last executing test programs: 5.62977227s ago: executing program 2 (id=38): r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='/sys/fs/smackfs/revoke-subject\x00', &(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001240)='\xde\xb0\xa7\'\xcdR<\xbf}N\x1dy\b\xed\x91\"\xac\b\xbf\xf0\x9d\xaa\xfa\xd1{\xba\xe8\x12\xba0\x9aQM\xf66\xfbR\x82\xea7c\x02`\xbb\x1e4D*,r\xc5\x01e\xf4\x04\x00\x00\x00,\x9a\x85[TM\x0f\x1dT\x90\x83\x8e\x13\x9a\xee\xf1\'\xc9\bw\xeeH\x91`\x8dsR\xe1\x924\xb1+9\xb1\x19Nuh\x02\xcfX?\xc8?X\x9c\xbc\xef\xd6\xe8\xe1\x8a5\x8c\xe4\x9dA`!\x9a\x95\x11Ru\x1c\xe0\xe6A\x9f\xba\xe3\xd6\xc9+\x1fm\xdf;\xf1BX\x88]\x18\xf0:\xb9g\x1b\xb9H\xc0\xaf\xb4\x10_mP\x9b\x8d\a\x00\x00\x00\x9c\xe8l&\xca^K)N\x98|\x9b\xcf\x8dt\x00\xa0n\x00\x8b\"\xebw\xf8\x1a\xd3\x1b\x90\x14\xbf\xee\xef\xa5\xea\xc9\xc6\x0e\xc0\xc5\x9do\xce$\x18\xd1Z\x88\\TCIK\x00oqFk\x8b\xb9\xa8\x8c\x9f\xb8,\x9e\xbb$\bX\x16^k\xa1eUQ\xd9K\xfdLayN\\\xab\xfb!,\x1c\xdf\xe6\xa9\x12\x17D\xed\xfb\xe6\xc9Sz\x8d\x19\n2O\xc0#!7Gr\xf6o\xdd9\x0e\'U\x84\xfe\x1f\xfbT\x06\xf4[q\xbd[]\xad\xbf\"\x8a\xa8\x9a\x18A\x8b\xff\xac\x02\xff\x81}~^\xc7\xdc\x04\xf8\xa7:\xba\xe9\xb9\xf5\xda\"?\xbb@\x0f\x00g\x89\xc1\xc7\x01%\xa3\xc8\xfam\x11J\xfc5\xfb\x9e\xa9\xc89\x8e|H2\xba\xa3\xfc~\xc0M8\x99\x8b}L\xd5\xed\xb4\x12k\xe4\x98I\xc6\xfe\\\xb5\xb5e$*\xa2\xe4\xa0\xd4\xb9\x01\x96A\xaau\xb5\xe5G\xe0?\xc8\xf88\xd4*\x03\xab`\a\x91\x12\xd1\x1bB\x82\xd5\a\xac\nf\xb0\x16\xcf \xc6\x80\b]\xec,\xafi$\xb3\x9e\xd5\x95>\xc9\xfa\x06?\xe48}\xf3\xd2\xa0\xad>Y\xfc\xd7\x81\xe4\xa8lX\xdb\x8f\x15+\xdb6\x9ek\x10\xc5\xbe#%\x99\xbc\x19\x870x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x4c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000001900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)=@ipv6_newaddrlabel={0xc0, 0x48, 0x200, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, r7, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x2023064, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x2, 0x0, r1, 0x1000000, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x7, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x5}) 5.38641859s ago: executing program 2 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x80000) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x300000c, 0x10, r1, 0x180000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x2a) 4.888535081s ago: executing program 2 (id=49): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000004c0)='./file1\x00', 0xfffffffffffffffc, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000003780)={0x23, 0x0, 0x1}, 0x10) (fail_nth: 1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000003780)={0x23, 0x0, 0x1}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x14}, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040), 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec06000000000000002176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f3cc2b0da31fa21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e03564f7f7a35dfc7204000000000000003b28d7e53c78fbfe5ab0255f347160ec83070000020000004015cf05003f6cded6a2f8550b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c10a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d02000000a3ff4f8a4cf796b07a6ff61c5d52416a662d8bc9c89c9120072a5d00dcdd85b4975e2a2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c9ad943e392955f4f979ea13201bafe4f0f6ea5080000000cdcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b23afefdb63aae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12289ee34463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b0030000000000ea8809820000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f55e550fafa4cedd763ada3104f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2a81425ef1b71c1d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e4f523d9c8c21578fe3245097c280abe51427b9f6cd72b51b7689969c72fb632d1c072492d9da6d0252803c66730cd5eac907f09b9695906313f88735fce513974a24eee239baa91322608c6fc01e1b9e16587bb5f721303e6b89000000fa08ad0731c4b839688b22c4da2a6bc4cf45dbeea042f9b33393f85a0417854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296ac2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692baffffffff5c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b042d84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf53928867d596987024952b698d4a01c08aca45ea8727be6c8bc8fdcdff1917db98f152625b8465bc46dbe9762d1183ec79f4ab393541a6d9cabc4de71c5a65d228e4cb483cca06858dc6727c7a2322c9580d9afc33f6fcf87518ecc02dd027cb995f1eb4e98e4b500b5843d4ee1d28831707923f00000000000000000000000000045ac1fd93fe7ebb00d97008a55b60f1fa4eb291f2cf50224876b476b94660ed5645e4c7b6ab6d5604fe54a2e65ea5b6b844dd87d264433ccfa0c33b213920978219df125eae0f87082cdc32f9e6265bce02f3d9975f6863b38ecd0f4811a367eab021a5864cf3fde99aa69da4dcbf96be922bd0d50810405b9a31e93c301c4c0d5d34ae48dff8bceb4a9e26ca1db11e2c28d1ed1f63828eb8d70a125773b20a33695dc46eceef6b13ad75164ab5b8eaf32cc6b5e8fe283475a22864b8df30dc6"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) fremovexattr(r5, &(0x7f0000000980)=@known='user.incfs.metadata\x00') read$rfkill(0xffffffffffffffff, &(0x7f0000000080), 0xffffff1c) 2.32747368s ago: executing program 4 (id=83): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x101) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) dup2(r4, r4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 2.284331403s ago: executing program 0 (id=85): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1806001b0000000000000000000000001809000000000002950000030000dc568520bab47896f4a4a533b7a538f79141c686fd298b8b17589fba534b084b9cea4484b478622216aaa1bf0f89420b9f0af1a1ad7d4aeaad3caa34e295989e929018087e022aafa953762574c537d3aa4bc681fb4ca42bb3d1913a90e89bee95c12774bf39c749086218462e440b41476efe72b0662faa4cb8c837e8fcac7715c897a178ce7728b740be87bfc62e92da3baff66ac81a4b5898bd3c58ef12f2a5a37503da99f607afecaa421b6624a92a4d4db0faa816"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x200000000000032a, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008402, &(0x7f0000000080), 0x1, 0x54c, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x7fff, 0x0) getdents(r1, 0x0, 0x58) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='alloc_extent_state\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 1.793812653s ago: executing program 3 (id=87): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0xa69028, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) fallocate(r1, 0x3, 0x0, 0x4010000bffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x44}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0xb8}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10780}, &(0x7f0000000240), &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.712531s ago: executing program 3 (id=88): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @private}, &(0x7f0000000080)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="d64018d045425ac05ef8825ab12f4cdfaf249ed25b2237ec697b1a2672f0eebf752b42a90d7ce1bb6cecde79137894996f34a9ddd06068a9360753eac71eb73e721b50443ae5e8577a1d34201aee2aa328c12d859757fb0edfbdea0f3628fe3f4a7644a465df876afdcdcd2e30859763deda795aefd8d36d1fba16e6c96c78a38742063c8de5acbfc6308a7fd282d958725da202db52c2d49bed515de5035d8fb6b24ae8d37accc6181d74535e8f01aaabd131cd5f44030f5d26eda9c4f7f0168557ca9e3a9f0ee806", 0xc9) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180400000100f1ff0000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRESDEC=r0], 0x2c}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9c, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',privport,cache=loose,uname=:,\x00']) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x2ffe, 0x0, 0x1ff}}) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1b, 0x0, "05be04f85f24b3154478c908c2f6ecd93900e179a582b52ce9cfeb10f466693ce04d4c38eef0cdc8075077a1f8d2e67f41bbcb62a57680a053b58536349d9c41", "e3c055e4c17b5fec8c1737c24bc5bbb0751fe63b9e0c55b1e82eac590b9d7f057b8d7c7af91d8d9d0b4f7525250c81dd277b5b6cbc5b00", "7a91b590b9c06821ef5c606d5f4ba751aae2edcc2717a215ed6e2285e774391e", [0x7, 0x2]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15}, {0x5}, {0x6, 0x90, 0x0, 0x1}]}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x20}, 0x18) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x41c21c49b1a76e92}) open_tree(r6, &(0x7f0000000100)='./file0\x00', 0x9000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400280, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e26, @rand_addr=0x64010102}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e23, 0x5, @local, 0x1}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in6={0xa, 0x4e24, 0x2, @private2, 0xfffff563}], 0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2, 0x9de}}, 0xfffd}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000400)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0xff, @empty, 0x7}]}, &(0x7f0000000240)=0x10) 1.684162472s ago: executing program 2 (id=51): socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8018) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000004c0)='./file1\x00', 0xfffffffffffffffc, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) stat(0x0, &(0x7f00000001c0)) close(r0) socket$kcm(0x10, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) unshare(0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file1\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x6, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x16000}]) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x5}, {0x0, 0x1}]}, 0x14, 0x0) fchown(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) 1.532636934s ago: executing program 2 (id=89): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r1 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2ba, &(0x7f0000000f40)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendfile(r2, r2, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x3f000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xd}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffff00}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xa0}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x200003, &(0x7f0000001800)=ANY=[@ANYRESHEX, @ANYBLOB='nodots,nodots,flush,discard,nodots,quiet,time_offset=0xfffffffffffffa93,nodots,showexec,nodots,dots,codepage=936,dots,nodots,nfs,nodots,dots,nodots,tz=UTC,nodots,nodots,dots,dots,nodots,uid=', @ANYBLOB="d28afca5f38a5a64855bef4d3edcaba95c1dafe63a4440c41d65bdba9f902cb311ee73659ffbfddfc1d61a285e0b226da43c28288462176bfe535988186a152431ec0784ac25a97ecb260d1f64344018d0e3234afeced39aa4f6487dd298eefa8cae5509f289da34bc3b95f32afd88317ec171d2c5552425e1de8c98e29b548ef01fb6495204baba97fba7be50df153d868fb14593"], 0x1, 0x1d8, &(0x7f00000005c0)="$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") io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000}]) 1.446966761s ago: executing program 4 (id=90): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x201, 0x0, "5f330000a90100f9"}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f0000000240)=0x13) poll(&(0x7f0000000100)=[{r5}], 0x1, 0xe5f1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0x1a) r6 = socket(0x10, 0x3, 0x0) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0xc, 0xf7, 0x6, 0x3}, {0x0, 0x4c, 0x1, 0x2}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/150, 0x96}], 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0xa, 0x0, &(0x7f0000000600)="61df712bc884fef053a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffeffff}}]}]}}}]}, 0x68}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000380)="44c394f305916c4516999da22f02", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x138, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) 1.403624005s ago: executing program 0 (id=92): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) mlock2(&(0x7f000075b000/0x2000)=nil, 0x2000, 0x0) 1.372614697s ago: executing program 0 (id=93): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x2, 0x5, 0x6, 0x60, r0, 0x65c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x8}, 0x48) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x10, 0x2, @thr={&(0x7f0000000740)="892013e659391c8bc62a83d6154b54f63c68c0820d20666ea4c45267089e7ae4a26b233e0887a7b161aba26bf515db31923937550fe33c34fa83bce06eaaa46c851e1872fd0617361b1fa07386324dd784bddceceeecefd2ad3ea76f9a54beb6edb918fd25f6885b2e5b3ee668b215dff5040eb5937c829f173a27b25d54187cfcf7b7494d6eebbf783a16b471bc483e3b9d7e3cfb4a4f446fd6e1b7d824b571904ef086507ef1c414e26a475c12640c8c1df52d891f2f1b1851b7d5b970", &(0x7f0000000840)="5aa615a9154f513bcbd6f885f9424d6ddb9f9260994e90903f0f9f4401118f6ba5b27ab4f196e9dd1ceb107cb16d4c1f1d7b22d874d2b689b2d693ac1624779c15d21266233a17b317291cfa11dbc8c414fee288391ba35aed0abcd16905eae3799bee44b947f1e387881e765d5a82e9ec9027115cd71763ff9ef57b69b36722fb0697893419259d4594027112d45ddf"}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) r5 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) readv(r5, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r3) r6 = socket(0x21, 0x2, 0xa) getsockopt$nfc_llcp(r6, 0x110, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='mm_page_alloc\x00', r7}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x0, 0x1, 0x2000000, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x1a463, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x4000000007, 0xffffffffffffffff, 0x0) 1.331457951s ago: executing program 2 (id=94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "cdedbe27d7c9678a", "ed86a155b66f481507086fe637736e4c", "a2dc23ff", "00000000000400"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) (fail_nth: 12) 1.271508065s ago: executing program 1 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 1.192735842s ago: executing program 0 (id=97): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00008c4000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000e2e000/0x1000)=nil) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e3a000/0x1000)=nil, 0x1000) munlock(&(0x7f0000e3f000/0xe000)=nil, 0xe000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f100000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="12b765e5a1951af303a837aa639fbea90ea6c97132179218283b65a6d3ddf5729d61bae16a1dad79852e81ee26e053eecb7391fd7911218ef1d5294b07913fe3e9fc6b92e22cac928172286edc60f44e83e0f7657837b35525cd52d3b728ec289104b7fc4097a6a44170a44ee2cc7e5bbccdb884b1f4d44e7585f79c5cee0a9d4287123bc2531c3fb6e4ecc7f4b981ee27441fa2f3da457cece4b009871bfd67dee54ea02ae65d0ecf614aeec7460b44ab65680055aef6429a6473230532d2a5692f33862d", @ANYBLOB="0000000000000000b708000000000010"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000001c0)={0x0, 0x7b, 0x9}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.192135482s ago: executing program 1 (id=98): iopl(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x0, 0x1}, 0x48) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000300)=ANY=[], 0xfe, 0x1c7, &(0x7f0000000740)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x24f6, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={0x0, r0}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r9 = dup(r8) close(0xffffffffffffffff) unshare(0x22020400) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) utimensat(r9, 0x0, &(0x7f0000000100)={{}, {0x0, 0xfffffff9}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000180), 0xee, 0x466, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000400)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x542, &(0x7f00000027c0)="$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") 1.124484458s ago: executing program 1 (id=99): ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0x2f) r0 = creat(0x0, 0x92) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x0, 0x0, 0xd1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) accept4(r1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x200000, &(0x7f00000002c0)={[{@grpjquota}, {@i_version}, {@nojournal_checksum}, {@resuid}, {@test_dummy_encryption}, {@nolazytime}, {@minixdf}, {@commit={'commit', 0x3d, 0x8}}, {@init_itable_val={'init_itable', 0x3d, 0x50ae4bad}}, {@abort}], [{@subj_role={'subj_role', 0x3d, '.((^B'}}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe5a) lsm_list_modules(&(0x7f0000002100)=[0x0, 0x0], &(0x7f00000001c0)=0x10, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001500)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'ip6tnl0\x00', @remote}) inotify_init() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x120, 0x18c, 0x203, 0x120, 0x19030000, 0x258, 0x2e0, 0x2e0, 0x258, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@icmp6={{0x300}, {0x0, "8186"}}, @common=@mh={{0x28}, {"0b83"}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private2, @mcast2, [], [], 'sit0\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x592) inotify_add_watch(0xffffffffffffffff, 0x0, 0xc3b) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 562.298644ms ago: executing program 4 (id=100): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x2000000) 495.725419ms ago: executing program 4 (id=101): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) (fail_nth: 5) 495.111099ms ago: executing program 4 (id=102): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x1}}) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000140)=0xdf, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x20}, 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa401000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) fsetxattr(r2, &(0x7f0000000240)=@known='trusted.overlay.impure\x00', &(0x7f0000000280)='/dev/input/event#\x00', 0x12, 0x2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xfffffe72}}, 0x41) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) socket(0x10, 0x2, 0x0) 489.202399ms ago: executing program 3 (id=103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) mlock2(&(0x7f000075b000/0x2000)=nil, 0x2000, 0x0) 450.451973ms ago: executing program 1 (id=104): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x2000011a) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x3f00}, 0x1c) 449.935543ms ago: executing program 3 (id=105): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a800160020000340ff5c141cc11eda4cc1d67f6f94007134cf6edb8000a0a542978ff507a290457f0189b3f3267ce06bbace8017cbed4c2ee50000f409000ed6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cbe026600bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941000000000000000000", 0xd8}], 0x1}, 0x0) (fail_nth: 4) 100.727301ms ago: executing program 0 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x1000}) preadv2(r3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) open(0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="06000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000900000038000380080001000000000008000500e000000114000200766c616e31000000000000000000000008000300000000000600070000000000"], 0x4c}}, 0x0) 100.486751ms ago: executing program 1 (id=107): socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x4000) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000280), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) 83.634372ms ago: executing program 3 (id=108): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x45}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@delpolicy={0x74, 0x14, 0x8, 0x70bd2d, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010101, 0x4e22, 0x5, 0x4e24, 0x8, 0xa, 0xa0, 0x20, 0x5e, 0x0, r3}, 0x6e6bbd}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd25, 0x70bd2b, 0x70bd26, 0x2, [0x164, 0x0]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048041}, 0x44011) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1bfb74002a3fca7da28c4d33", @ANYRES16=r2, @ANYBLOB="250100000000f452c70000000800010003000048b8a3ab381b1fbbdd52ffb7eaac1108"], 0x24}}, 0x0) 71.472473ms ago: executing program 4 (id=109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 1.06692ms ago: executing program 1 (id=110): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff000000009fa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESHEX=r0], &(0x7f00000004c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x1a}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x48) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x9d5fd000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r7}, 0x11) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@getqdisc={0x28, 0x26, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd, 0xffe0}, {0xffff, 0x10}, {0xfff1, 0x6}}, [{0x4}]}, 0x28}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 578.779µs ago: executing program 3 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000100)='system_u:object_r:iptables_initrc_exec_t:s0\x00', 0x2c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYBLOB="c8ea7166bbb70bf46c58ca68d5fcf1ed9d03f3a9d2b11e4eb0a21ec954c5e030980cd676d2174c913ed6bbfe960232b905a0d90d7ead441ba4bda647e6ab42623cd52043b5fd1dd731c71c125d08eeba4698c63e169e4a10708292d9233a622e6b0f0eae5d34319ddcf28f6bd37a4304da71393ef728085c31884aedbf50a99ab7f8bdeff755ca822b752cd0523055e41a7d73e7c5b959151b2b6f518ee1f1d2dbc8c10c2335a111b18f908f19473954fb2da4969169ad6dea557483d1d7450265989655cb3ae0f057655c30f6", @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022", @ANYRES16=r0, @ANYRESOCT=r5], 0x54}}, 0x4004001) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={0x38, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2f38d19913a1588857e4d65a700a437b"}]}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, r6, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x20}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x8100000000000000}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x5c, r6, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8}, {0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r11}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x5c}}, 0x4010011) r14 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000000100)={0x1d, r15}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f00000000c0)={0x1d, r16}, 0x18) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01000000000000000000030000000500050008000000180001"], 0x34}}, 0x0) 0s ago: executing program 0 (id=112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) listen(r0, 0x4) (async) r1 = accept(r0, &(0x7f00000006c0)=@can, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES16=r1], 0x44}}, 0x40804) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) (async) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) syz_read_part_table(0x637, &(0x7f0000001500)="$eJzs3D9oXWUYB+DfSe8996aFpopTl1RnsdjZ1ICkl0qnSrcuVUFCxSFOFUtuNIsZMjg4uxQhS1sXDR0c1CJO4hQ6qBVXQYpKLdIj555z/0QQxLaD8DxDzvd95/3e93tzTsac8L82l25SjIa9dJIcf/lvERsZB6Rfxyepuu29czsrp05XVVUVdcz5dPPk54evJ+m0W/qTNFVVrU8mJ3Plw4M33iuG3Z1bddEvtw7Uy/PNMY4kTx8q+6M0MxlSVfsO1nuYvwf+m6tLN4tis2xnT/16fzm59svK2d0zW+9ff7FdXk++Surn/079Xoyj38rFYxc6o2H9lN+czftbcymnK9PHPZ/OvjMMN9cG28tLq3vjhaODnU9fe+6PYzdSncjXZWdufKOY5iuT4YO3X/e/UL/925eWVvcGl+cnN5744PEvsthO7lRVjtQlH8voT2fxIVQGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRuLp0c+HdzbXBdrK6N+i1qytnd89slUleeHU0n8u147O7DrTXi7lwu76uZy358ZN0Z4OK+ke32d5dbtZ+WKyeGQ064/q9+WZwaWl1b3DvYHL72ftHB82u5LMT03Lrk8y7eb4d3a0ao8nGPzXZlqgWmrhv7s32X3SStcH2qP7ln4pOf7T+cTGcHLM+yOu9vNI0U90t271/TtsAAAAAAAAAAAAAAAAAAACAB7Jy6vQbd9rx+X6Sn9+eq8dVr/kv9+JgsS/+u14yfzK50k8xXE5y66Xfy28Pb33ffjpgmF6GSQ59tHGu3VLuSzD5RECRqnyUnfFv/BUAAP//PZZ8Jw==") sendto$inet(r4, &(0x7f0000000000), 0x9058c5ec658d63ab, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000600)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000001080)="$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") kernel console output (not intermixed with test programs): syzkaller login: [ 19.013524][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.013540][ T29] audit: type=1400 audit(1723270619.399:76): avc: denied { transition } for pid=3139 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.017736][ T29] audit: type=1400 audit(1723270619.399:77): avc: denied { noatsecure } for pid=3139 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.020694][ T29] audit: type=1400 audit(1723270619.399:78): avc: denied { write } for pid=3139 comm="sh" path="pipe:[1675]" dev="pipefs" ino=1675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.024343][ T3139] sh (3139) used greatest stack depth: 11872 bytes left [ 19.025710][ T29] audit: type=1400 audit(1723270619.399:79): avc: denied { rlimitinh } for pid=3139 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.028590][ T29] audit: type=1400 audit(1723270619.399:80): avc: denied { siginh } for pid=3139 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.507593][ T3146] dhcpcd-run-hook (3146) used greatest stack depth: 11688 bytes left [ 19.767133][ T29] audit: type=1400 audit(1723270620.159:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 19.769810][ T3140] sshd (3140) used greatest stack depth: 11624 bytes left Warning: Permanently added '10.128.0.243' (ED25519) to the list of known hosts. [ 27.542405][ T29] audit: type=1400 audit(1723270627.929:82): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.543715][ T3249] cgroup: Unknown subsys name 'net' [ 27.565478][ T29] audit: type=1400 audit(1723270627.929:83): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.593030][ T29] audit: type=1400 audit(1723270627.969:84): avc: denied { unmount } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.787835][ T3249] cgroup: Unknown subsys name 'rlimit' [ 27.940832][ T29] audit: type=1400 audit(1723270628.329:85): avc: denied { setattr } for pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.966625][ T3252] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.972842][ T29] audit: type=1400 audit(1723270628.329:86): avc: denied { create } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.995942][ T29] audit: type=1400 audit(1723270628.329:87): avc: denied { write } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.016507][ T29] audit: type=1400 audit(1723270628.329:88): avc: denied { read } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.023834][ T3249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.036779][ T29] audit: type=1400 audit(1723270628.339:89): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.070311][ T29] audit: type=1400 audit(1723270628.339:90): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.093814][ T29] audit: type=1400 audit(1723270628.369:91): avc: denied { relabelto } for pid=3252 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.846518][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 29.900215][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 29.913684][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 29.930088][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 29.943458][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 29.977306][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.984473][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.991757][ T3267] bridge_slave_0: entered allmulticast mode [ 29.998386][ T3267] bridge_slave_0: entered promiscuous mode [ 30.020962][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.028106][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.035406][ T3267] bridge_slave_1: entered allmulticast mode [ 30.041835][ T3267] bridge_slave_1: entered promiscuous mode [ 30.088672][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.095870][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.103063][ T3259] bridge_slave_0: entered allmulticast mode [ 30.109574][ T3259] bridge_slave_0: entered promiscuous mode [ 30.118610][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.125743][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.132993][ T3259] bridge_slave_1: entered allmulticast mode [ 30.139522][ T3259] bridge_slave_1: entered promiscuous mode [ 30.146962][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.181957][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.196176][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.203281][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.210712][ T3260] bridge_slave_0: entered allmulticast mode [ 30.217292][ T3260] bridge_slave_0: entered promiscuous mode [ 30.244158][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.251611][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.258816][ T3260] bridge_slave_1: entered allmulticast mode [ 30.265561][ T3260] bridge_slave_1: entered promiscuous mode [ 30.271938][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.279288][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.286470][ T3265] bridge_slave_0: entered allmulticast mode [ 30.293031][ T3265] bridge_slave_0: entered promiscuous mode [ 30.299641][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.306922][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.314165][ T3266] bridge_slave_0: entered allmulticast mode [ 30.320744][ T3266] bridge_slave_0: entered promiscuous mode [ 30.328260][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.338850][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.348811][ T3267] team0: Port device team_slave_0 added [ 30.364713][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.371951][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.379150][ T3265] bridge_slave_1: entered allmulticast mode [ 30.385488][ T3265] bridge_slave_1: entered promiscuous mode [ 30.391808][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.399070][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.406373][ T3266] bridge_slave_1: entered allmulticast mode [ 30.412781][ T3266] bridge_slave_1: entered promiscuous mode [ 30.424713][ T3267] team0: Port device team_slave_1 added [ 30.431628][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.459897][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.488972][ T3259] team0: Port device team_slave_0 added [ 30.494978][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.502058][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.528096][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.540236][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.549717][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.556794][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.582749][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.594779][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.609428][ T3259] team0: Port device team_slave_1 added [ 30.615782][ T3260] team0: Port device team_slave_0 added [ 30.622449][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.632533][ T3260] team0: Port device team_slave_1 added [ 30.646841][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.671398][ T3265] team0: Port device team_slave_0 added [ 30.682488][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.689581][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.715586][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.742064][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.749163][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.775200][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.786912][ T3265] team0: Port device team_slave_1 added [ 30.792937][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.799976][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.825985][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.837290][ T3266] team0: Port device team_slave_0 added [ 30.848111][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.855251][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.881419][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.906940][ T3266] team0: Port device team_slave_1 added [ 30.922215][ T3267] hsr_slave_0: entered promiscuous mode [ 30.928244][ T3267] hsr_slave_1: entered promiscuous mode [ 30.950432][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.957474][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.983797][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.995171][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.002209][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.028414][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.039452][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.046438][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.072586][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.095285][ T3260] hsr_slave_0: entered promiscuous mode [ 31.101620][ T3260] hsr_slave_1: entered promiscuous mode [ 31.107617][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.115188][ T3260] Cannot create hsr debugfs directory [ 31.123533][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.130566][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.156566][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.203860][ T3266] hsr_slave_0: entered promiscuous mode [ 31.209977][ T3266] hsr_slave_1: entered promiscuous mode [ 31.216299][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.223849][ T3266] Cannot create hsr debugfs directory [ 31.250650][ T3259] hsr_slave_0: entered promiscuous mode [ 31.256926][ T3259] hsr_slave_1: entered promiscuous mode [ 31.262805][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.270452][ T3259] Cannot create hsr debugfs directory [ 31.316975][ T3265] hsr_slave_0: entered promiscuous mode [ 31.322904][ T3265] hsr_slave_1: entered promiscuous mode [ 31.329026][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.336620][ T3265] Cannot create hsr debugfs directory [ 31.455299][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.476131][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.496031][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.513860][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.544900][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.565403][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.574125][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.583861][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.592993][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.602210][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.619323][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.634745][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.658253][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.674140][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.683434][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.702001][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.746418][ T3265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.759100][ T3265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.777449][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.784442][ T3265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.799591][ T3265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.821216][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.841975][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.857369][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.873873][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.882234][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.889335][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.898731][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.905831][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.922668][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.940591][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.953452][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.960632][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.970489][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.977559][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.997159][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.004337][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.033860][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.041032][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.076914][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.109183][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.122153][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.135039][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.153986][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.162978][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.170107][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.180942][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.188040][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.209697][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.231635][ T3260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.242216][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.273105][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.280242][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.299525][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.306729][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.333904][ T3265] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.344365][ T3265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.370684][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.380460][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.405322][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.435392][ T3267] veth0_vlan: entered promiscuous mode [ 32.476346][ T3267] veth1_vlan: entered promiscuous mode [ 32.508853][ T3267] veth0_macvtap: entered promiscuous mode [ 32.542321][ T3267] veth1_macvtap: entered promiscuous mode [ 32.552975][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.589465][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.615154][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.636939][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.645893][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.654631][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.663586][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.699065][ T3259] veth0_vlan: entered promiscuous mode [ 32.719079][ T3266] veth0_vlan: entered promiscuous mode [ 32.729063][ T3259] veth1_vlan: entered promiscuous mode [ 32.743865][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.743880][ T29] audit: type=1400 audit(1723270633.129:110): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.HXrfMi/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.747103][ T3266] veth1_vlan: entered promiscuous mode [ 32.775576][ T29] audit: type=1400 audit(1723270633.149:111): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.785258][ T3260] veth0_vlan: entered promiscuous mode [ 32.802805][ T29] audit: type=1400 audit(1723270633.149:112): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/root/syzkaller.HXrfMi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.833427][ T29] audit: type=1400 audit(1723270633.149:113): avc: denied { mount } for pid=3267 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.834295][ T3266] veth0_macvtap: entered promiscuous mode [ 32.855273][ T29] audit: type=1400 audit(1723270633.149:114): avc: denied { unmount } for pid=3267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.870832][ T3260] veth1_vlan: entered promiscuous mode [ 32.890294][ T3265] veth0_vlan: entered promiscuous mode [ 32.896618][ T29] audit: type=1400 audit(1723270633.289:115): avc: denied { mounton } for pid=3267 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.899442][ T3266] veth1_macvtap: entered promiscuous mode [ 32.928470][ T3259] veth0_macvtap: entered promiscuous mode [ 32.942668][ T3265] veth1_vlan: entered promiscuous mode [ 32.952146][ T29] audit: type=1400 audit(1723270633.339:116): avc: denied { read write } for pid=3267 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.976898][ T29] audit: type=1400 audit(1723270633.339:117): avc: denied { open } for pid=3267 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.984819][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.001185][ T29] audit: type=1400 audit(1723270633.339:118): avc: denied { ioctl } for pid=3267 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.011784][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.041865][ T29] audit: type=1400 audit(1723270633.339:119): avc: denied { read append } for pid=3399 comm="syz.0.1" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 33.058319][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.076000][ T3401] GUP no longer grows the stack in syz.0.1 (3401): 20004000-2000a000 (20002000) [ 33.087022][ T3401] CPU: 1 UID: 0 PID: 3401 Comm: syz.0.1 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 33.097016][ T3260] veth0_macvtap: entered promiscuous mode [ 33.097710][ T3401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 33.105456][ T3259] veth1_macvtap: entered promiscuous mode [ 33.113488][ T3401] Call Trace: [ 33.113499][ T3401] [ 33.113507][ T3401] dump_stack_lvl+0xf2/0x150 [ 33.130284][ T3401] dump_stack+0x15/0x20 [ 33.133774][ T3260] veth1_macvtap: entered promiscuous mode [ 33.134510][ T3401] __get_user_pages+0xbb6/0x10d0 [ 33.145363][ T3401] get_user_pages_remote+0x1df/0x790 [ 33.150759][ T3401] __access_remote_vm+0x15b/0x580 [ 33.155848][ T3401] access_remote_vm+0x34/0x50 [ 33.158872][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.160538][ T3401] proc_pid_cmdline_read+0x3e9/0x670 [ 33.160572][ T3401] vfs_readv+0x3f1/0x660 [ 33.160637][ T3401] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 33.171069][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.176414][ T3401] __x64_sys_preadv+0x100/0x1c0 [ 33.180651][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.186433][ T3401] x64_sys_call+0x1d5c/0x2d60 [ 33.196850][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.201631][ T3401] do_syscall_64+0xc9/0x1c0 [ 33.217890][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.226806][ T3401] ? clear_bhb_loop+0x55/0xb0 [ 33.232088][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.238516][ T3401] ? clear_bhb_loop+0x55/0xb0 [ 33.238556][ T3401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.243205][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.243219][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.253696][ T3401] RIP: 0033:0x7ff8ec6c79f9 [ 33.253718][ T3401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.253741][ T3401] RSP: 002b:00007ff8eb326038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 33.253769][ T3401] RAX: ffffffffffffffda RBX: 00007ff8ec856058 RCX: 00007ff8ec6c79f9 [ 33.253799][ T3401] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000008 [ 33.258458][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.264316][ T3401] RBP: 00007ff8ec7358ee R08: 0000000000000000 R09: 0000000000000000 [ 33.274153][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.284521][ T3401] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 33.284539][ T3401] R13: 0000000000000000 R14: 00007ff8ec856058 R15: 00007ffdba5130c8 [ 33.284558][ T3401] [ 33.380955][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.395028][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.403538][ T3265] veth0_macvtap: entered promiscuous mode [ 33.413691][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.424291][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.434941][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.448364][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.459024][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.469067][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.479529][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.490243][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.498005][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.508658][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.518523][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.529173][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.539252][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.549879][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.561506][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.573038][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.581901][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.590772][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.599637][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.609507][ T3403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 33.620723][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.629598][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.638482][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.647237][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.658453][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.667435][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.676769][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.685703][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.700746][ T3265] veth1_macvtap: entered promiscuous mode [ 33.733034][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.735535][ C1] hrtimer: interrupt took 27400 ns [ 33.743580][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.758661][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.769459][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.779374][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.789899][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.799808][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.810375][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.824359][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.870247][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.880985][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.890983][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.901598][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.911552][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.922379][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.932337][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.943043][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.955580][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.966308][ T3265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.975029][ T3265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.983938][ T3265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.992698][ T3265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.062242][ T3416] loop4: detected capacity change from 0 to 2048 [ 34.091582][ T3417] loop3: detected capacity change from 0 to 2048 [ 34.105874][ T3416] loop4: p1 < > p3 [ 34.112302][ T3416] loop4: p3 size 134217728 extends beyond EOD, truncated [ 34.196557][ T3417] loop3: p1 < > p4 [ 34.200930][ T3417] loop3: p4 size 8388608 extends beyond EOD, truncated [ 35.071267][ T3432] loop4: detected capacity change from 0 to 512 [ 35.083797][ T3432] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10: bg 0: block 393: padding at end of block bitmap is not set [ 35.132964][ T3432] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 35.167129][ T3432] EXT4-fs (loop4): 2 truncates cleaned up [ 35.174383][ T3432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.233464][ T3432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10'. [ 35.300976][ T3432] syz.4.10 (3432) used greatest stack depth: 11600 bytes left [ 35.305572][ T3407] loop0: detected capacity change from 0 to 2048 [ 35.328445][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.372950][ T3407] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.7: casefold flag without casefold feature [ 35.404975][ T3407] EXT4-fs (loop0): get root inode failed [ 35.412137][ T3407] EXT4-fs (loop0): mount failed [ 35.479462][ T3450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 35.601776][ T3454] FAULT_INJECTION: forcing a failure. [ 35.601776][ T3454] name failslab, interval 1, probability 0, space 0, times 1 [ 35.604638][ T3452] loop0: detected capacity change from 0 to 1024 [ 35.614557][ T3454] CPU: 0 UID: 0 PID: 3454 Comm: syz.4.16 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 35.614604][ T3454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 35.641549][ T3454] Call Trace: [ 35.644835][ T3454] [ 35.647781][ T3454] dump_stack_lvl+0xf2/0x150 [ 35.652404][ T3454] dump_stack+0x15/0x20 [ 35.656669][ T3454] should_fail_ex+0x229/0x230 [ 35.661458][ T3454] ? rtm_new_nexthop+0x1471/0x4800 [ 35.666594][ T3454] should_failslab+0x8f/0xb0 [ 35.671326][ T3454] __kmalloc_cache_noprof+0x4b/0x2a0 [ 35.676637][ T3454] rtm_new_nexthop+0x1471/0x4800 [ 35.681723][ T3454] ? memcg_list_lru_alloc+0xd2/0x740 [ 35.687031][ T3454] ? mod_objcg_state+0x3b1/0x4f0 [ 35.692153][ T3454] ? security_capable+0x64/0x80 [ 35.697107][ T3454] ? ns_capable+0x7d/0xb0 [ 35.701521][ T3454] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 35.706838][ T3454] rtnetlink_rcv_msg+0x6aa/0x710 [ 35.711805][ T3454] ? ref_tracker_free+0x3a5/0x410 [ 35.717054][ T3454] ? __dev_queue_xmit+0x161/0x1fe0 [ 35.722183][ T3454] netlink_rcv_skb+0x12c/0x230 [ 35.727041][ T3454] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.732689][ T3454] rtnetlink_rcv+0x1c/0x30 [ 35.737145][ T3454] netlink_unicast+0x593/0x670 [ 35.741975][ T3454] netlink_sendmsg+0x5cc/0x6e0 [ 35.746791][ T3454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.752142][ T3454] __sock_sendmsg+0x140/0x180 [ 35.756913][ T3454] ____sys_sendmsg+0x312/0x410 [ 35.761922][ T3454] __sys_sendmsg+0x1e9/0x280 [ 35.766645][ T3454] __x64_sys_sendmsg+0x46/0x50 [ 35.771446][ T3454] x64_sys_call+0x2689/0x2d60 [ 35.776146][ T3454] do_syscall_64+0xc9/0x1c0 [ 35.780700][ T3454] ? clear_bhb_loop+0x55/0xb0 [ 35.785480][ T3454] ? clear_bhb_loop+0x55/0xb0 [ 35.790277][ T3454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.796293][ T3454] RIP: 0033:0x7fb2e57f79f9 [ 35.800739][ T3454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.820397][ T3454] RSP: 002b:00007fb2e4477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.828868][ T3454] RAX: ffffffffffffffda RBX: 00007fb2e5985f80 RCX: 00007fb2e57f79f9 [ 35.837338][ T3454] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 35.845318][ T3454] RBP: 00007fb2e4477090 R08: 0000000000000000 R09: 0000000000000000 [ 35.853430][ T3454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.861425][ T3454] R13: 0000000000000000 R14: 00007fb2e5985f80 R15: 00007ffef78f6998 [ 35.869586][ T3454] [ 35.882859][ T3452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.901517][ T3454] syz.4.16 (3454) used greatest stack depth: 11432 bytes left [ 36.188601][ T3464] loop1: detected capacity change from 0 to 128 [ 36.243015][ T3466] loop1: detected capacity change from 0 to 2048 [ 36.276211][ T3466] loop1: p1 < > p3 [ 36.280668][ T3466] loop1: p3 size 134217728 extends beyond EOD, truncated [ 36.510030][ T3469] loop2: detected capacity change from 0 to 2048 [ 36.516685][ T3469] EXT4-fs: Ignoring removed nobh option [ 36.522283][ T3469] EXT4-fs: Ignoring removed orlov option [ 36.528506][ T3469] ext4: Unknown parameter 'obj_type' [ 36.605243][ T3473] loop2: detected capacity change from 0 to 512 [ 36.614136][ T3473] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.23: bg 0: block 393: padding at end of block bitmap is not set [ 36.628935][ T3473] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 36.631980][ T3452] syz.0.15 (3452) used greatest stack depth: 11408 bytes left [ 36.639376][ T3473] EXT4-fs (loop2): 2 truncates cleaned up [ 36.651608][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.651858][ T3473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.681822][ T3473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'. [ 36.716361][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.737084][ T3480] FAULT_INJECTION: forcing a failure. [ 36.737084][ T3480] name failslab, interval 1, probability 0, space 0, times 0 [ 36.749911][ T3480] CPU: 0 UID: 0 PID: 3480 Comm: syz.2.26 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 36.760524][ T3480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 36.770605][ T3480] Call Trace: [ 36.773950][ T3480] [ 36.776896][ T3480] dump_stack_lvl+0xf2/0x150 [ 36.781599][ T3480] dump_stack+0x15/0x20 [ 36.785848][ T3480] should_fail_ex+0x229/0x230 [ 36.790566][ T3480] ? nl80211_vendor_cmd_dump+0xf5/0xc20 [ 36.796145][ T3480] should_failslab+0x8f/0xb0 [ 36.800781][ T3480] __kmalloc_cache_noprof+0x4b/0x2a0 [ 36.806152][ T3480] nl80211_vendor_cmd_dump+0xf5/0xc20 [ 36.811712][ T3480] ? __kmalloc_node_track_caller_noprof+0x17e/0x380 [ 36.818404][ T3480] ? __alloc_skb+0x1b5/0x310 [ 36.823013][ T3480] ? kmalloc_reserve+0x16e/0x190 [ 36.828024][ T3480] ? __build_skb_around+0x196/0x1f0 [ 36.833241][ T3480] genl_dumpit+0x9e/0x100 [ 36.837761][ T3480] netlink_dump+0x388/0x760 [ 36.837854][ T3459] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 36.842273][ T3480] __netlink_dump_start+0x430/0x510 [ 36.855721][ T3480] genl_rcv_msg+0x4e5/0x6c0 [ 36.860268][ T3480] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 36.866368][ T3480] ? __pfx_genl_start+0x10/0x10 [ 36.871441][ T3480] ? __pfx_genl_dumpit+0x10/0x10 [ 36.876429][ T3480] ? __pfx_genl_done+0x10/0x10 [ 36.881315][ T3480] netlink_rcv_skb+0x12c/0x230 [ 36.886116][ T3480] ? __pfx_genl_rcv_msg+0x10/0x10 [ 36.891202][ T3480] genl_rcv+0x28/0x40 [ 36.895230][ T3480] netlink_unicast+0x593/0x670 [ 36.900045][ T3480] netlink_sendmsg+0x5cc/0x6e0 [ 36.905186][ T3480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.910664][ T3480] __sock_sendmsg+0x140/0x180 [ 36.915483][ T3480] ____sys_sendmsg+0x312/0x410 [ 36.920351][ T3480] __sys_sendmsg+0x1e9/0x280 [ 36.925028][ T3480] __x64_sys_sendmsg+0x46/0x50 [ 36.929962][ T3480] x64_sys_call+0x2689/0x2d60 [ 36.934766][ T3480] do_syscall_64+0xc9/0x1c0 [ 36.939392][ T3480] ? clear_bhb_loop+0x55/0xb0 [ 36.944330][ T3480] ? clear_bhb_loop+0x55/0xb0 [ 36.949064][ T3480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.955070][ T3480] RIP: 0033:0x7f7672d379f9 [ 36.959505][ T3480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.979232][ T3480] RSP: 002b:00007f76719b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.987818][ T3480] RAX: ffffffffffffffda RBX: 00007f7672ec5f80 RCX: 00007f7672d379f9 [ 36.995856][ T3480] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000000000003 [ 37.003856][ T3480] RBP: 00007f76719b7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.011887][ T3480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.019895][ T3480] R13: 0000000000000000 R14: 00007f7672ec5f80 R15: 00007fffcf9f32a8 [ 37.028030][ T3480] [ 37.047036][ T3480] syz.2.26 (3480) used greatest stack depth: 11352 bytes left [ 37.062170][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 37.071083][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 37.082920][ T3487] loop2: detected capacity change from 0 to 512 [ 37.089634][ T3487] ======================================================= [ 37.089634][ T3487] WARNING: The mand mount option has been deprecated and [ 37.089634][ T3487] and is ignored by this kernel. Remove the mand [ 37.089634][ T3487] option from the mount to silence this warning. [ 37.089634][ T3487] ======================================================= [ 37.126505][ T3487] EXT4-fs (loop2): The Hurd can't support 64-bit file systems [ 37.189969][ T3489] loop1: detected capacity change from 0 to 8192 [ 37.211484][ T3489] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.339767][ T3498] FAULT_INJECTION: forcing a failure. [ 37.339767][ T3498] name failslab, interval 1, probability 0, space 0, times 0 [ 37.352447][ T3498] CPU: 1 UID: 0 PID: 3498 Comm: syz.2.33 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 37.363061][ T3498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 37.373460][ T3498] Call Trace: [ 37.376758][ T3498] [ 37.379711][ T3498] dump_stack_lvl+0xf2/0x150 [ 37.384396][ T3498] dump_stack+0x15/0x20 [ 37.388633][ T3498] should_fail_ex+0x229/0x230 [ 37.393358][ T3498] ? __alloc_skb+0x10b/0x310 [ 37.397970][ T3498] should_failslab+0x8f/0xb0 [ 37.402601][ T3498] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 37.408444][ T3498] __alloc_skb+0x10b/0x310 [ 37.412887][ T3498] netlink_ack+0xef/0x4f0 [ 37.417241][ T3498] ? should_failslab+0x8f/0xb0 [ 37.422070][ T3498] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 37.427821][ T3498] nfnetlink_rcv+0x1363/0x15b0 [ 37.432614][ T3498] netlink_unicast+0x593/0x670 [ 37.437626][ T3498] netlink_sendmsg+0x5cc/0x6e0 [ 37.442499][ T3498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.448050][ T3498] __sock_sendmsg+0x140/0x180 [ 37.452747][ T3498] ____sys_sendmsg+0x312/0x410 [ 37.457542][ T3498] __sys_sendmsg+0x1e9/0x280 [ 37.462158][ T3498] __x64_sys_sendmsg+0x46/0x50 [ 37.467085][ T3498] x64_sys_call+0x2689/0x2d60 [ 37.471791][ T3498] do_syscall_64+0xc9/0x1c0 [ 37.476462][ T3498] ? clear_bhb_loop+0x55/0xb0 [ 37.481158][ T3498] ? clear_bhb_loop+0x55/0xb0 [ 37.485859][ T3498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.491858][ T3498] RIP: 0033:0x7f7672d379f9 [ 37.496282][ T3498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.516147][ T3498] RSP: 002b:00007f76719b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.524596][ T3498] RAX: ffffffffffffffda RBX: 00007f7672ec5f80 RCX: 00007f7672d379f9 [ 37.532631][ T3498] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 37.540693][ T3498] RBP: 00007f76719b7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.548718][ T3498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 37.556780][ T3498] R13: 0000000000000000 R14: 00007f7672ec5f80 R15: 00007fffcf9f32a8 [ 37.564782][ T3498] [ 37.590877][ T3500] FAULT_INJECTION: forcing a failure. [ 37.590877][ T3500] name failslab, interval 1, probability 0, space 0, times 0 [ 37.603844][ T3500] CPU: 1 UID: 0 PID: 3500 Comm: syz.1.34 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 37.614436][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 37.624549][ T3500] Call Trace: [ 37.627844][ T3500] [ 37.630892][ T3500] dump_stack_lvl+0xf2/0x150 [ 37.635533][ T3500] dump_stack+0x15/0x20 [ 37.639787][ T3500] should_fail_ex+0x229/0x230 [ 37.644497][ T3500] ? skb_clone+0x154/0x1f0 [ 37.648981][ T3500] should_failslab+0x8f/0xb0 [ 37.653698][ T3500] kmem_cache_alloc_noprof+0x4c/0x290 [ 37.659087][ T3500] skb_clone+0x154/0x1f0 [ 37.663431][ T3500] __netlink_deliver_tap+0x2bd/0x4c0 [ 37.668813][ T3500] netlink_unicast+0x641/0x670 [ 37.673653][ T3500] netlink_sendmsg+0x5cc/0x6e0 [ 37.678447][ T3500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.683775][ T3500] __sock_sendmsg+0x140/0x180 [ 37.688561][ T3500] ____sys_sendmsg+0x312/0x410 [ 37.693352][ T3500] __sys_sendmsg+0x1e9/0x280 [ 37.698040][ T3500] __x64_sys_sendmsg+0x46/0x50 [ 37.702855][ T3500] x64_sys_call+0x2689/0x2d60 [ 37.707591][ T3500] do_syscall_64+0xc9/0x1c0 [ 37.712134][ T3500] ? clear_bhb_loop+0x55/0xb0 [ 37.716890][ T3500] ? clear_bhb_loop+0x55/0xb0 [ 37.721711][ T3500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.727705][ T3500] RIP: 0033:0x7f5b627079f9 [ 37.732173][ T3500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.752095][ T3500] RSP: 002b:00007f5b61387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.760512][ T3500] RAX: ffffffffffffffda RBX: 00007f5b62895f80 RCX: 00007f5b627079f9 [ 37.768531][ T3500] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 37.776638][ T3500] RBP: 00007f5b61387090 R08: 0000000000000000 R09: 0000000000000000 [ 37.784612][ T3500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.792591][ T3500] R13: 0000000000000000 R14: 00007f5b62895f80 R15: 00007ffce1162d18 [ 37.800571][ T3500] [ 37.886329][ T3502] loop2: detected capacity change from 0 to 512 [ 37.927742][ T3502] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.940870][ T3502] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.966394][ T3502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 37.990090][ T3502] System zones: 1-12 [ 37.994672][ T3502] EXT4-fs (loop2): 1 truncate cleaned up [ 38.015099][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.092654][ T3478] loop0: detected capacity change from 0 to 2048 [ 38.096093][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.134740][ T3478] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.25: casefold flag without casefold feature [ 38.160607][ T3513] loop2: detected capacity change from 0 to 1024 [ 38.171423][ T3478] EXT4-fs (loop0): get root inode failed [ 38.178754][ T3478] EXT4-fs (loop0): mount failed [ 38.197908][ T3515] loop1: detected capacity change from 0 to 2048 [ 38.222009][ T3513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.276679][ T3515] loop1: p1 < > p3 [ 38.280938][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 38.280953][ T29] audit: type=1400 audit(1723270638.639:194): avc: denied { mounton } for pid=3512 comm="syz.2.38" path="/11/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.319143][ T3515] loop1: p3 size 134217728 extends beyond EOD, truncated [ 38.368095][ T3265] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 38.395632][ T29] audit: type=1400 audit(1723270638.709:195): avc: denied { remount } for pid=3512 comm="syz.2.38" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 38.415297][ T29] audit: type=1400 audit(1723270638.729:196): avc: denied { create } for pid=3518 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.434758][ T29] audit: type=1400 audit(1723270638.749:197): avc: denied { remove_name } for pid=3265 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.447037][ T3265] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 38.458047][ T29] audit: type=1400 audit(1723270638.749:198): avc: denied { rmdir } for pid=3265 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.497930][ T29] audit: type=1400 audit(1723270638.759:199): avc: denied { unlink } for pid=3265 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.520384][ T29] audit: type=1400 audit(1723270638.759:200): avc: denied { unlink } for pid=3265 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 38.543529][ T29] audit: type=1400 audit(1723270638.779:201): avc: denied { setopt } for pid=3518 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 38.684447][ T3524] loop0: detected capacity change from 0 to 512 [ 38.720847][ T3526] loop0: detected capacity change from 0 to 256 [ 38.730152][ T3526] Zero length message leads to an empty skb [ 38.817647][ T3265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.828335][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.847024][ T3265] syz-executor (3265) used greatest stack depth: 11304 bytes left [ 38.880936][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.894340][ T29] audit: type=1400 audit(1723270639.289:202): avc: denied { validate_trans } for pid=3536 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.941660][ T29] audit: type=1400 audit(1723270639.309:203): avc: denied { ioctl } for pid=3536 comm="syz.1.50" path="socket:[4079]" dev="sockfs" ino=4079 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.992906][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.043371][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.080805][ T3551] loop0: detected capacity change from 0 to 2048 [ 39.122034][ T36] bridge_slave_1: left allmulticast mode [ 39.127761][ T36] bridge_slave_1: left promiscuous mode [ 39.133469][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.143377][ T3551] loop0: p1 < > p3 [ 39.157159][ T3551] loop0: p3 size 134217728 extends beyond EOD, truncated [ 39.190478][ T36] bridge_slave_0: left allmulticast mode [ 39.196214][ T36] bridge_slave_0: left promiscuous mode [ 39.201959][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.222107][ T3557] FAULT_INJECTION: forcing a failure. [ 39.222107][ T3557] name failslab, interval 1, probability 0, space 0, times 0 [ 39.234834][ T3557] CPU: 1 UID: 0 PID: 3557 Comm: syz.3.56 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 39.245363][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 39.255522][ T3557] Call Trace: [ 39.258826][ T3557] [ 39.261859][ T3557] dump_stack_lvl+0xf2/0x150 [ 39.266568][ T3557] dump_stack+0x15/0x20 [ 39.270805][ T3557] should_fail_ex+0x229/0x230 [ 39.275597][ T3557] ? sidtab_sid2str_get+0xb8/0x140 [ 39.280858][ T3557] should_failslab+0x8f/0xb0 [ 39.285634][ T3557] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 39.292040][ T3557] kmemdup_noprof+0x2a/0x60 [ 39.296567][ T3557] sidtab_sid2str_get+0xb8/0x140 [ 39.301623][ T3557] security_sid_to_context_core+0x1eb/0x2f0 [ 39.307586][ T3557] security_sid_to_context+0x27/0x30 [ 39.312909][ T3557] selinux_secid_to_secctx+0x22/0x30 [ 39.318273][ T3557] security_secid_to_secctx+0x4a/0x80 [ 39.323805][ T3557] audit_log_task_context+0x8c/0x1b0 [ 39.329174][ T3557] audit_log_task+0xfb/0x180 [ 39.334080][ T3557] audit_seccomp+0x68/0x130 [ 39.338661][ T3557] __seccomp_filter+0x6fa/0x1180 [ 39.343721][ T3557] ? proc_fail_nth_write+0x12d/0x160 [ 39.349110][ T3557] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 39.354766][ T3557] ? vfs_write+0x5a5/0x900 [ 39.359219][ T3557] ? __fget_files+0x1da/0x210 [ 39.363962][ T3557] __secure_computing+0x9f/0x1c0 [ 39.368972][ T3557] syscall_trace_enter+0xd1/0x1f0 [ 39.374109][ T3557] ? fpregs_assert_state_consistent+0x83/0xa0 [ 39.380296][ T3557] do_syscall_64+0xaa/0x1c0 [ 39.384855][ T3557] ? clear_bhb_loop+0x55/0xb0 [ 39.389577][ T3557] ? clear_bhb_loop+0x55/0xb0 [ 39.394303][ T3557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.400494][ T3557] RIP: 0033:0x7f856b62643c [ 39.404936][ T3557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 39.424878][ T3557] RSP: 002b:00007f856a2a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.433435][ T3557] RAX: ffffffffffffffda RBX: 00007f856b7b5f80 RCX: 00007f856b62643c [ 39.441516][ T3557] RDX: 000000000000000f RSI: 00007f856a2a70a0 RDI: 0000000000000006 [ 39.449503][ T3557] RBP: 00007f856a2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.457494][ T3557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.465767][ T3557] R13: 0000000000000000 R14: 00007f856b7b5f80 R15: 00007fff2cdd9958 [ 39.473879][ T3557] [ 39.647698][ T3563] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 39.668950][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.687608][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.708632][ T36] bond0 (unregistering): Released all slaves [ 39.832808][ T36] hsr_slave_0: left promiscuous mode [ 39.839055][ T36] hsr_slave_1: left promiscuous mode [ 39.846192][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.853621][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.873703][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.881171][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.898712][ T36] veth1_macvtap: left promiscuous mode [ 39.904373][ T36] veth0_macvtap: left promiscuous mode [ 39.910317][ T36] veth1_vlan: left promiscuous mode [ 39.915800][ T36] veth0_vlan: left promiscuous mode [ 40.148320][ T36] team0 (unregistering): Port device team_slave_1 removed [ 40.162601][ T36] team0 (unregistering): Port device team_slave_0 removed [ 40.216710][ T3582] netlink: 'syz.4.65': attribute type 21 has an invalid length. [ 40.224890][ T3582] netlink: 132 bytes leftover after parsing attributes in process `syz.4.65'. [ 40.233833][ T3582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 40.254941][ T3545] chnl_net:caif_netlink_parms(): no params data found [ 40.339909][ T3601] loop3: detected capacity change from 0 to 2048 [ 40.356875][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.363993][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.375898][ T3601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.389424][ T3545] bridge_slave_0: entered allmulticast mode [ 40.402275][ T3545] bridge_slave_0: entered promiscuous mode [ 40.411224][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.418366][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.427625][ T3545] bridge_slave_1: entered allmulticast mode [ 40.434197][ T3545] bridge_slave_1: entered promiscuous mode [ 40.459743][ T3545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.472701][ T3542] loop1: detected capacity change from 0 to 2048 [ 40.481317][ T3545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.507360][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.551595][ T3545] team0: Port device team_slave_0 added [ 40.560076][ T3542] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.53: casefold flag without casefold feature [ 40.574595][ T3545] team0: Port device team_slave_1 added [ 40.588464][ T3542] EXT4-fs (loop1): get root inode failed [ 40.594835][ T3542] EXT4-fs (loop1): mount failed [ 40.598933][ T3615] loop4: detected capacity change from 0 to 1024 [ 40.637152][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.644134][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.670262][ T3545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.695556][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.717511][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.724554][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.750635][ T3545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.824036][ T3623] loop3: detected capacity change from 0 to 2048 [ 40.826826][ T3545] hsr_slave_0: entered promiscuous mode [ 40.840889][ T3545] hsr_slave_1: entered promiscuous mode [ 40.847100][ T3545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.854775][ T3545] Cannot create hsr debugfs directory [ 40.867638][ T3623] loop3: p1 < > p3 [ 40.876203][ T3623] loop3: p3 size 134217728 extends beyond EOD, truncated [ 41.151941][ T3545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.161133][ T3545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.170130][ T3545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.179621][ T3545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.230524][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.246767][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.256931][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.264211][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.278479][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.279809][ T3636] loop0: detected capacity change from 0 to 2048 [ 41.285894][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.299717][ T3545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.310345][ T3545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.328107][ T3636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.350679][ T3636] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 41.369172][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.398559][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.424981][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.470653][ T3657] loop0: detected capacity change from 0 to 512 [ 41.518451][ T3657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.527187][ T3545] veth0_vlan: entered promiscuous mode [ 41.536771][ T3657] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.541644][ T3545] veth1_vlan: entered promiscuous mode [ 41.559324][ T3657] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.85: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 41.566571][ T3545] veth0_macvtap: entered promiscuous mode [ 41.585502][ T3657] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.85: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 41.590561][ T3545] veth1_macvtap: entered promiscuous mode [ 41.612971][ T3657] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.85: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 41.619221][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.635409][ T3657] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.85: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 41.644552][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.674721][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.679170][ T3666] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.85: lblock 23 mapped to illegal pblock 18 (length 1) [ 41.685178][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.709452][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.720014][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.729911][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.735124][ T3667] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.85: lblock 23 mapped to illegal pblock 18 (length 1) [ 41.740417][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.743613][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.776788][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.777763][ T3657] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.85: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 41.787358][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.817666][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.828221][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.838084][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.842189][ T3657] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.85: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 41.848625][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.848640][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.871440][ T3657] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.85: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 41.879238][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.891420][ T3657] EXT4-fs error (device loop0): ext4_map_blocks:609: inode #2: block 18: comm syz.0.85: lblock 23 mapped to illegal pblock 18 (length 1) [ 41.912228][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.959432][ T3545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.968263][ T3545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.977179][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.985934][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.050519][ T3677] 9pnet_fd: Insufficient options for proto=fd [ 42.174537][ T3682] loop2: detected capacity change from 0 to 128 [ 42.215551][ T3682] loop2: detected capacity change from 128 to 0 [ 42.222562][ T3682] syz.2.89: attempt to access beyond end of device [ 42.222562][ T3682] loop2: rw=0, sector=3, nr_sectors = 1 limit=0 [ 42.235684][ T3682] FAT-fs (loop2): Directory bread(block 3) failed [ 42.242144][ T3682] syz.2.89: attempt to access beyond end of device [ 42.242144][ T3682] loop2: rw=0, sector=4, nr_sectors = 1 limit=0 [ 42.256407][ T3682] FAT-fs (loop2): Directory bread(block 4) failed [ 42.263175][ T3682] syz.2.89: attempt to access beyond end of device [ 42.263175][ T3682] loop2: rw=0, sector=5, nr_sectors = 1 limit=0 [ 42.276509][ T3682] FAT-fs (loop2): Directory bread(block 5) failed [ 42.283118][ T3682] syz.2.89: attempt to access beyond end of device [ 42.283118][ T3682] loop2: rw=0, sector=6, nr_sectors = 1 limit=0 [ 42.296658][ T3682] FAT-fs (loop2): Directory bread(block 6) failed [ 42.330290][ T3656] syz.0.85 (3656) used greatest stack depth: 11288 bytes left [ 42.340447][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.383467][ T3693] capability: warning: `syz.0.93' uses 32-bit capabilities (legacy support in use) [ 42.383800][ T3690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 42.412440][ T3545] syz-executor: attempt to access beyond end of device [ 42.412440][ T3545] loop2: rw=0, sector=3, nr_sectors = 1 limit=0 [ 42.425608][ T3545] FAT-fs (loop2): Directory bread(block 3) failed [ 42.432095][ T3545] syz-executor: attempt to access beyond end of device [ 42.432095][ T3545] loop2: rw=0, sector=4, nr_sectors = 1 limit=0 [ 42.445158][ T3545] FAT-fs (loop2): Directory bread(block 4) failed [ 42.453178][ T3545] syz-executor: attempt to access beyond end of device [ 42.453178][ T3545] loop2: rw=0, sector=5, nr_sectors = 1 limit=0 [ 42.481149][ T3545] FAT-fs (loop2): Directory bread(block 5) failed [ 42.488952][ T3545] syz-executor: attempt to access beyond end of device [ 42.488952][ T3545] loop2: rw=0, sector=6, nr_sectors = 1 limit=0 [ 42.502644][ T3545] FAT-fs (loop2): Directory bread(block 6) failed [ 42.516501][ T3545] syz-executor: attempt to access beyond end of device [ 42.516501][ T3545] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 42.520272][ T3703] loop0: detected capacity change from 0 to 256 [ 42.542717][ T3545] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 42.562410][ T3705] loop1: detected capacity change from 0 to 256 [ 42.686513][ T3707] loop1: detected capacity change from 0 to 1024 [ 42.693261][ T3707] EXT4-fs: Ignoring removed i_version option [ 42.699365][ T3707] EXT4-fs: test_dummy_encryption option not supported [ 42.807263][ T3707] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.300471][ T3722] FAULT_INJECTION: forcing a failure. [ 43.300471][ T3722] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.313861][ T3722] CPU: 0 UID: 0 PID: 3722 Comm: syz.3.105 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 43.324466][ T3722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.334540][ T3722] Call Trace: [ 43.337824][ T3722] [ 43.340761][ T3722] dump_stack_lvl+0xf2/0x150 [ 43.345373][ T3722] dump_stack+0x15/0x20 [ 43.349625][ T3722] should_fail_ex+0x229/0x230 [ 43.354336][ T3722] should_fail+0xb/0x10 [ 43.358505][ T3722] should_fail_usercopy+0x1a/0x20 [ 43.363547][ T3722] _copy_from_iter+0xd3/0xb00 [ 43.368416][ T3722] ? kmalloc_reserve+0x16e/0x190 [ 43.373448][ T3722] ? __build_skb_around+0x196/0x1f0 [ 43.378771][ T3722] ? __alloc_skb+0x21f/0x310 [ 43.383393][ T3722] ? __virt_addr_valid+0x1ed/0x250 [ 43.388515][ T3722] ? __check_object_size+0x35b/0x510 [ 43.393864][ T3722] netlink_sendmsg+0x460/0x6e0 [ 43.398641][ T3722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.403934][ T3722] __sock_sendmsg+0x140/0x180 [ 43.408673][ T3722] ____sys_sendmsg+0x312/0x410 [ 43.413539][ T3722] __sys_sendmsg+0x1e9/0x280 [ 43.418174][ T3722] __x64_sys_sendmsg+0x46/0x50 [ 43.422990][ T3722] x64_sys_call+0x2689/0x2d60 [ 43.427680][ T3722] do_syscall_64+0xc9/0x1c0 [ 43.432469][ T3722] ? clear_bhb_loop+0x55/0xb0 [ 43.437220][ T3722] ? clear_bhb_loop+0x55/0xb0 [ 43.441982][ T3722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.447970][ T3722] RIP: 0033:0x7f856b6279f9 [ 43.452387][ T3722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.472120][ T3722] RSP: 002b:00007f856a2a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.480602][ T3722] RAX: ffffffffffffffda RBX: 00007f856b7b5f80 RCX: 00007f856b6279f9 [ 43.488795][ T3722] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 43.496779][ T3722] RBP: 00007f856a2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.504930][ T3722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.512936][ T3722] R13: 0000000000000000 R14: 00007f856b7b5f80 R15: 00007fff2cdd9958 [ 43.521062][ T3722] [ 43.565769][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 43.565788][ T29] audit: type=1400 audit(1723270643.949:286): avc: denied { setopt } for pid=3719 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.603055][ T29] audit: type=1400 audit(1723270643.989:287): avc: denied { map } for pid=3725 comm="syz.1.107" path="socket:[5817]" dev="sockfs" ino=5817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.626378][ T29] audit: type=1400 audit(1723270643.989:288): avc: denied { read } for pid=3725 comm="syz.1.107" path="socket:[5817]" dev="sockfs" ino=5817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.659918][ T29] audit: type=1400 audit(1723270644.049:289): avc: denied { setopt } for pid=3725 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 43.721235][ T29] audit: type=1400 audit(1723270644.109:290): avc: denied { listen } for pid=3739 comm="syz.0.112" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.743918][ T3743] ================================================================== [ 43.744355][ T3740] sctp: failed to load transform for md5: -2 [ 43.752036][ T3743] BUG: KCSAN: data-race in mas_replace_node / mtree_range_walk [ 43.752101][ T3743] [ 43.752108][ T3743] write to 0xffff888106892900 of 8 bytes by task 3739 on cpu 0: [ 43.752127][ T3743] mas_replace_node+0x1b5/0x440 [ 43.768964][ T29] audit: type=1400 audit(1723270644.129:291): avc: denied { accept } for pid=3739 comm="syz.0.112" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.775833][ T3743] mas_wr_modify+0x2bc3/0x3c90 [ 43.775863][ T3743] mas_wr_store_entry+0x250/0x390 [ 43.775901][ T3743] mas_store_prealloc+0x151/0x2b0 [ 43.775937][ T3743] vma_complete+0x3a7/0x760 [ 43.775961][ T3743] __split_vma+0x5dc/0x690 [ 43.782331][ T29] audit: type=1400 audit(1723270644.129:292): avc: denied { create } for pid=3734 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 43.801961][ T3743] vma_modify+0x108/0x1f0 [ 43.801994][ T3743] mprotect_fixup+0x335/0x610 [ 43.802031][ T3743] do_mprotect_pkey+0x673/0x9a0 [ 43.802056][ T3743] __x64_sys_mprotect+0x48/0x60 [ 43.802091][ T3743] x64_sys_call+0x26cf/0x2d60 [ 43.802120][ T3743] do_syscall_64+0xc9/0x1c0 [ 43.840721][ T3737] netlink: 'syz.3.111': attribute type 37 has an invalid length. [ 43.846055][ T3743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.846095][ T3743] [ 43.846102][ T3743] read to 0xffff888106892900 of 8 bytes by task 3743 on cpu 1: [ 43.846120][ T3743] mtree_range_walk+0x33d/0x460 [ 43.846157][ T3743] mas_walk+0x16e/0x320 [ 43.846191][ T3743] lock_vma_under_rcu+0x84/0x260 [ 43.846220][ T3743] exc_page_fault+0x150/0x650 [ 43.846247][ T3743] asm_exc_page_fault+0x26/0x30 [ 43.846272][ T3743] [ 43.846276][ T3743] value changed: 0xffff888106892a06 -> 0xffff888106892900 [ 43.846289][ T3743] [ 43.846293][ T3743] Reported by Kernel Concurrency Sanitizer on: [ 43.846302][ T3743] CPU: 1 UID: 0 PID: 3743 Comm: syz.0.112 Not tainted 6.11.0-rc2-syzkaller-00194-gafdab700f65e #0 [ 43.846331][ T3743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 43.846345][ T3743] ================================================================== [ 45.854577][ T342] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.939980][ T342] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.019341][ T342] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.078787][ T342] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.128313][ T342] bridge_slave_1: left allmulticast mode [ 48.134070][ T342] bridge_slave_1: left promiscuous mode [ 48.139811][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.148266][ T342] bridge_slave_0: left allmulticast mode [ 48.153966][ T342] bridge_slave_0: left promiscuous mode [ 48.159650][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.240302][ T342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.250914][ T342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.262047][ T342] bond0 (unregistering): Released all slaves [ 48.408329][ T342] hsr_slave_0: left promiscuous mode [ 48.414107][ T342] hsr_slave_1: left promiscuous mode [ 48.419851][ T342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.427496][ T342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.435168][ T342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.442719][ T342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.451793][ T342] veth1_macvtap: left promiscuous mode [ 48.457310][ T342] veth0_macvtap: left promiscuous mode [ 48.462916][ T342] veth1_vlan: left promiscuous mode [ 48.468237][ T342] veth0_vlan: left promiscuous mode [ 48.554684][ T342] team0 (unregistering): Port device team_slave_1 removed [ 48.565271][ T342] team0 (unregistering): Port device team_slave_0 removed