ 434.592308][T19326] sctp: [Deprecated]: syz.4.4557 (pid 19326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.592308][T19326] Use struct sctp_sack_info instead [ 434.619688][T19219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 434.626509][T19323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 434.648442][T19219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 434.683595][T19323] netlink: 'syz.0.4555': attribute type 4 has an invalid length. [ 434.763944][T19219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 434.822857][T19341] netlink: 'syz.0.4555': attribute type 17 has an invalid length. [ 434.854841][T19340] loop2: detected capacity change from 0 to 2048 [ 434.873453][T19219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.969529][T14270] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.018614][ C1] eth0: bad gso: type: 1, size: 1408 [ 435.049162][T19219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.058831][T19354] loop2: detected capacity change from 0 to 512 [ 435.064367][T19219] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.082891][T14270] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.110018][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.117321][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.135877][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.143142][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.178334][T19358] loop0: detected capacity change from 0 to 2048 [ 435.199352][T14270] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.247916][T19358] loop0: p1 < > p4 [ 435.252910][T19358] loop0: p4 size 8388608 extends beyond EOD, truncated [ 435.311966][T14270] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.449613][T19369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4566'. [ 435.460735][T19219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.584637][T14270] vlan0: left allmulticast mode [ 435.589656][T14270] veth0_vlan: left allmulticast mode [ 435.595038][T14270] vlan0: left promiscuous mode [ 435.600182][T14270] bridge0: port 3(vlan0) entered disabled state [ 435.611684][T14270] bridge_slave_1: left allmulticast mode [ 435.617425][T14270] bridge_slave_1: left promiscuous mode [ 435.623085][T14270] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.639536][T19379] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 435.665611][T14270] bridge_slave_0: left allmulticast mode [ 435.671322][T14270] bridge_slave_0: left promiscuous mode [ 435.684882][T19382] loop0: detected capacity change from 0 to 512 [ 435.685383][T19382] ext4: Unknown parameter 'noacl' [ 435.706600][T14270] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.843385][T19386] x_tables: unsorted entry at hook 3 [ 435.869051][T19387] loop4: detected capacity change from 0 to 512 [ 435.893676][T19387] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 435.925775][T19387] EXT4-fs (loop4): 1 truncate cleaned up [ 435.982094][T14270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.993541][T14270] bond0 (unregistering): Released all slaves [ 436.042575][T19328] chnl_net:caif_netlink_parms(): no params data found [ 436.142272][T19219] veth0_vlan: entered promiscuous mode [ 436.159490][T19396] loop2: detected capacity change from 0 to 512 [ 436.168014][T19328] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.175152][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.188261][T19328] bridge_slave_0: entered allmulticast mode [ 436.195207][T19328] bridge_slave_0: entered promiscuous mode [ 436.214391][T14270] hsr_slave_0: left promiscuous mode [ 436.231644][T14270] hsr_slave_1: left promiscuous mode [ 436.251407][T14270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.271017][T14270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.279911][T14270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.304900][T14270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.317140][T14270] veth1_macvtap: left promiscuous mode [ 436.342213][T14270] veth0_macvtap: left promiscuous mode [ 436.347742][T14270] veth1_vlan: left promiscuous mode [ 436.353056][T14270] veth0_vlan: left promiscuous mode [ 436.630903][T14270] team0 (unregistering): Port device team_slave_1 removed [ 436.647235][T14270] team0 (unregistering): Port device team_slave_0 removed [ 436.712331][T19219] veth1_vlan: entered promiscuous mode [ 436.722731][T19328] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.730292][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.741410][T19328] bridge_slave_1: entered allmulticast mode [ 436.748051][T19328] bridge_slave_1: entered promiscuous mode [ 436.788473][T19405] loop0: detected capacity change from 0 to 2048 [ 436.801544][T19328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.822005][T19219] veth0_macvtap: entered promiscuous mode [ 436.836408][T19405] loop0: p1 < > p4 [ 436.841668][T19405] loop0: p4 size 8388608 extends beyond EOD, truncated [ 436.854143][T19328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.879319][T19219] veth1_macvtap: entered promiscuous mode [ 436.899065][T19328] team0: Port device team_slave_0 added [ 436.906148][T19328] team0: Port device team_slave_1 added [ 436.924304][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.934813][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.944788][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.946473][T19410] loop0: detected capacity change from 0 to 512 [ 436.955224][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.955259][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.955350][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.955367][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.955392][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.955415][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.955427][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.955442][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.955456][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.063206][T19219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.109557][ C1] eth0: bad gso: type: 1, size: 1408 [ 437.131039][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.141602][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.151556][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.162162][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.172078][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.182541][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.192512][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.202918][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.212804][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.223259][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.233104][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.243518][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.256599][T19219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.280822][T19328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.287789][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.313839][T19328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.319951][T19410] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.336942][T19412] xt_bpf: check failed: parse error [ 437.343523][T19328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.350668][T19328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.376671][T19328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.466830][T19219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.475730][T19219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.484619][T19219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.493354][T19219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.500356][T19422] loop2: detected capacity change from 0 to 512 [ 437.527103][ T29] audit: type=1400 audit(1721778084.407:2393): avc: denied { listen } for pid=19425 comm="syz.4.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 437.598521][T19328] hsr_slave_0: entered promiscuous mode [ 437.612470][T19328] hsr_slave_1: entered promiscuous mode [ 437.649753][T19430] loop0: detected capacity change from 0 to 128 [ 437.663604][T19430] FAT-fs (loop0): bogus sectors per cluster 0 [ 437.669900][T19430] FAT-fs (loop0): Can't find a valid FAT filesystem [ 437.750184][T19438] loop4: detected capacity change from 0 to 512 [ 437.760075][T19438] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 437.780016][T19438] EXT4-fs (loop4): 1 truncate cleaned up [ 437.811373][ T29] audit: type=1400 audit(1721778084.687:2394): avc: denied { append } for pid=19429 comm="syz.0.4582" name="001" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 438.008017][ T29] audit: type=1400 audit(1721778084.887:2395): avc: denied { map } for pid=19442 comm="syz.3.4539" path="socket:[74979]" dev="sockfs" ino=74979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 438.045953][ T29] audit: type=1400 audit(1721778084.887:2396): avc: denied { accept } for pid=19442 comm="syz.3.4539" path="socket:[74979]" dev="sockfs" ino=74979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 438.470641][T19328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 438.494911][T19328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 438.504873][T19448] x_tables: unsorted entry at hook 3 [ 438.516526][T19328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.533424][T19328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.600239][T19328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.631603][T19328] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.643558][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.650637][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.680113][T19328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 438.690634][T19328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 438.732611][T19452] loop3: detected capacity change from 0 to 512 [ 438.760633][T19452] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 438.775169][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.782281][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.797750][T19452] EXT4-fs (loop3): invalid journal inode [ 438.847139][T19452] EXT4-fs (loop3): can't get journal size [ 438.864418][T19452] EXT4-fs (loop3): 1 truncate cleaned up [ 438.900893][T19328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.987062][T19461] loop4: detected capacity change from 0 to 512 [ 438.993962][T19461] ext4: Unknown parameter 'noacl' [ 439.126689][T19470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64734 sclass=netlink_tcpdiag_socket pid=19470 comm=syz.0.4590 [ 439.260228][T19328] veth0_vlan: entered promiscuous mode [ 439.264920][T19477] loop2: detected capacity change from 0 to 1024 [ 439.283456][T19328] veth1_vlan: entered promiscuous mode [ 439.291921][T19477] EXT4-fs: Ignoring removed orlov option [ 439.296680][T19328] veth0_macvtap: entered promiscuous mode [ 439.324308][T19328] veth1_macvtap: entered promiscuous mode [ 439.337372][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.348787][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.359412][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.370147][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.380206][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.390658][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.400804][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.411325][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.421351][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.431999][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.441903][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.452634][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.462525][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.473063][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.487208][T19328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.488604][T19485] FAULT_INJECTION: forcing a failure. [ 439.488604][T19485] name failslab, interval 1, probability 0, space 0, times 0 [ 439.495803][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.517433][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.527211][T19485] CPU: 0 UID: 0 PID: 19485 Comm: syz.0.4593 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 439.527260][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.527272][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.527284][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.537662][T19485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 439.537675][T19485] Call Trace: [ 439.548053][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.557811][T19485] [ 439.557819][T19485] dump_stack_lvl+0xf2/0x150 [ 439.568207][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.578218][T19485] dump_stack+0x15/0x20 [ 439.578251][T19485] should_fail_ex+0x229/0x230 [ 439.578276][T19485] ? hashtab_duplicate+0x10f/0x370 [ 439.581554][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.591319][T19485] should_failslab+0x8f/0xb0 [ 439.594244][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.598794][T19485] kmem_cache_alloc_noprof+0x4c/0x290 [ 439.609185][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.613306][T19485] hashtab_duplicate+0x10f/0x370 [ 439.618063][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.623133][T19485] ? __pfx_cond_bools_copy+0x10/0x10 [ 439.632984][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.637451][T19485] ? __pfx_cond_bools_destroy+0x10/0x10 [ 439.647852][T19328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.653173][T19485] cond_policydb_dup+0xdb/0x710 [ 439.662962][T19328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.667854][T19485] ? __kmalloc_node_track_caller_noprof+0x17e/0x380 [ 439.730571][T19485] security_set_bools+0xa8/0x350 [ 439.735587][T19485] ? sel_commit_bools_write+0x16a/0x260 [ 439.741124][T19485] sel_commit_bools_write+0x1e4/0x260 [ 439.746484][T19485] vfs_writev+0x402/0x880 [ 439.750801][T19485] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 439.756763][T19485] ? mutex_lock+0xd/0x40 [ 439.760997][T19485] do_writev+0xf8/0x220 [ 439.765195][T19485] __x64_sys_writev+0x45/0x50 [ 439.769894][T19485] x64_sys_call+0x1d63/0x2e00 [ 439.774566][T19485] do_syscall_64+0xc9/0x1c0 [ 439.779121][T19485] ? clear_bhb_loop+0x55/0xb0 [ 439.783782][T19485] ? clear_bhb_loop+0x55/0xb0 [ 439.788491][T19485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.794382][T19485] RIP: 0033:0x7fa6da315f19 [ 439.798784][T19485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.818382][T19485] RSP: 002b:00007fa6d8f76048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 439.826783][T19485] RAX: ffffffffffffffda RBX: 00007fa6da4a6038 RCX: 00007fa6da315f19 [ 439.834775][T19485] RDX: 0000000000000001 RSI: 00000000200025c0 RDI: 0000000000000003 [ 439.842785][T19485] RBP: 00007fa6d8f760a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.850829][T19485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.858786][T19485] R13: 000000000000006e R14: 00007fa6da4a6038 R15: 00007ffe536b1ba8 [ 439.866984][T19485] [ 440.155322][T19328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.170100][T19328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.178847][T19328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.187554][T19328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.196272][T19328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.213336][ C1] eth0: bad gso: type: 1, size: 1408 [ 440.226115][T19219] EXT4-fs unmount: 95 callbacks suppressed [ 440.226138][T19219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.377706][T19493] FAULT_INJECTION: forcing a failure. [ 440.377706][T19493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.390807][T19493] CPU: 1 UID: 0 PID: 19493 Comm: syz.2.4597 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 440.401375][T19493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 440.411424][T19493] Call Trace: [ 440.414687][T19493] [ 440.417704][T19493] dump_stack_lvl+0xf2/0x150 [ 440.422287][T19493] dump_stack+0x15/0x20 [ 440.426450][T19493] should_fail_ex+0x229/0x230 [ 440.431142][T19493] should_fail+0xb/0x10 [ 440.435365][T19493] should_fail_usercopy+0x1a/0x20 [ 440.440462][T19493] _copy_to_user+0x1e/0xa0 [ 440.444872][T19493] simple_read_from_buffer+0xa0/0x110 [ 440.450240][T19493] proc_fail_nth_read+0xfc/0x140 [ 440.455214][T19493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 440.460779][T19493] vfs_read+0x1a2/0x6e0 [ 440.464978][T19493] ? __rcu_read_unlock+0x4e/0x70 [ 440.470025][T19493] ? __fget_files+0x1da/0x210 [ 440.474700][T19493] ksys_read+0xeb/0x1b0 [ 440.478894][T19493] __x64_sys_read+0x42/0x50 [ 440.483501][T19493] x64_sys_call+0x2a36/0x2e00 [ 440.488179][T19493] do_syscall_64+0xc9/0x1c0 [ 440.492788][T19493] ? clear_bhb_loop+0x55/0xb0 [ 440.497566][T19493] ? clear_bhb_loop+0x55/0xb0 [ 440.502240][T19493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.508194][T19493] RIP: 0033:0x7f943ddd49fc [ 440.513598][T19493] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 440.533207][T19493] RSP: 002b:00007f943ca57040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 440.541771][T19493] RAX: ffffffffffffffda RBX: 00007f943df65f60 RCX: 00007f943ddd49fc [ 440.549787][T19493] RDX: 000000000000000f RSI: 00007f943ca570b0 RDI: 0000000000000005 [ 440.557757][T19493] RBP: 00007f943ca570a0 R08: 0000000000000000 R09: 0000000000000000 [ 440.565717][T19493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.573730][T19493] R13: 000000000000004d R14: 00007f943df65f60 R15: 00007ffdb57c8128 [ 440.581691][T19493] [ 440.587938][T19490] loop4: detected capacity change from 0 to 128 [ 440.604484][T19490] FAT-fs (loop4): bogus sectors per cluster 0 [ 440.610628][T19490] FAT-fs (loop4): Can't find a valid FAT filesystem [ 440.782234][T19508] loop2: detected capacity change from 0 to 512 [ 440.789990][T19508] ext4: Unknown parameter 'dont_measure' [ 440.812486][ T29] audit: type=1400 audit(1721778087.667:2397): avc: denied { map } for pid=19502 comm="syz.2.4598" path="socket:[74140]" dev="sockfs" ino=74140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 440.824158][T19513] loop0: detected capacity change from 0 to 512 [ 440.843459][T19513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 440.854581][T19513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002] [ 440.862576][T19513] System zones: 1-12 [ 440.866818][T19513] EXT4-fs (loop0): 1 truncate cleaned up [ 440.872898][T19513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.924170][ T29] audit: type=1400 audit(1721778087.667:2398): avc: denied { read } for pid=19502 comm="syz.2.4598" path="socket:[74140]" dev="sockfs" ino=74140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 440.927265][T19160] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.997221][T19523] loop0: detected capacity change from 0 to 512 [ 441.004509][T19523] ext4: Unknown parameter 'noacl' [ 441.076642][T19526] loop2: detected capacity change from 0 to 512 [ 441.137185][T19528] xt_connbytes: Forcing CT accounting to be enabled [ 441.144152][T19528] Cannot find add_set index 0 as target [ 441.162638][T19531] loop4: detected capacity change from 0 to 2048 [ 441.192250][T19531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.274296][T19537] loop3: detected capacity change from 0 to 1024 [ 441.283722][T19537] EXT4-fs: Ignoring removed orlov option [ 441.309612][T19537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.352240][T19538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 441.367164][T19538] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 256 with max blocks 2 with error 28 [ 441.441755][T19538] EXT4-fs (loop4): This should not happen!! Data will be lost [ 441.441755][T19538] [ 441.441771][T19538] EXT4-fs (loop4): Total free blocks count 0 [ 441.441784][T19538] EXT4-fs (loop4): Free/Dirty block details [ 441.463853][T19538] EXT4-fs (loop4): free_blocks=2415919104 [ 441.465040][T14268] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 441.469709][T19538] EXT4-fs (loop4): dirty_blocks=8192 [ 441.469722][T19538] EXT4-fs (loop4): Block reservation details [ 441.469730][T19538] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 441.472366][T19538] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 256 with max blocks 1 with error 28 [ 441.482137][T14268] EXT4-fs (loop3): This should not happen!! Data will be lost [ 441.482137][T14268] [ 441.522381][T14268] EXT4-fs (loop3): Total free blocks count 0 [ 441.528468][T14268] EXT4-fs (loop3): Free/Dirty block details [ 441.534357][T14268] EXT4-fs (loop3): free_blocks=0 [ 441.539423][T14268] EXT4-fs (loop3): dirty_blocks=0 [ 441.544442][T14268] EXT4-fs (loop3): Block reservation details [ 441.550618][T14268] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 441.560448][T19219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.712035][T19552] FAULT_INJECTION: forcing a failure. [ 441.712035][T19552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.714685][T19554] loop3: detected capacity change from 0 to 512 [ 441.725114][T19552] CPU: 1 UID: 0 PID: 19552 Comm: syz.1.4614 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 441.741666][T19552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 441.751765][T19552] Call Trace: [ 441.755062][T19552] [ 441.757982][T19552] dump_stack_lvl+0xf2/0x150 [ 441.762615][T19552] dump_stack+0x15/0x20 [ 441.766812][T19552] should_fail_ex+0x229/0x230 [ 441.771526][T19552] should_fail+0xb/0x10 [ 441.775696][T19552] should_fail_usercopy+0x1a/0x20 [ 441.780729][T19552] _copy_from_user+0x1e/0xd0 [ 441.785379][T19552] kstrtouint_from_user+0x76/0xe0 [ 441.790406][T19552] proc_fail_nth_write+0x4f/0x160 [ 441.795446][T19552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 441.801068][T19552] vfs_write+0x28b/0x900 [ 441.805304][T19552] ? __fget_files+0x1da/0x210 [ 441.809986][T19552] ksys_write+0xeb/0x1b0 [ 441.814291][T19552] __x64_sys_write+0x42/0x50 [ 441.818909][T19552] x64_sys_call+0x2a40/0x2e00 [ 441.823577][T19552] do_syscall_64+0xc9/0x1c0 [ 441.828067][T19552] ? clear_bhb_loop+0x55/0xb0 [ 441.832766][T19552] ? clear_bhb_loop+0x55/0xb0 [ 441.837532][T19552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.843498][T19552] RIP: 0033:0x7fbd4e1c4a9f [ 441.847959][T19552] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 441.867571][T19552] RSP: 002b:00007fbd4ce47040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 441.876048][T19552] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd4e1c4a9f [ 441.884019][T19552] RDX: 0000000000000001 RSI: 00007fbd4ce470b0 RDI: 0000000000000005 [ 441.892078][T19552] RBP: 00007fbd4ce470a0 R08: 0000000000000000 R09: 0000000000000000 [ 441.900044][T19552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 441.908016][T19552] R13: 000000000000000b R14: 00007fbd4e355f60 R15: 00007ffda03b5e78 [ 441.915991][T19552] [ 442.032876][T19554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.047393][T19554] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 442.103004][T19559] loop4: detected capacity change from 0 to 512 [ 442.172943][T19564] vlan2: entered promiscuous mode [ 442.178036][T19564] bond0: entered promiscuous mode [ 442.182077][ T29] audit: type=1400 audit(1721778089.037:2399): avc: denied { getattr } for pid=19565 comm="syz.1.4619" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 442.183163][T19564] bond_slave_0: entered promiscuous mode [ 442.183225][T19564] bond_slave_1: entered promiscuous mode [ 442.247187][T19559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.250104][T19564] vlan2: entered allmulticast mode [ 442.255772][T19559] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.267886][T19564] bond0: entered allmulticast mode [ 442.267900][T19564] bond_slave_0: entered allmulticast mode [ 442.267913][T19564] bond_slave_1: entered allmulticast mode [ 442.329981][T19219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.357126][T19564] bond0: left allmulticast mode [ 442.362038][T19564] bond_slave_0: left allmulticast mode [ 442.388405][T19576] loop3: detected capacity change from 0 to 2048 [ 442.395440][T19579] loop2: detected capacity change from 0 to 1024 [ 442.395654][T19564] bond_slave_1: left allmulticast mode [ 442.395679][T19564] bond0: left promiscuous mode [ 442.395691][T19564] bond_slave_0: left promiscuous mode [ 442.395810][T19564] bond_slave_1: left promiscuous mode [ 442.405113][T19579] EXT4-fs: Ignoring removed orlov option [ 442.516639][T19576] loop3: p1 < > p4 [ 442.524050][T19576] loop3: p4 size 8388608 extends beyond EOD, truncated [ 442.532952][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.595455][T19585] loop4: detected capacity change from 0 to 512 [ 442.598459][T19586] loop3: detected capacity change from 0 to 512 [ 442.608103][T19585] ext4: Unknown parameter 'noacl' [ 443.606183][T19603] loop2: detected capacity change from 0 to 512 [ 443.749278][T19609] loop4: detected capacity change from 0 to 512 [ 443.776999][T19609] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 443.810589][T19609] EXT4-fs (loop4): invalid journal inode [ 443.843184][T19609] EXT4-fs (loop4): can't get journal size [ 443.862106][T19609] EXT4-fs (loop4): 1 truncate cleaned up [ 443.873409][T19618] netlink: 'syz.3.4635': attribute type 11 has an invalid length. [ 443.883856][T19609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.896671][ T29] audit: type=1400 audit(1721778090.777:2400): avc: denied { setopt } for pid=19617 comm="syz.3.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 443.936373][T19618] loop3: detected capacity change from 0 to 1024 [ 443.951820][T19618] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 443.966906][T19618] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 443.974888][T19618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e018, mo2=0000] [ 443.984938][T19618] System zones: 0-1, 3-12 [ 443.990770][T19618] EXT4-fs (loop3): orphan cleanup on readonly fs [ 443.997474][T19618] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.4635: Freeing blocks not in datazone - block = 0, count = 4096 [ 444.012683][T19618] EXT4-fs (loop3): 1 orphan inode deleted [ 444.019375][T19618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.052672][T19618] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #2: block 16: comm syz.3.4635: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 444.078975][ T29] audit: type=1400 audit(1721778090.957:2401): avc: denied { ioctl } for pid=19617 comm="syz.3.4635" path="socket:[75597]" dev="sockfs" ino=75597 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 444.160440][T19219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.343751][T19632] loop3: detected capacity change from 0 to 128 [ 444.362798][T19632] FAT-fs (loop3): bogus sectors per cluster 0 [ 444.368961][T19632] FAT-fs (loop3): Can't find a valid FAT filesystem [ 444.928458][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.971363][T19646] loop4: detected capacity change from 0 to 512 [ 444.993277][T19646] ext4: Unknown parameter 'noacl' [ 445.149229][ T29] audit: type=1326 audit(1721778092.027:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e12435f19 code=0x7ffc0000 [ 445.173010][ T29] audit: type=1326 audit(1721778092.027:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e12435f19 code=0x7ffc0000 [ 445.201183][ T29] audit: type=1326 audit(1721778092.057:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8e12435f19 code=0x7ffc0000 [ 445.224771][ T29] audit: type=1326 audit(1721778092.057:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e12435f19 code=0x7ffc0000 [ 445.248245][ T29] audit: type=1326 audit(1721778092.057:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.3.4644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e12435f19 code=0x7ffc0000 [ 445.301529][T19652] netlink: 'syz.0.4645': attribute type 4 has an invalid length. [ 445.343004][T19652] netlink: 'syz.0.4645': attribute type 17 has an invalid length. [ 445.404474][T19658] FAULT_INJECTION: forcing a failure. [ 445.404474][T19658] name failslab, interval 1, probability 0, space 0, times 0 [ 445.425542][T19658] CPU: 0 UID: 0 PID: 19658 Comm: syz.0.4647 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 445.436023][T19658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 445.446065][T19658] Call Trace: [ 445.449327][T19658] [ 445.452240][T19658] dump_stack_lvl+0xf2/0x150 [ 445.456812][T19658] dump_stack+0x15/0x20 [ 445.460958][T19658] should_fail_ex+0x229/0x230 [ 445.465622][T19658] ? audit_log_start+0x34c/0x6b0 [ 445.470655][T19658] should_failslab+0x8f/0xb0 [ 445.475232][T19658] kmem_cache_alloc_noprof+0x4c/0x290 [ 445.480630][T19658] audit_log_start+0x34c/0x6b0 [ 445.485376][T19658] ? __bpf_prog_run32+0x74/0xa0 [ 445.490350][T19658] audit_seccomp+0x4b/0x130 [ 445.494897][T19658] __seccomp_filter+0x6fa/0x1180 [ 445.499872][T19658] ? call_rcu+0x2fb/0x430 [ 445.504193][T19658] __secure_computing+0x9f/0x1c0 [ 445.509112][T19658] syscall_trace_enter+0xd1/0x1f0 [ 445.514121][T19658] do_syscall_64+0xaa/0x1c0 [ 445.518606][T19658] ? clear_bhb_loop+0x55/0xb0 [ 445.523323][T19658] ? clear_bhb_loop+0x55/0xb0 [ 445.527985][T19658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.533894][T19658] RIP: 0033:0x7fa6da3149fc [ 445.538328][T19658] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 445.557948][T19658] RSP: 002b:00007fa6d8f97040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 445.566375][T19658] RAX: ffffffffffffffda RBX: 00007fa6da4a5f60 RCX: 00007fa6da3149fc [ 445.574325][T19658] RDX: 000000000000000f RSI: 00007fa6d8f970b0 RDI: 0000000000000003 [ 445.582313][T19658] RBP: 00007fa6d8f970a0 R08: 0000000000000000 R09: 0000000000000000 [ 445.590371][T19658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.598323][T19658] R13: 000000000000000b R14: 00007fa6da4a5f60 R15: 00007ffe536b1ba8 [ 445.606279][T19658] [ 445.898082][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 445.898102][ T29] audit: type=1400 audit(1721778092.767:2470): avc: denied { mount } for pid=19663 comm="syz.0.4650" name="/" dev="ramfs" ino=74326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 445.932578][T19664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4650'. [ 445.948148][T19664] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 445.954668][T19664] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 445.962366][T19664] vhci_hcd vhci_hcd.0: Device attached [ 445.985044][T19669] vhci_hcd: connection closed [ 445.985124][T13948] vhci_hcd: stop threads [ 446.075775][T13948] vhci_hcd: release socket [ 446.080241][T13948] vhci_hcd: disconnect device [ 446.092253][T19676] loop2: detected capacity change from 0 to 2048 [ 446.283657][T19677] loop4: detected capacity change from 0 to 512 [ 446.290740][T19677] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 446.306291][T19677] EXT4-fs (loop4): 1 truncate cleaned up [ 446.312340][T19677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.456727][T19676] loop2: p1 < > p4 [ 446.464051][T19676] loop2: p4 size 8388608 extends beyond EOD, truncated [ 446.688633][ T29] audit: type=1400 audit(1721778093.567:2471): avc: denied { unmount } for pid=19160 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 446.776229][ T29] audit: type=1400 audit(1721778093.657:2472): avc: denied { write } for pid=19680 comm="syz.0.4654" laddr=172.20.20.170 lport=59372 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 447.031250][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.063360][T19686] loop3: detected capacity change from 0 to 1024 [ 447.071168][T19686] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 447.099034][T19686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.115293][T19686] netlink: 'syz.3.4657': attribute type 4 has an invalid length. [ 447.144090][ T29] audit: type=1400 audit(1721778094.027:2473): avc: denied { accept } for pid=19687 comm="syz.4.4656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 447.176591][T19686] netlink: 'syz.3.4657': attribute type 17 has an invalid length. [ 447.239426][T19694] loop1: detected capacity change from 0 to 1024 [ 447.259872][T19694] EXT4-fs: Ignoring removed orlov option [ 447.313195][T19219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.313307][T19694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.405172][T19702] loop3: detected capacity change from 0 to 1024 [ 447.432804][T19702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.456775][ T29] audit: type=1400 audit(1721778094.327:2474): avc: denied { mounton } for pid=19701 comm="syz.3.4660" path="/22/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 447.481028][T19702] Trying to write to read-only block-device loop3 [ 447.507189][T14270] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 447.536672][T14270] EXT4-fs (loop1): This should not happen!! Data will be lost [ 447.536672][T14270] [ 447.546339][T14270] EXT4-fs (loop1): Total free blocks count 0 [ 447.567132][T14270] EXT4-fs (loop1): Free/Dirty block details [ 447.573137][T14270] EXT4-fs (loop1): free_blocks=0 [ 447.578096][T14270] EXT4-fs (loop1): dirty_blocks=0 [ 447.596865][T14270] EXT4-fs (loop1): Block reservation details [ 447.602860][T14270] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 447.609674][T19702] netlink: 'syz.3.4660': attribute type 4 has an invalid length. [ 447.617487][T19702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 447.630498][T19702] geneve2: entered promiscuous mode [ 447.635844][T19702] geneve2: entered allmulticast mode [ 447.658275][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.711385][ T29] audit: type=1400 audit(1721778094.587:2475): avc: denied { unlink } for pid=19219 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 447.817428][ T29] audit: type=1326 audit(1721778094.697:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19724 comm="syz.1.4662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd4e1c5f19 code=0x0 [ 447.841567][T19709] loop4: detected capacity change from 0 to 128 [ 447.850565][T19709] vfat: Unknown parameter '' [ 447.859804][T19219] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.009052][T19735] loop2: detected capacity change from 0 to 512 [ 448.567561][T19740] loop3: detected capacity change from 0 to 512 [ 448.813809][T19748] loop1: detected capacity change from 0 to 1024 [ 448.821508][T19748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 448.879895][T19748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.905306][T19751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 448.911903][T19751] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 448.919640][T19751] vhci_hcd vhci_hcd.0: Device attached [ 448.927239][T19748] netlink: 'syz.1.4670': attribute type 4 has an invalid length. [ 448.953906][T19748] netlink: 'syz.1.4670': attribute type 17 has an invalid length. [ 449.028582][T14273] bridge_slave_1: left allmulticast mode [ 449.034242][T14273] bridge_slave_1: left promiscuous mode [ 449.039961][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.050849][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.062379][T14273] bridge_slave_0: left promiscuous mode [ 449.068119][T14273] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.206470][T19755] vhci_hcd: connection closed [ 449.209541][T14275] vhci_hcd: stop threads [ 449.218482][T14275] vhci_hcd: release socket [ 449.222960][T14275] vhci_hcd: disconnect device [ 449.227412][T19769] loop4: detected capacity change from 0 to 256 [ 449.240642][T19771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19771 comm=syz.0.4673 [ 449.264546][T14273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.281088][T14273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.308445][T14273] bond0 (unregistering): Released all slaves [ 449.322115][T14273] bond1 (unregistering): Released all slaves [ 449.334022][T19769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4675'. [ 449.368352][T19771] macvlan0: entered allmulticast mode [ 449.442681][T19766] hsr0: entered promiscuous mode [ 449.485986][T19770] hsr_slave_0: left promiscuous mode [ 449.491968][T19770] hsr_slave_1: left promiscuous mode [ 449.522019][T19770] hsr0 (unregistering): left promiscuous mode [ 449.598510][T14273] hsr_slave_0: left promiscuous mode [ 449.604594][T14273] hsr_slave_1: left promiscuous mode [ 449.633369][ C1] eth0: bad gso: type: 1, size: 1408 [ 449.640677][T14273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.648199][T14273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.668198][T19781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4677'. [ 449.679622][T14273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.684281][T19782] loop1: detected capacity change from 0 to 1024 [ 449.687151][T14273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.723320][T14273] veth1_macvtap: left promiscuous mode [ 449.728836][T14273] veth0_macvtap: left promiscuous mode [ 449.734402][T14273] veth1_vlan: left promiscuous mode [ 449.739751][T14273] veth0_vlan: left promiscuous mode [ 449.753962][T19782] EXT4-fs: Ignoring removed orlov option [ 449.807089][T19782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.901126][T14274] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 449.913557][T14274] EXT4-fs (loop1): This should not happen!! Data will be lost [ 449.913557][T14274] [ 449.923249][T14274] EXT4-fs (loop1): Total free blocks count 0 [ 449.929308][T14274] EXT4-fs (loop1): Free/Dirty block details [ 449.935222][T14274] EXT4-fs (loop1): free_blocks=0 [ 449.940234][T14274] EXT4-fs (loop1): dirty_blocks=0 [ 449.945509][T14274] EXT4-fs (loop1): Block reservation details [ 449.951534][T14274] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 449.958356][T14273] team0 (unregistering): Port device team_slave_1 removed [ 449.958943][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.006525][T14273] team0 (unregistering): Port device team_slave_0 removed [ 450.050907][T14273] bridge_slave_0 (unregistering): left allmulticast mode [ 450.091167][ T29] audit: type=1400 audit(1721778096.967:2477): avc: denied { bind } for pid=19793 comm="syz.1.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 450.110751][ T29] audit: type=1400 audit(1721778096.967:2478): avc: denied { node_bind } for pid=19793 comm="syz.1.4681" saddr=fc00:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 450.204390][T19796] loop1: detected capacity change from 0 to 1024 [ 450.228183][T19796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 450.239921][T19804] loop4: detected capacity change from 0 to 256 [ 450.248186][T19796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.269931][T19804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4686'. [ 450.285443][T19806] loop3: detected capacity change from 0 to 512 [ 450.295807][T19796] netlink: 'syz.1.4682': attribute type 4 has an invalid length. [ 450.354580][T19796] netlink: 'syz.1.4682': attribute type 17 has an invalid length. [ 450.527747][T19813] loop2: detected capacity change from 0 to 512 [ 450.633757][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.380290][T19830] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 451.384483][ T29] audit: type=1400 audit(1721778098.257:2479): avc: denied { create } for pid=19829 comm="syz.0.4693" name="cpuset.effective_cpus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 451.476448][ T29] audit: type=1400 audit(1721778098.257:2480): avc: denied { associate } for pid=19829 comm="syz.0.4693" name="cpuset.effective_cpus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 451.568863][ T29] audit: type=1400 audit(1721778098.257:2481): avc: denied { read append open } for pid=19829 comm="syz.0.4693" path="/45/cpuset.effective_cpus" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 451.683601][ T29] audit: type=1400 audit(1721778098.557:2482): avc: denied { unlink } for pid=19160 comm="syz-executor" name="cpuset.effective_cpus" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 451.752371][T19854] loop4: detected capacity change from 0 to 128 [ 451.901399][T19851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4699'. [ 451.913630][T19854] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.920762][ T29] audit: type=1400 audit(1721778098.797:2483): avc: denied { create } for pid=19850 comm="syz.0.4699" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 451.947421][ T29] audit: type=1400 audit(1721778098.797:2484): avc: denied { associate } for pid=19850 comm="syz.0.4699" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=8E [ 452.017494][ T29] audit: type=1400 audit(1721778098.857:2485): avc: denied { read write open } for pid=19850 comm="syz.0.4699" path="/47/file1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 452.025304][T19863] loop3: detected capacity change from 0 to 512 [ 452.042164][ T29] audit: type=1400 audit(1721778098.887:2486): avc: denied { lock } for pid=19850 comm="syz.0.4699" path="/47/file1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 452.042205][ T29] audit: type=1400 audit(1721778098.887:2487): avc: denied { setattr } for pid=19850 comm="syz.0.4699" name="file1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 452.102408][T19854] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 452.237573][T19867] loop1: detected capacity change from 0 to 512 [ 452.267604][T19867] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 452.294864][T19867] EXT4-fs (loop1): invalid journal inode [ 452.301840][ T29] audit: type=1400 audit(1721778099.157:2488): avc: denied { unlink } for pid=19160 comm="syz-executor" name="file1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 452.345123][T19867] EXT4-fs (loop1): can't get journal size [ 452.368477][T19867] EXT4-fs (loop1): 1 truncate cleaned up [ 452.384721][T19087] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.389275][T19867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.423502][T19870] netlink: 'syz.0.4703': attribute type 4 has an invalid length. [ 452.524668][T19870] netlink: 'syz.0.4703': attribute type 17 has an invalid length. [ 452.649000][T19874] loop4: detected capacity change from 0 to 128 [ 452.902033][T19880] loop4: detected capacity change from 0 to 2048 [ 452.994371][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.008545][T19880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.034119][T19880] FAULT_INJECTION: forcing a failure. [ 453.034119][T19880] name failslab, interval 1, probability 0, space 0, times 0 [ 453.046859][T19880] CPU: 0 UID: 0 PID: 19880 Comm: syz.4.4706 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 453.048944][T19888] loop1: detected capacity change from 0 to 512 [ 453.057266][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 453.057280][T19880] Call Trace: [ 453.057287][T19880] [ 453.057294][T19880] dump_stack_lvl+0xf2/0x150 [ 453.057317][T19880] dump_stack+0x15/0x20 [ 453.057333][T19880] should_fail_ex+0x229/0x230 [ 453.057359][T19880] ? skb_clone+0x154/0x1f0 [ 453.097693][T19880] should_failslab+0x8f/0xb0 [ 453.102294][T19880] kmem_cache_alloc_noprof+0x4c/0x290 [ 453.107675][T19880] skb_clone+0x154/0x1f0 [ 453.111925][T19880] __netlink_deliver_tap+0x2bd/0x4c0 [ 453.117306][T19880] netlink_sendskb+0x123/0x140 [ 453.122109][T19880] netlink_unicast+0x291/0x670 [ 453.126871][T19880] netlink_ack+0x4c4/0x4f0 [ 453.131386][T19880] netlink_rcv_skb+0x19c/0x230 [ 453.136144][T19880] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 453.141658][T19880] rtnetlink_rcv+0x1c/0x30 [ 453.146129][T19880] netlink_unicast+0x593/0x670 [ 453.150885][T19880] netlink_sendmsg+0x5cc/0x6e0 [ 453.155646][T19880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.160921][T19880] __sock_sendmsg+0x140/0x180 [ 453.165583][T19880] ____sys_sendmsg+0x312/0x410 [ 453.170360][T19880] __sys_sendmsg+0x1e9/0x280 [ 453.174950][T19880] __x64_sys_sendmsg+0x46/0x50 [ 453.179715][T19880] x64_sys_call+0x26f8/0x2e00 [ 453.184382][T19880] do_syscall_64+0xc9/0x1c0 [ 453.188924][T19880] ? clear_bhb_loop+0x55/0xb0 [ 453.193681][T19880] ? clear_bhb_loop+0x55/0xb0 [ 453.198360][T19880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.204302][T19880] RIP: 0033:0x7f76f8395f19 [ 453.208784][T19880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.228784][T19880] RSP: 002b:00007f76f7017048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.237266][T19880] RAX: ffffffffffffffda RBX: 00007f76f8525f60 RCX: 00007f76f8395f19 [ 453.245223][T19880] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000007 [ 453.253212][T19880] RBP: 00007f76f70170a0 R08: 0000000000000000 R09: 0000000000000000 [ 453.261168][T19880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.269123][T19880] R13: 000000000000000b R14: 00007f76f8525f60 R15: 00007ffce0cb3ef8 [ 453.277152][T19880] [ 453.309025][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.315923][T19888] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 453.328775][T19888] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 453.339106][T19888] EXT4-fs (loop1): group descriptors corrupted! [ 453.354646][T19897] loop3: detected capacity change from 0 to 1024 [ 453.484979][T19897] netlink: 'syz.3.4711': attribute type 25 has an invalid length. [ 453.492896][T19897] netlink: 'syz.3.4711': attribute type 7 has an invalid length. [ 453.506519][T19903] loop4: detected capacity change from 0 to 2048 [ 453.513939][T19898] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 453.598548][T19903] loop4: p1 < > p4 [ 453.604135][T19903] loop4: p4 size 8388608 extends beyond EOD, truncated [ 453.864818][T19910] loop2: detected capacity change from 0 to 1024 [ 453.873410][T19910] EXT4-fs: Ignoring removed orlov option [ 453.969612][T19919] loop1: detected capacity change from 0 to 1024 [ 453.978684][T19919] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 453.995404][T19919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.012458][T19919] netlink: 'syz.1.4716': attribute type 4 has an invalid length. [ 454.038101][T19919] netlink: 'syz.1.4716': attribute type 17 has an invalid length. [ 454.086941][T19930] xt_connbytes: Forcing CT accounting to be enabled [ 454.115228][T19934] loop3: detected capacity change from 0 to 512 [ 454.130885][T19930] Cannot find add_set index 0 as target [ 454.227425][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.351842][T19948] loop1: detected capacity change from 0 to 512 [ 454.401393][T19948] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 454.412540][T19943] loop2: detected capacity change from 0 to 2048 [ 454.428664][T19948] EXT4-fs (loop1): invalid journal inode [ 454.444033][T19948] EXT4-fs (loop1): can't get journal size [ 454.458880][T19943] loop2: p1 < > p4 [ 454.465109][T19943] loop2: p4 size 8388608 extends beyond EOD, truncated [ 454.491293][T19948] EXT4-fs (loop1): 1 truncate cleaned up [ 454.498181][T19948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.583501][ C1] eth0: bad gso: type: 1, size: 1408 [ 454.595183][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.136903][T19972] FAULT_INJECTION: forcing a failure. [ 455.136903][T19972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.150073][T19972] CPU: 0 UID: 0 PID: 19972 Comm: syz.4.4732 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 455.160548][T19972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 455.170667][T19972] Call Trace: [ 455.174097][T19972] [ 455.177034][T19972] dump_stack_lvl+0xf2/0x150 [ 455.181636][T19972] dump_stack+0x15/0x20 [ 455.185818][T19972] should_fail_ex+0x229/0x230 [ 455.190519][T19972] should_fail+0xb/0x10 [ 455.194674][T19972] should_fail_usercopy+0x1a/0x20 [ 455.199822][T19972] _copy_to_user+0x1e/0xa0 [ 455.204254][T19972] simple_read_from_buffer+0xa0/0x110 [ 455.209639][T19972] proc_fail_nth_read+0xfc/0x140 [ 455.214585][T19972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.220239][T19972] vfs_read+0x1a2/0x6e0 [ 455.224463][T19972] ? __rcu_read_unlock+0x4e/0x70 [ 455.229394][T19972] ? __fget_files+0x1da/0x210 [ 455.234108][T19972] ksys_read+0xeb/0x1b0 [ 455.238312][T19972] __x64_sys_read+0x42/0x50 [ 455.242835][T19972] x64_sys_call+0x2a36/0x2e00 [ 455.247546][T19972] do_syscall_64+0xc9/0x1c0 [ 455.252196][T19972] ? clear_bhb_loop+0x55/0xb0 [ 455.256861][T19972] ? clear_bhb_loop+0x55/0xb0 [ 455.261600][T19972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.267502][T19972] RIP: 0033:0x7f76f83949fc [ 455.271925][T19972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 455.291538][T19972] RSP: 002b:00007f76f7017040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.299965][T19972] RAX: ffffffffffffffda RBX: 00007f76f8525f60 RCX: 00007f76f83949fc [ 455.307941][T19972] RDX: 000000000000000f RSI: 00007f76f70170b0 RDI: 0000000000000006 [ 455.315959][T19972] RBP: 00007f76f70170a0 R08: 0000000000000000 R09: 0000000000000000 [ 455.323948][T19972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.332034][T19972] R13: 000000000000000b R14: 00007f76f8525f60 R15: 00007ffce0cb3ef8 [ 455.340033][T19972] [ 455.542352][T19995] loop4: detected capacity change from 0 to 512 [ 455.558659][T19995] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 455.575955][T19995] EXT4-fs (loop4): invalid journal inode [ 455.582792][T19995] EXT4-fs (loop4): can't get journal size [ 455.613915][T19995] EXT4-fs (loop4): 1 truncate cleaned up [ 455.634402][T19995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.740340][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.778802][T19999] loop4: detected capacity change from 0 to 512 [ 455.796861][T19999] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 455.806338][T19999] EXT4-fs (loop4): invalid journal inode [ 455.811993][T19999] EXT4-fs (loop4): can't get journal size [ 455.830911][T19999] EXT4-fs (loop4): 1 truncate cleaned up [ 455.858285][T19999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.891361][ C1] eth0: bad gso: type: 1, size: 1408 [ 455.947085][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.965156][T20004] loop3: detected capacity change from 0 to 128 [ 456.117894][T20014] loop4: detected capacity change from 0 to 512 [ 456.125909][T20014] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 456.151974][T20014] EXT4-fs (loop4): 1 truncate cleaned up [ 456.158647][T20014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.244781][T20007] loop2: detected capacity change from 0 to 2048 [ 456.297920][T20007] loop2: p1 < > p4 [ 456.319376][T20007] loop2: p4 size 8388608 extends beyond EOD, truncated [ 456.709371][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 456.715404][ T29] audit: type=1400 audit(1721778103.587:2492): avc: denied { write } for pid=20023 comm="syz.0.4744" name="netfilter" dev="proc" ino=4026533133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 456.733397][T20026] loop3: detected capacity change from 0 to 1024 [ 456.756748][T20026] EXT4-fs: Ignoring removed orlov option [ 456.782742][ T29] audit: type=1400 audit(1721778103.627:2493): avc: denied { add_name } for pid=20023 comm="syz.0.4744" name="cpuacct.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 456.804176][ T29] audit: type=1400 audit(1721778103.627:2494): avc: denied { create } for pid=20023 comm="syz.0.4744" name="cpuacct.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 456.825133][ T29] audit: type=1400 audit(1721778103.627:2495): avc: denied { associate } for pid=20023 comm="syz.0.4744" name="cpuacct.stat" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 457.088352][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.172512][T20045] loop3: detected capacity change from 0 to 512 [ 457.183164][T20042] loop4: detected capacity change from 0 to 256 [ 457.224651][T20042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4748'. [ 457.275731][ C1] eth0: bad gso: type: 1, size: 1408 [ 457.359483][T20057] netlink: 'syz.4.4753': attribute type 3 has an invalid length. [ 457.385185][T20057] loop4: detected capacity change from 0 to 128 [ 457.400353][T20057] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 457.496549][T20061] loop4: detected capacity change from 0 to 1024 [ 457.512777][T20061] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 457.532999][T20061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.561686][T20061] netlink: 'syz.4.4755': attribute type 4 has an invalid length. [ 457.650350][T20061] netlink: 'syz.4.4755': attribute type 17 has an invalid length. [ 457.757662][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.818110][T20066] loop4: detected capacity change from 0 to 764 [ 457.871024][ T29] audit: type=1326 audit(1721778104.747:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f8395f19 code=0x7ffc0000 [ 457.894801][ T29] audit: type=1326 audit(1721778104.747:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f8395f19 code=0x7ffc0000 [ 457.918984][ T29] audit: type=1326 audit(1721778104.747:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f76f8395f19 code=0x7ffc0000 [ 457.942685][ T29] audit: type=1326 audit(1721778104.747:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f8395f19 code=0x7ffc0000 [ 457.966202][ T29] audit: type=1326 audit(1721778104.747:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f8395f19 code=0x7ffc0000 [ 457.990084][ T29] audit: type=1326 audit(1721778104.747:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20067 comm="syz.4.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76f8395f19 code=0x7ffc0000 [ 458.113421][T20073] Cannot find add_set index 0 as target [ 458.233948][T20088] loop4: detected capacity change from 0 to 512 [ 458.242278][T20088] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 458.272533][T20088] EXT4-fs (loop4): invalid journal inode [ 458.278532][T20088] EXT4-fs (loop4): can't get journal size [ 458.288589][T20088] EXT4-fs (loop4): 1 truncate cleaned up [ 458.295885][T20088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.518874][T20095] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.563624][T20099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4765'. [ 458.585252][T20099] loop3: detected capacity change from 0 to 512 [ 458.595363][T20099] EXT4-fs: Mount option(s) incompatible with ext2 [ 458.653915][T20098] loop1: detected capacity change from 0 to 512 [ 458.674465][T20098] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 458.743047][T20098] EXT4-fs (loop1): invalid journal inode [ 458.749203][T20098] EXT4-fs (loop1): can't get journal size [ 458.770591][T20098] EXT4-fs (loop1): 1 truncate cleaned up [ 458.789553][T20098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.052338][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.069328][T20110] rdma_op ffff888103e74580 conn xmit_rdma 0000000000000000 [ 459.201097][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.230717][T20118] tipc: Started in network mode [ 459.235666][T20118] tipc: Node identity ac1414aa, cluster identity 4711 [ 459.244785][T20118] tipc: New replicast peer: 0.0.0.0 [ 459.250166][T20118] tipc: Enabled bearer , priority 10 [ 459.322679][T20121] xt_connbytes: Forcing CT accounting to be enabled [ 459.329526][T20121] Cannot find add_set index 0 as target [ 459.391132][T20119] geneve3: entered promiscuous mode [ 459.396485][T20119] geneve3: entered allmulticast mode [ 459.409334][T20119] team0: Device geneve3 is up. Set it down before adding it as a team port [ 459.513662][ C1] eth0: bad gso: type: 1, size: 1408 [ 459.544102][T20142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4774'. [ 459.684053][ C1] eth0: bad gso: type: 1, size: 1408 [ 459.689302][T20148] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 459.723969][ C1] eth0: bad gso: type: 1, size: 1408 [ 459.760464][T20152] FAULT_INJECTION: forcing a failure. [ 459.760464][T20152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.773763][T20152] CPU: 0 UID: 0 PID: 20152 Comm: syz.0.4781 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 459.784169][T20152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 459.794336][T20152] Call Trace: [ 459.797603][T20152] [ 459.800630][T20152] dump_stack_lvl+0xf2/0x150 [ 459.805331][T20152] dump_stack+0x15/0x20 [ 459.809520][T20152] should_fail_ex+0x229/0x230 [ 459.814257][T20152] should_fail+0xb/0x10 [ 459.818405][T20152] should_fail_usercopy+0x1a/0x20 [ 459.823440][T20152] _copy_from_user+0x1e/0xd0 [ 459.828110][T20152] copy_msghdr_from_user+0x54/0x2a0 [ 459.833432][T20152] __sys_sendmsg+0x17d/0x280 [ 459.838060][T20152] __x64_sys_sendmsg+0x46/0x50 [ 459.842834][T20152] x64_sys_call+0x26f8/0x2e00 [ 459.847527][T20152] do_syscall_64+0xc9/0x1c0 [ 459.852017][T20152] ? clear_bhb_loop+0x55/0xb0 [ 459.856693][T20152] ? clear_bhb_loop+0x55/0xb0 [ 459.861462][T20152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.867413][T20152] RIP: 0033:0x7fa6da315f19 [ 459.872130][T20152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.891724][T20152] RSP: 002b:00007fa6d8f97048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.900124][T20152] RAX: ffffffffffffffda RBX: 00007fa6da4a5f60 RCX: 00007fa6da315f19 [ 459.908080][T20152] RDX: 0000000000000000 RSI: 0000000020000c80 RDI: 0000000000000003 [ 459.916034][T20152] RBP: 00007fa6d8f970a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.924077][T20152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.932038][T20152] R13: 000000000000000b R14: 00007fa6da4a5f60 R15: 00007ffe536b1ba8 [ 459.940135][T20152] [ 460.008338][T20159] loop2: detected capacity change from 0 to 512 [ 460.190547][T20154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 460.256430][ T3231] tipc: Node number set to 2886997162 [ 460.409009][T20176] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 460.741183][T20185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4787'. [ 460.979528][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4789'. [ 461.021266][T20191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4791'. [ 461.092457][T20182] loop4: detected capacity change from 0 to 128 [ 461.365979][T20205] FAULT_INJECTION: forcing a failure. [ 461.365979][T20205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.379153][T20205] CPU: 1 UID: 0 PID: 20205 Comm: syz.3.4795 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 461.389580][T20205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 461.399631][T20205] Call Trace: [ 461.402906][T20205] [ 461.405839][T20205] dump_stack_lvl+0xf2/0x150 [ 461.410432][T20205] dump_stack+0x15/0x20 [ 461.414631][T20205] should_fail_ex+0x229/0x230 [ 461.419321][T20205] should_fail+0xb/0x10 [ 461.423611][T20205] should_fail_usercopy+0x1a/0x20 [ 461.428747][T20205] _copy_from_user+0x1e/0xd0 [ 461.433353][T20205] move_addr_to_kernel+0x82/0x120 [ 461.438428][T20205] __sys_connect+0x74/0x1c0 [ 461.442938][T20205] __x64_sys_connect+0x41/0x50 [ 461.447809][T20205] x64_sys_call+0x202b/0x2e00 [ 461.452497][T20205] do_syscall_64+0xc9/0x1c0 [ 461.457014][T20205] ? clear_bhb_loop+0x55/0xb0 [ 461.461692][T20205] ? clear_bhb_loop+0x55/0xb0 [ 461.466431][T20205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.472334][T20205] RIP: 0033:0x7f8e12435f19 [ 461.476744][T20205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.496431][T20205] RSP: 002b:00007f8e110b7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 461.504923][T20205] RAX: ffffffffffffffda RBX: 00007f8e125c5f60 RCX: 00007f8e12435f19 [ 461.512975][T20205] RDX: 0000000000000010 RSI: 00000000200002c0 RDI: 0000000000000003 [ 461.520960][T20205] RBP: 00007f8e110b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 461.528933][T20205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.536922][T20205] R13: 000000000000000b R14: 00007f8e125c5f60 R15: 00007ffff39e8a58 [ 461.544902][T20205] [ 461.578765][T20213] loop4: detected capacity change from 0 to 1024 [ 461.587401][T20213] EXT4-fs: Ignoring removed orlov option [ 461.608651][T20213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.638568][T20215] Cannot find add_set index 0 as target [ 461.727627][T20222] loop3: detected capacity change from 0 to 1024 [ 461.741996][T14274] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 16 with error 28 [ 461.754665][T14274] EXT4-fs (loop4): This should not happen!! Data will be lost [ 461.754665][T14274] [ 461.755142][T20222] netlink: 'syz.3.4799': attribute type 4 has an invalid length. [ 461.764393][T14274] EXT4-fs (loop4): Total free blocks count 0 [ 461.778161][T14274] EXT4-fs (loop4): Free/Dirty block details [ 461.784089][T14274] EXT4-fs (loop4): free_blocks=0 [ 461.789146][T14274] EXT4-fs (loop4): dirty_blocks=0 [ 461.794184][T14274] EXT4-fs (loop4): Block reservation details [ 461.800267][T14274] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 461.824658][ C1] vcan0: j1939_tp_rxtimer: 0xffff888113cc6400: rx timeout, send abort [ 461.825551][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 461.825563][ T29] audit: type=1400 audit(1721778108.697:2653): avc: denied { bind } for pid=20221 comm="syz.3.4799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 461.832873][ C1] vcan0: j1939_tp_rxtimer: 0xffff888113cc6c00: rx timeout, send abort [ 461.861799][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.866861][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888113cc6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 461.890054][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888113cc6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 461.938942][ T29] audit: type=1400 audit(1721778108.817:2654): avc: denied { write } for pid=20227 comm="syz.4.4800" laddr=fe80::c lport=42255 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 461.969868][T20228] FAULT_INJECTION: forcing a failure. [ 461.969868][T20228] name failslab, interval 1, probability 0, space 0, times 0 [ 461.982569][T20228] CPU: 0 UID: 0 PID: 20228 Comm: syz.4.4800 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 461.993065][T20228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 462.003619][T20228] Call Trace: [ 462.006892][T20228] [ 462.009818][T20228] dump_stack_lvl+0xf2/0x150 [ 462.014410][T20228] dump_stack+0x15/0x20 [ 462.018570][T20228] should_fail_ex+0x229/0x230 [ 462.023307][T20228] ? dst_cow_metrics_generic+0x3a/0x140 [ 462.028852][T20228] should_failslab+0x8f/0xb0 [ 462.033496][T20228] __kmalloc_cache_noprof+0x4b/0x2a0 [ 462.038800][T20228] dst_cow_metrics_generic+0x3a/0x140 [ 462.040056][T20232] loop1: detected capacity change from 0 to 512 [ 462.044163][T20228] icmp6_dst_alloc+0x1f5/0x320 [ 462.051992][ T29] audit: type=1400 audit(1721778108.917:2655): avc: denied { create } for pid=20229 comm="syz.3.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 462.055103][T20228] ? icmpv6_flow_init+0x93/0xb0 [ 462.055132][T20228] ndisc_send_skb+0x175/0x6b0 [ 462.084258][T20228] ? skb_set_owner_w+0x15a/0x200 [ 462.089210][T20228] ndisc_solicit+0x24b/0x300 [ 462.093809][T20228] ? __pfx_ndisc_solicit+0x10/0x10 [ 462.098998][T20228] __neigh_event_send+0x859/0xa80 [ 462.104035][T20228] neigh_resolve_output+0x10e/0x450 [ 462.109248][T20228] ip6_finish_output2+0xa6d/0xd10 [ 462.112741][ T29] audit: type=1400 audit(1721778108.917:2656): avc: denied { setopt } for pid=20229 comm="syz.3.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 462.114277][T20228] ? nf_confirm+0x657/0x900 [ 462.135949][T20230] syzkaller1: entered promiscuous mode [ 462.138193][T20228] ? __rcu_read_unlock+0x4e/0x70 [ 462.143628][T20230] syzkaller1: entered allmulticast mode [ 462.148535][T20228] ip6_finish_output+0x438/0x540 [ 462.148567][T20228] ip6_output+0xf5/0x230 [ 462.163450][T20228] ? __pfx_ip6_finish_output+0x10/0x10 [ 462.168969][T20228] ? __pfx_ip6_output+0x10/0x10 [ 462.173821][T20228] ip6_local_out+0x76/0xd0 [ 462.178267][T20228] ip6_send_skb+0x47/0x100 [ 462.182724][T20228] udp_v6_send_skb+0x760/0xbf0 [ 462.187517][T20228] udpv6_sendmsg+0x14db/0x1590 [ 462.192297][T20228] ? __pfx_udplite_getfrag+0x10/0x10 [ 462.197687][T20228] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 462.202836][T20228] inet6_sendmsg+0xaf/0xd0 [ 462.207260][T20228] __sock_sendmsg+0x8b/0x180 [ 462.211867][T20228] ____sys_sendmsg+0x312/0x410 [ 462.216667][T20228] __sys_sendmmsg+0x269/0x500 [ 462.221414][T20228] __x64_sys_sendmmsg+0x57/0x70 [ 462.226308][T20228] x64_sys_call+0x2b4e/0x2e00 [ 462.231098][T20228] do_syscall_64+0xc9/0x1c0 [ 462.235597][T20228] ? clear_bhb_loop+0x55/0xb0 [ 462.240295][T20228] ? clear_bhb_loop+0x55/0xb0 [ 462.245048][T20228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.251049][T20228] RIP: 0033:0x7f76f8395f19 [ 462.255463][T20228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.256117][T20232] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 462.275070][T20228] RSP: 002b:00007f76f7017048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 462.275093][T20228] RAX: ffffffffffffffda RBX: 00007f76f8525f60 RCX: 00007f76f8395f19 [ 462.275104][T20228] RDX: 04000000000000aa RSI: 0000000020007e40 RDI: 0000000000000003 [ 462.275116][T20228] RBP: 00007f76f70170a0 R08: 0000000000000000 R09: 0000000000000000 [ 462.317427][T20228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.325399][T20228] R13: 000000000000000b R14: 00007f76f8525f60 R15: 00007ffce0cb3ef8 [ 462.333548][T20228] [ 462.361866][T20232] EXT4-fs (loop1): 1 truncate cleaned up [ 462.365982][T20235] FAULT_INJECTION: forcing a failure. [ 462.365982][T20235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.367984][T20232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.381077][T20235] CPU: 1 UID: 0 PID: 20235 Comm: syz.4.4803 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 462.403256][T20235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 462.413315][T20235] Call Trace: [ 462.416594][T20235] [ 462.419522][T20235] dump_stack_lvl+0xf2/0x150 [ 462.424147][T20235] dump_stack+0x15/0x20 [ 462.428303][T20235] should_fail_ex+0x229/0x230 [ 462.433002][T20235] should_fail+0xb/0x10 [ 462.437221][T20235] should_fail_usercopy+0x1a/0x20 [ 462.442250][T20235] _copy_from_user+0x1e/0xd0 [ 462.446939][T20235] copy_msghdr_from_user+0x54/0x2a0 [ 462.452190][T20235] __sys_sendmsg+0x17d/0x280 [ 462.456852][T20235] __x64_sys_sendmsg+0x46/0x50 [ 462.461777][T20235] x64_sys_call+0x26f8/0x2e00 [ 462.466465][T20235] do_syscall_64+0xc9/0x1c0 [ 462.471050][T20235] ? clear_bhb_loop+0x55/0xb0 [ 462.475779][T20235] ? clear_bhb_loop+0x55/0xb0 [ 462.480515][T20235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.486435][T20235] RIP: 0033:0x7f76f8395f19 [ 462.490913][T20235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.510646][T20235] RSP: 002b:00007f76f7017048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.519060][T20235] RAX: ffffffffffffffda RBX: 00007f76f8525f60 RCX: 00007f76f8395f19 [ 462.527109][T20235] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 462.535085][T20235] RBP: 00007f76f70170a0 R08: 0000000000000000 R09: 0000000000000000 [ 462.543056][T20235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.551028][T20235] R13: 000000000000000b R14: 00007f76f8525f60 R15: 00007ffce0cb3ef8 [ 462.559085][T20235] [ 462.576162][T20237] loop2: detected capacity change from 0 to 512 [ 462.603492][T20237] loop2: detected capacity change from 0 to 1024 [ 462.630960][ T29] audit: type=1400 audit(1721778109.507:2657): avc: denied { write } for pid=20238 comm="syz.4.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.655255][ T29] audit: type=1400 audit(1721778109.527:2658): avc: denied { create } for pid=20239 comm="syz.3.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 462.675343][ T29] audit: type=1400 audit(1721778109.537:2659): avc: denied { mount } for pid=20236 comm="syz.2.4804" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 462.721186][ T29] audit: type=1400 audit(1721778109.597:2660): avc: denied { unmount } for pid=13272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 462.764171][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.803838][T20254] loop1: detected capacity change from 0 to 1024 [ 462.805609][ T29] audit: type=1400 audit(1721778109.607:2661): avc: denied { setopt } for pid=20246 comm="syz.2.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.833098][T20254] ext4: Unknown parameter 'subj_user' [ 462.852648][T20258] FAULT_INJECTION: forcing a failure. [ 462.852648][T20258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.859626][ C1] eth0: bad gso: type: 1, size: 1408 [ 462.865741][T20258] CPU: 0 UID: 0 PID: 20258 Comm: syz.3.4810 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 462.881409][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 462.891460][T20258] Call Trace: [ 462.894739][T20258] [ 462.897751][T20258] dump_stack_lvl+0xf2/0x150 [ 462.902341][T20258] dump_stack+0x15/0x20 [ 462.906496][T20258] should_fail_ex+0x229/0x230 [ 462.911205][T20258] should_fail+0xb/0x10 [ 462.915382][T20258] should_fail_usercopy+0x1a/0x20 [ 462.920411][T20258] _copy_to_user+0x1e/0xa0 [ 462.924905][T20258] simple_read_from_buffer+0xa0/0x110 [ 462.930402][T20258] proc_fail_nth_read+0xfc/0x140 [ 462.935405][T20258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.940993][T20258] vfs_read+0x1a2/0x6e0 [ 462.945160][T20258] ? __rcu_read_unlock+0x4e/0x70 [ 462.950125][T20258] ? __fget_files+0x1da/0x210 [ 462.954811][T20258] ksys_read+0xeb/0x1b0 [ 462.958979][T20258] __x64_sys_read+0x42/0x50 [ 462.963567][T20258] x64_sys_call+0x2a36/0x2e00 [ 462.968284][T20258] do_syscall_64+0xc9/0x1c0 [ 462.972850][T20258] ? clear_bhb_loop+0x55/0xb0 [ 462.975646][ T29] audit: type=1400 audit(1721778109.727:2662): avc: denied { connect } for pid=20257 comm="syz.3.4810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.977518][T20258] ? clear_bhb_loop+0x55/0xb0 [ 462.977540][T20258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.007611][T20258] RIP: 0033:0x7f8e124349fc [ 463.012023][T20258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 463.031708][T20258] RSP: 002b:00007f8e110b7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.040158][T20258] RAX: ffffffffffffffda RBX: 00007f8e125c5f60 RCX: 00007f8e124349fc [ 463.048211][T20258] RDX: 000000000000000f RSI: 00007f8e110b70b0 RDI: 0000000000000005 [ 463.056256][T20258] RBP: 00007f8e110b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 463.064239][T20258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.072285][T20258] R13: 000000000000000b R14: 00007f8e125c5f60 R15: 00007ffff39e8a58 [ 463.080282][T20258] [ 463.144305][T20260] loop2: detected capacity change from 0 to 2048 [ 463.187159][T20260] loop2: p1 < > p4 [ 463.192667][T20260] loop2: p4 size 8388608 extends beyond EOD, truncated [ 463.671339][T20269] loop3: detected capacity change from 0 to 2048 [ 463.720099][T20274] loop1: detected capacity change from 0 to 512 [ 463.745916][T20274] EXT4-fs: Ignoring removed i_version option [ 463.751949][T20274] EXT4-fs: Ignoring removed nobh option [ 463.789996][T20274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 463.800208][T20274] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 463.818439][T20276] xt_bpf: check failed: parse error [ 463.907085][T20285] FAULT_INJECTION: forcing a failure. [ 463.907085][T20285] name failslab, interval 1, probability 0, space 0, times 0 [ 463.919798][T20285] CPU: 1 UID: 0 PID: 20285 Comm: syz.1.4817 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 463.930235][T20285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 463.940285][T20285] Call Trace: [ 463.943563][T20285] [ 463.946499][T20285] dump_stack_lvl+0xf2/0x150 [ 463.951150][T20285] dump_stack+0x15/0x20 [ 463.955304][T20285] should_fail_ex+0x229/0x230 [ 463.960007][T20285] ? __anon_vma_prepare+0x73/0x310 [ 463.966520][T20285] should_failslab+0x8f/0xb0 [ 463.971191][T20285] kmem_cache_alloc_noprof+0x4c/0x290 [ 463.976632][T20285] __anon_vma_prepare+0x73/0x310 [ 463.981573][T20285] ? handle_mm_fault+0x1a29/0x28c0 [ 463.986824][T20285] handle_mm_fault+0x1ab1/0x28c0 [ 463.991760][T20285] ? sysvec_reschedule_ipi+0x21/0x110 [ 463.997166][T20285] exc_page_fault+0x296/0x650 [ 464.001884][T20285] asm_exc_page_fault+0x26/0x30 [ 464.006771][T20285] RIP: 0010:__put_user_4+0x11/0x20 [ 464.012038][T20285] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 464.031655][T20285] RSP: 0018:ffffc90001567d98 EFLAGS: 00050202 [ 464.037727][T20285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020002080 [ 464.045697][T20285] RDX: 000000000000067b RSI: 0000000000000000 RDI: ffffffff88672c9c [ 464.053683][T20285] RBP: 0000000000000000 R08: 0001ffff8624403f R09: 0000000000000000 [ 464.061650][T20285] R10: 0001ffffffffffff R11: 0001c90001567d70 R12: 0000000000000000 [ 464.069617][T20285] R13: ffff888117fbec00 R14: 0000000020002080 R15: ffff88811dfab000 [ 464.077672][T20285] vt_do_diacrit+0x292/0x690 [ 464.082376][T20285] vt_ioctl+0xe16/0x1810 [ 464.086688][T20285] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 464.091801][T20285] tty_ioctl+0x821/0xbe0 [ 464.096093][T20285] ? __pfx_tty_ioctl+0x10/0x10 [ 464.100952][T20285] __se_sys_ioctl+0xd3/0x150 [ 464.105732][T20285] __x64_sys_ioctl+0x43/0x50 [ 464.110405][T20285] x64_sys_call+0x1688/0x2e00 [ 464.115103][T20285] do_syscall_64+0xc9/0x1c0 [ 464.119639][T20285] ? clear_bhb_loop+0x55/0xb0 [ 464.124378][T20285] ? clear_bhb_loop+0x55/0xb0 [ 464.129050][T20285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.134944][T20285] RIP: 0033:0x7fbd4e1c5f19 [ 464.139394][T20285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.159003][T20285] RSP: 002b:00007fbd4ce47048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.167425][T20285] RAX: ffffffffffffffda RBX: 00007fbd4e355f60 RCX: 00007fbd4e1c5f19 [ 464.175431][T20285] RDX: 0000000020002080 RSI: 0000000000004bfa RDI: 0000000000000003 [ 464.183399][T20285] RBP: 00007fbd4ce470a0 R08: 0000000000000000 R09: 0000000000000000 [ 464.191393][T20285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.199389][T20285] R13: 000000000000000b R14: 00007fbd4e355f60 R15: 00007ffda03b5e78 [ 464.207356][T20285] [ 464.223190][T20291] loop2: detected capacity change from 0 to 512 [ 464.313291][T20293] loop4: detected capacity change from 0 to 128 [ 464.508212][T20295] loop3: detected capacity change from 0 to 2048 [ 464.539536][T20293] syz.4.4822: attempt to access beyond end of device [ 464.539536][T20293] loop4: rw=34817, sector=121, nr_sectors = 8 limit=128 [ 464.639866][T20299] loop1: detected capacity change from 0 to 512 [ 464.846155][T20299] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.4824: corrupted in-inode xattr: e_value size too large [ 464.846414][T20299] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4824: couldn't read orphan inode 15 (err -117) [ 464.847120][T20299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.852038][T20299] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.4824: Directory hole found for htree leaf block 0 [ 464.891424][T14270] kworker/u8:30: attempt to access beyond end of device [ 464.891424][T14270] loop4: rw=1, sector=385, nr_sectors = 656 limit=128 [ 465.015299][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.164818][T20319] loop1: detected capacity change from 0 to 1024 [ 465.172335][T20317] netlink: 'syz.0.4830': attribute type 4 has an invalid length. [ 465.190850][T20324] xt_bpf: check failed: parse error [ 465.202284][T20319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.253161][T20328] loop3: detected capacity change from 0 to 2048 [ 465.352222][T20336] loop4: detected capacity change from 0 to 1024 [ 465.394030][T20328] loop3: detected capacity change from 0 to 1024 [ 465.405589][T20336] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 465.434125][T20328] EXT4-fs: Ignoring removed oldalloc option [ 465.460396][T20336] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 465.492063][T20336] EXT4-fs (loop4): orphan cleanup on readonly fs [ 465.501248][T20336] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 465.515803][T20336] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 465.525408][T20336] EXT4-fs (loop4): 1 truncate cleaned up [ 465.541375][T20336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.590786][T20336] EXT4-fs error (device loop4): ext4_search_dir:1505: inode #2: block 16: comm syz.4.4833: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 465.613815][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4833'. [ 465.689819][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4833'. [ 465.843569][T20350] netlink: 'syz.0.4838': attribute type 2 has an invalid length. [ 465.851473][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4838'. [ 465.975168][T19328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.985370][ C1] eth0: bad gso: type: 1, size: 1408 [ 465.990981][ C1] eth0: bad gso: type: 1, size: 1408 [ 466.015068][T20356] loop1: detected capacity change from 0 to 256 [ 466.065856][T20356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4840'. [ 466.240527][T20362] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 466.279389][T20362] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4843'. [ 466.388709][T20367] 9pnet_fd: Insufficient options for proto=fd [ 466.421382][T20366] xt_connbytes: Forcing CT accounting to be enabled [ 466.440348][T20366] Cannot find add_set index 0 as target [ 466.480119][T20370] loop3: detected capacity change from 0 to 512 [ 466.621758][T20375] netlink: 308 bytes leftover after parsing attributes in process `syz.3.4849'. [ 466.814291][T20375] infiniband syz: set down [ 466.818930][T20375] infiniband syz: added ipvlan0 [ 466.866692][T20375] RDS/IB: syz: added [ 466.871688][T20375] smc: adding ib device syz with port count 1 [ 466.879103][T20375] smc: ib device syz port 1 has pnetid [ 467.115279][T20392] ªªªªªª: renamed from vlan0 (while UP) [ 467.225711][T20394] loop1: detected capacity change from 0 to 2048 [ 467.295882][T20394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.319266][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 467.319287][ T29] audit: type=1400 audit(1721778114.197:2700): avc: denied { getopt } for pid=20395 comm="syz.0.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 467.397453][ T29] audit: type=1400 audit(1721778114.197:2701): avc: denied { name_connect } for pid=20395 comm="syz.0.4855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 467.418048][ T29] audit: type=1400 audit(1721778114.247:2702): avc: denied { write } for pid=20393 comm="syz.1.4854" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.440535][ T29] audit: type=1400 audit(1721778114.247:2703): avc: denied { open } for pid=20393 comm="syz.1.4854" path="/40/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.478342][T13948] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 467.577322][T13948] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 467.589650][T13948] EXT4-fs (loop1): This should not happen!! Data will be lost [ 467.589650][T13948] [ 467.599345][T13948] EXT4-fs (loop1): Total free blocks count 0 [ 467.605384][T13948] EXT4-fs (loop1): Free/Dirty block details [ 467.611461][T13948] EXT4-fs (loop1): free_blocks=2415919104 [ 467.617325][T13948] EXT4-fs (loop1): dirty_blocks=32 [ 467.622654][T13948] EXT4-fs (loop1): Block reservation details [ 467.628969][T13948] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 467.649981][T20403] Cannot find add_set index 0 as target [ 467.706073][T14270] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 256 with max blocks 1 with error 28 [ 467.772183][ T29] audit: type=1400 audit(1721778114.647:2704): avc: denied { read } for pid=20409 comm="syz.1.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 467.821225][T20415] loop3: detected capacity change from 0 to 1024 [ 467.837710][ T29] audit: type=1326 audit(1721778114.677:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20405 comm="syz.0.4859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6da315f19 code=0x0 [ 467.845887][T20415] EXT4-fs: Ignoring removed orlov option [ 467.949218][ T29] audit: type=1400 audit(1721778114.827:2706): avc: denied { execute } for pid=20414 comm="syz.3.4860" path="/66/bus" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 468.237495][ T29] audit: type=1400 audit(1721778115.117:2707): avc: denied { connect } for pid=20427 comm="syz.3.4863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 468.310286][ T29] audit: type=1400 audit(1721778115.167:2708): avc: denied { view } for pid=20427 comm="iou-wrk-20428" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 468.492554][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.529291][ T29] audit: type=1400 audit(1721778115.407:2709): avc: denied { read } for pid=20431 comm="syz.4.4864" name="usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 468.556281][T20432] FAULT_INJECTION: forcing a failure. [ 468.556281][T20432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.569560][T20432] CPU: 1 UID: 0 PID: 20432 Comm: syz.4.4864 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 468.580156][T20432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 468.590324][T20432] Call Trace: [ 468.593609][T20432] [ 468.596536][T20432] dump_stack_lvl+0xf2/0x150 [ 468.601157][T20432] dump_stack+0x15/0x20 [ 468.605314][T20432] should_fail_ex+0x229/0x230 [ 468.610082][T20432] should_fail_alloc_page+0xfd/0x110 [ 468.615405][T20432] __alloc_pages_noprof+0x109/0x360 [ 468.620689][T20432] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 468.626066][T20432] alloc_pages_noprof+0xe1/0x100 [ 468.631046][T20432] get_zeroed_page_noprof+0x17/0x40 [ 468.636241][T20432] mon_bin_ioctl+0x44a/0x910 [ 468.640905][T20432] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 468.646018][T20432] __se_sys_ioctl+0xd3/0x150 [ 468.650644][T20432] __x64_sys_ioctl+0x43/0x50 [ 468.655229][T20432] x64_sys_call+0x1688/0x2e00 [ 468.659997][T20432] do_syscall_64+0xc9/0x1c0 [ 468.664489][T20432] ? clear_bhb_loop+0x55/0xb0 [ 468.669169][T20432] ? clear_bhb_loop+0x55/0xb0 [ 468.673841][T20432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.679820][T20432] RIP: 0033:0x7f76f8395f19 [ 468.684287][T20432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.703900][T20432] RSP: 002b:00007f76f7017048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.712312][T20432] RAX: ffffffffffffffda RBX: 00007f76f8525f60 RCX: 00007f76f8395f19 [ 468.720289][T20432] RDX: 00000000000b70ae RSI: 0000000000009204 RDI: 0000000000000003 [ 468.728257][T20432] RBP: 00007f76f70170a0 R08: 0000000000000000 R09: 0000000000000000 [ 468.736221][T20432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.744189][T20432] R13: 000000000000000b R14: 00007f76f8525f60 R15: 00007ffce0cb3ef8 [ 468.752153][T20432] [ 469.019456][T20444] loop2: detected capacity change from 0 to 512 [ 469.053967][T20452] loop4: detected capacity change from 0 to 512 [ 469.082692][T20452] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.4869: casefold flag without casefold feature [ 469.104814][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4872'. [ 469.114008][T20458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.121572][T20458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.129049][T20452] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4869: couldn't read orphan inode 15 (err -117) [ 469.143474][T20452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.163763][T20455] loop2: detected capacity change from 0 to 8192 [ 469.174491][T20452] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.4869: Directory hole found for htree leaf block 0 [ 469.174783][T20458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.194927][T20458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.203051][T20452] ip6t_srh: unknown srh match flags 7402 [ 469.353233][T20475] loop1: detected capacity change from 0 to 1024 [ 469.361983][T20475] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 469.377794][T20477] netlink: 'syz.2.4877': attribute type 10 has an invalid length. [ 469.385853][T20477] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4877'. [ 469.436738][T20477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.444959][T20477] team0: Port device bond0 added [ 469.452112][T20475] netlink: 'syz.1.4875': attribute type 4 has an invalid length. [ 469.729305][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4881'. [ 469.916621][T20501] loop2: detected capacity change from 0 to 256 [ 469.953978][T20498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4881'. [ 470.276402][T19087] EXT4-fs unmount: 2 callbacks suppressed [ 470.276419][T19087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.481795][ T932] ================================================================== [ 470.489896][ T932] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 470.498067][ T932] [ 470.500390][ T932] read-write to 0xffff8881004c0bb0 of 8 bytes by task 19087 on cpu 1: [ 470.508543][ T932] __filemap_remove_folio+0x1c5/0x2c0 [ 470.513927][ T932] __remove_mapping+0x33f/0x470 [ 470.518785][ T932] remove_mapping+0x22/0x90 [ 470.523303][ T932] mapping_try_invalidate+0x266/0x3f0 [ 470.528679][ T932] invalidate_mapping_pages+0x27/0x40 [ 470.534056][ T932] invalidate_bdev+0x58/0x70 [ 470.538655][ T932] ext4_put_super+0x571/0x840 [ 470.543341][ T932] generic_shutdown_super+0xde/0x210 [ 470.548639][ T932] kill_block_super+0x2a/0x70 [ 470.553676][ T932] ext4_kill_sb+0x44/0x80 [ 470.558016][ T932] deactivate_locked_super+0x7d/0x1c0 [ 470.563394][ T932] deactivate_super+0x9f/0xb0 [ 470.568081][ T932] cleanup_mnt+0x268/0x2e0 [ 470.572505][ T932] __cleanup_mnt+0x19/0x20 [ 470.576941][ T932] task_work_run+0x13a/0x1a0 [ 470.581534][ T932] syscall_exit_to_user_mode+0xbe/0x130 [ 470.587096][ T932] do_syscall_64+0xd6/0x1c0 [ 470.591604][ T932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.597507][ T932] [ 470.599830][ T932] read to 0xffff8881004c0bb0 of 8 bytes by task 932 on cpu 0: [ 470.607285][ T932] nr_blockdev_pages+0x7c/0xd0 [ 470.612061][ T932] si_meminfo+0x87/0xd0 [ 470.616239][ T932] update_defense_level+0x49/0x5b0 [ 470.621359][ T932] defense_work_handler+0x1f/0x80 [ 470.626397][ T932] process_scheduled_works+0x483/0x9a0 [ 470.631866][ T932] worker_thread+0x526/0x700 [ 470.636459][ T932] kthread+0x1d1/0x210 [ 470.640540][ T932] ret_from_fork+0x4b/0x60 [ 470.644953][ T932] ret_from_fork_asm+0x1a/0x30 [ 470.649723][ T932] [ 470.652043][ T932] value changed: 0x0000000000000004 -> 0x0000000000000001 [ 470.659141][ T932] [ 470.661457][ T932] Reported by Kernel Concurrency Sanitizer on: [ 470.667767][ T932] CPU: 0 UID: 0 PID: 932 Comm: kworker/0:2 Not tainted 6.10.0-syzkaller-12084-g28bbe4ea686a #0 [ 470.678263][ T932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 470.688319][ T932] Workqueue: events_long defense_work_handler [ 470.694385][ T932] ================================================================== [ 480.468348][T14273] vlan0: left allmulticast mode [ 480.473360][T14273] veth0_vlan: left allmulticast mode [ 480.478695][T14273] vlan0: left promiscuous mode [ 480.483542][T14273] bridge0: port 3(vlan0) entered disabled state [ 480.490530][T14273] bridge_slave_1: left allmulticast mode [ 480.496191][T14273] bridge_slave_1: left promiscuous mode [ 480.501773][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.509699][T14273] bridge_slave_0: left allmulticast mode