last executing test programs: 2.955086768s ago: executing program 4 (id=154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) ppoll(&(0x7f0000000900)=[{r0}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.050699335s ago: executing program 4 (id=172): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 1.737788262s ago: executing program 4 (id=174): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xcae5}, 0x90) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4048800) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000000000000001d1e010e7126", 0xf}, {&(0x7f0000000100)="99d8b3", 0x3}], 0x2}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20c2008, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'local', '', @void}}}, {@huge_advise}, {@mode={'mode', 0x3d, 0x9}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@context={'context', 0x3d, 'root'}}, {@permit_directio}, {@fsname={'fsname', 0x3d, '/]'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) 1.63534614s ago: executing program 4 (id=175): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000700)=""/224, 0xe0}], 0x1, &(0x7f0000000600)=""/232, 0xe8}, 0x1}], 0x2, 0x30185aa1441f8a3a, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x63}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000300)=0x800185, 0x4) r4 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000002700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211c0011800b00010065787468647200000c0002800800064000000003140000001000010000000000000000000000000a"], 0xa0}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x10010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x4}, @jmp={0x6, 0x0, 0x4}]}, &(0x7f0000000540)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='ext4_es_lookup_extent_exit\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="54010000100013070000000000000000ac14aa1c33c5000000000000000000000000000000000000000080000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"/268], 0x154}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) 1.372582303s ago: executing program 4 (id=179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) close(r0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r2, 0x0, 0x548) (async) sendfile(r2, r2, 0x0, 0x548) r3 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x27, 0x1, 0x0, 0x20, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000000000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0xc3, 0x1, 0x480, 0xffffffffffffffff, 0xb, '\x00', 0x0, r1, 0x4, 0x0, 0x5}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0xc3, 0x1, 0x480, 0xffffffffffffffff, 0xb, '\x00', 0x0, r1, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f00000021c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f00000021c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$caif_stream(0x25, 0x1, 0xfffffffd) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x200000}) (async) r9 = io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x200000}) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f00000002c0)) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @local}}) (async) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @local}}) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000380)={0x2a, 0x2, 0xfffffffe}, 0xc) read(r8, 0x0, 0x0) close_range(r4, r1, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg2\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="8000000000"], 0x20}}, 0x0) 1.311537228s ago: executing program 0 (id=180): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000fe80000000000000000000000000001500000000000000000a00001000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6251c78ced42731adcd735700000000eeffffff00"/112], 0xb8}}, 0x0) 1.275793461s ago: executing program 0 (id=182): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioperm(0x0, 0x8001, 0x9) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x80000001}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x8da}, &(0x7f0000000200)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) gettid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000010280)=""/4087, 0xff7}], 0x1}, 0x0) 1.155764821s ago: executing program 0 (id=184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) ppoll(&(0x7f0000000900)=[{r0}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.097390497s ago: executing program 2 (id=185): syz_open_procfs(0x0, &(0x7f00000009c0)='net/fib_trie\x00') syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x814c10, &(0x7f0000000600)=ANY=[@ANYBLOB="0084963f0b4883b8a8c2473034b4d1bf2472a76bae620cf3103903000dd411504d4e94b297af91b5987ce6f2a41ded7058c59e21ca7cd641ceefa13f36ecd31510824d45c4c80b9afe91872a"], 0xfd, 0x1c9, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x3b, {@dev}}}], 0x28}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7, 0x0, 0xffffffffffffffff, @prog_id, r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084ffffffff000000000300000000000000000000000000000280000000000000000000000902"], 0x0, 0x4a}, 0x20) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_EMULATED_HOST(r6, 0x2283, &(0x7f0000000000)) 1.06064672s ago: executing program 2 (id=186): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000840)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8008000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc3}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9c}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0xc811}, 0x10000) 989.960076ms ago: executing program 2 (id=187): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 956.721198ms ago: executing program 2 (id=188): socket$kcm(0x2, 0x3, 0x84) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x1000fd, 0x4a}, 0x20) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x24f7, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4822, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24f7, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x22c8, &(0x7f0000000540)={0x0, 0x0, 0x486, 0x802}, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x73b2, &(0x7f0000000240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x4bff, &(0x7f00000002c0), 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000080), 0x0, 0x0) io_uring_setup(0xd45, &(0x7f00000001c0)) socket$caif_stream(0x25, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) 490.928438ms ago: executing program 4 (id=191): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2, &(0x7f0000003700)={0x77359400}) recvmmsg(r0, &(0x7f00000080c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/110, 0x6e}}], 0x1, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000000580), 0x0) prlimit64(r1, 0xb, &(0x7f0000000140)={0x8, 0x1}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 426.974974ms ago: executing program 1 (id=193): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x20048884) (async) r1 = inotify_init1(0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/126, 0x7e) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000380)) socket$l2tp6(0xa, 0x2, 0x73) getpriority(0x0, 0x0) (async) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) lseek(r3, 0x1, 0x0) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) getdents(r3, &(0x7f00000005c0)=""/179, 0xb3) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}, 0x1c) listen(0xffffffffffffffff, 0x0) (async) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="e0caf71c0408e9fcdd7e677bb46909000000daa536c3424500001c00af000004029078ac00000007000000000000863cefca636a8354e25d409c6dbcb988ce539f4e8b27cfef1cdb7793babf78f7ef3e1e75f09f6d70fa27bfd7f05a0cf18ba1a8d08909da8915e16a4f26f2bf9d093863ebcb4ecd1e5a69fae6ea9b977357b052dae72d743d9ea619c77013e0b53e991091f31ad7fe04206c994440849678dc6785c0761201a0bd16162d237dea530bdaf3b22f479e373fcc24ab57c7d8de62dfcf65a754b74e946bdfe1e4"], 0x0) (async) sendmsg(r5, &(0x7f00000004c0)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}) 375.451948ms ago: executing program 3 (id=194): r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1f, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_FLAGS={0x8, 0x8, 0x300}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 375.110038ms ago: executing program 1 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x510}) r1 = socket$rds(0x15, 0x5, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0xe48f77d686c80da2, &(0x7f0000000100)="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", 0xfa, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="f1daec59e2b9de51705bb8536c01933b50bdad190552b9f96b394d1e8eaddd1512") sendmsg$nl_generic(r3, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f00000002c0)={0x6e0, 0x41, 0x8, 0x70bd2c, 0x25dfdbfd, {0x8}, [@nested={0x178, 0x18, 0x0, 0x1, [@generic="d3579d9fcf43853ae8e5d9eeac60d04d61791336eb257012167139710c7bf371e4f4f91ad84f0097f2451df035894e08ea35520725719d467d09f71b6f5c67465794a9ad255d80d8d011bbdb6ee795ae25c8fb47ea891d828bdd0749a06c1061bd92d4a6b7d212ea8828fbc7194252193c2f6f6b79702afc74ec48485439afbf99311253989d90a34d273adec5e23f804838f694c9e0e69a479a570a1dc2e04bc9f8b5d940bef9eeb3b1602f958448ff7fe08c2e8300", @generic="ec0d734ea3b334300bc090e3596fdce05fa3a875", @typed={0x50, 0x105, 0x0, 0x0, @binary="ec3190c1599b24070ba9c002ccad69291c2931b3a4f79b09a31913bf8d6cb2fcff3525f55bae61d0eefb1f0ec911f125f861621555f372013a43944426ed8e2d2ecfc45c17a7f9740fff23fd"}, @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@multicast2}, @generic="79431e8ed788a1471564692f84da203f702e86d0ac3e9590e7383b767a62aaad5442f6ef8002342cbf80871612bb124e28d588f5", @generic="880678f65e8428ebddba", @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@private2}]}, @generic="77f2dae4b12e556075f61a1a9a352fcaeadfd0a7f84f9525a3676751850d8c3a52071efe07fd1ae5de3f0ace427e0c4dd7808e5c8520532c5e72b7c523bb5102b038b3651bd1fb8e581eded3fdce0cac90bb60450841092c64f413fa160618234484c0c1f9c6d45f8d22dcd9a971cd2f13175ce0181bc947a53ec9e8d18361700a18a4cc44e32815afacfc246499739d5deda37807a121bf251e583996ffa5a7d388d290402c7ba0edb4da3a3c2862b4c6bd526b2ae62a975e0eb6153178d015d8d6987d45032d0adb55f568e784d70b", @generic="92932d30a250514f95a6d2b6733c82cd29bf614794706a8cef7c0092cfad85bfde23d8f5e23a605e2463b083ded2d644f7db56910852464008bf213ef82ef7cbabf56d0ac4480ba440e3957c1a5407625c85ff983691b4c825e359b4440c64f2a72703c53328305946feb2ea86be027d0348cd68a7660e3251f7350ee9a041db018c56b0c070989f270bf462d58d7655a7df5f4b27ee4540dcf2ccdf59", @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic, @nested={0x3ce, 0x115, 0x0, 0x1, [@generic="f5852ce88c9eb08eed0f780ed7e4769a3e8cc5f3d3b1817eb97c41a1a966aa9f363bba5d56ac5392ac7643e0427674532a05682a1c508cbabc17e51f74ef24a2e88aa23d648f203048676921c86c4fe0ed2cbfc2fdf4ff67f9490ab6d2da71c6703c96760983056852365f3e5d1c47c0b939214166cd6bdba8", @typed={0x8, 0x86, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x103, 0x0, 0x0, @fd=r2}, @generic="2cd66584a2b6ed38e886c1684696e5fac92fb0320be9168ee320f7cc1fc2347da7261afb3aa600315ccb96cfd855125418baa44e8fab17a3567b7a1e9ec3129652a8657e36c067050335a217c54d427a4ec32088f9c8b8fbbcf416ccc3303405587e6c6707e7e87d5cb66ddf405a47def47ebfa718f60e7de6716c9c62b2a72c5fdfd389f8f9a0baf18c268c886141d1c3400168b0495d1b02509721ae8a59f8fd4e9a15fa6903a2292bcebbd8c036c098801ee8a09203a1ccd4e232f216", @typed={0x5a, 0x10e, 0x0, 0x0, @binary="e670a1376777049f950f3c9d657f9838d6f96148065bc6db13981de38c32dba2badf75855532a6252afc4a138d14d75f1c9608514fb082e0268cf5fda7cecc14eaf72c4df1267865f7a7eb7021c9e15c0f8e484e4fd9"}, @generic="30fe650b61f264d81d0c23c6140658c56c7c6ac08b017c672b78a9a3ecb1439efdb3e1261955d6d72f0ad9ff5539320e4ac963bbf8592ae9d27a4f2a3c014c426ad03467d5e0d2490c", @typed={0xc, 0x11e, 0x0, 0x0, @u64=0x5}, @generic="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", @generic="45e0e9f51f5ffb3fc665ebfeafe02860a19104e043abdbe18ecaf9afb62b6650cf59871f30d2a7c4006e2b3b537b81c4c906cbe9739a90f45266c90eeb785f554476ada9745d834971f349aebd1e548b5f8666e317561f088739baee9e0d6153795379996a5d7f271bc7c658c2c98878adae700fdf1b2f0bba4881a8e3d74e1d64084449eed448d556437b57d55b77c9aa84939e810ff2b998999ae3fdf34e12184108f70e751add56cc15e351c82b2be86dc2e2e530e57b91b5aab1775df37c5d04558b0c8db80e0a022e004de9383ca2595e4621"]}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x840}, 0xc0) preadv2(r3, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/109, 0x6d}, {&(0x7f0000000ac0)=""/233, 0xe9}, {&(0x7f0000000bc0)=""/254, 0xfe}, {&(0x7f0000000cc0)=""/145, 0x91}, {&(0x7f0000000d80)=""/53, 0x35}], 0x5, 0x7, 0x0, 0x14) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e80), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0], 0x0, 0xf4, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001280)={'erspan0\x00', &(0x7f00000011c0)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x65, 0xfff, {{0x20, 0x4, 0x2, 0x39, 0x80, 0x64, 0x0, 0xf, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x17, 0x61, [@dev={0xac, 0x14, 0x14, 0x2e}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xf3, 0x0, 0x9, [0x6, 0x7f]}, @timestamp_addr={0x44, 0x44, 0xf3, 0x1, 0x3, [{@remote, 0xfffffff7}, {@remote, 0x69b1}, {@multicast1, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@multicast1, 0x7}, {@empty, 0xffff}, {@multicast2, 0x2}, {@loopback, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000001380)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, r5, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x44041}, 0x1) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000001400), &(0x7f0000001440)=0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000014c0)={0x2, &(0x7f0000001480)=[{0x4, 0x6, 0x0, 0xfffffff3}, {0x0, 0x69, 0x1, 0x1ff}]}) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) r11 = fcntl$getown(r10, 0x9) connect$unix(r10, &(0x7f0000001540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mount$bind(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='./file0\x00', &(0x7f0000001640), 0x10, 0x0) getpeername(r9, &(0x7f0000001680), &(0x7f0000001700)=0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000001740)={0x0, @in6={{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f0000001800)=0x84) sendmsg$nl_netfilter(r8, &(0x7f0000001ac0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f0000001880)={0x1f8, 0xa, 0xb, 0x201, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x3}, [@generic="5169173ce9b05a21ae78b7e42d237205edd03d0ca041453b6f69ef7daee4a9510a7c8c5a856157af5b954cc8c90eeca2a61de6d9", @nested={0x1ab, 0x103, 0x0, 0x1, [@typed={0x14, 0x13e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xe4, 0x45, 0x0, 0x0, @binary="0c36368d9851f5e043979077b95c3bea06713463446ac54d191d6fd14859c86d0c542e11ec6fe00ad478169deed17c17b1c0c4a9673b9a8c0ec2b67d630c23cd3c9cbe15933ef6c4b8d947cf9f008faccf756286c6fb6fd8c3d0bf1302ae5571955db1a8c78ef5f97801101d845c1a658b6d7d22b4ff9cb1cd73668504277e2458e24838942e0d471a97e3d56e742c842119d222ed3d59864261a867151582dc36994b3e3114ed038198838fb2ea2b7fa29070b2c3bdc87c8bf63388ef1a94b6b59b003c29890b4ddb7641f3b9e97bd6286032695c9159d07cf20b96a64d98af"}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="c9912876ac9b02816eb469a225853764841eed84ef05c881fa92ba4b97dcc7532b728489ebcf2ff2c756b2c251", @generic="ee84c94c22914a85830eaac0db18f5ba98540b63e29b0830e4fa23eed9587403b5848756769255073b70ef10de5066a52d39bcc4ffec18b3c1e5b683ab912a17a8dc8957ea49fd8ad6502fd79efc6f885b0d82ec07c08bf6b2acc1cc1bba73aa6dd600900f4a8c15fd4a973d5947"]}, @nested={0x4, 0x7d}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001b40), r8) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r12, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) fcntl$setownex(r8, 0xf, &(0x7f0000001c40)={0x0, r11}) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000001c80)={0x101, 0xfffb, 0x40, 0x1, 0x2, 0x5}) sendmsg$nl_route(r10, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4080) 360.702659ms ago: executing program 0 (id=196): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x814c10, &(0x7f0000000600)=ANY=[@ANYBLOB="0084963f0b4883b8a8c2473034b4d1bf2472a76bae620cf3103903000dd411504d4e94b297af91b5987ce6f2a41ded7058c59e21ca7cd641ceefa13f36ecd31510824d45c4c80b9afe91872a"], 0xfd, 0x1c9, &(0x7f0000000980)="$eJzs3TFrE2EYB/AnsSZXp2yCKBy4OBX1E1SkgnggKBl0UqgurQh2OV3aj+EH9ANIpyxyUu/aM2eG5EhyMf39ljyX/z3J8wZyyZI37+5+Ojr8fPLxx+3vkSS96O/Hfkx6MYp+XDoLAGCbTIoifhalRfoWOxsA2CRzfP7/WvNIAMCKvX7z9sWTLDt4laZJxPlZPs7H5W2ZP3ueHTxM/xjVXed5Pr5xlT9Km98dLvKbcavKH5f96XQ+iAf3y/wie/oya+TDOJw58WiZywcAAAAAAAAAAAAAAAAAAAAAgE7ci/TSzP199vaa+W6Vl0d/7Q/U2L9nJ+7sVIf19kDF6ToWBQAAAAAAAAAAAAAAAAAAAP+Zk6/fjt4fH3/4UhfDiJi+Z5GiVz1wy/Z1F/3YiDEUSy3Stu2D5c7T8l0wiIhVvT6ToijmOrm+Rgy7ujgBAAAAAAAAAAAAAAAAAMA1U//o998s6WIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhA/f//LYrTiJjj5Ksn2+10qQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyx3wEAAP//eSA3ew==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x3b, {@dev}}}], 0x28}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7, 0x0, 0xffffffffffffffff, @prog_id, r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084ffffffff000000000300000000000000000000000000000280000000000000000000000902"], 0x0, 0x4a}, 0x20) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_EMULATED_HOST(r6, 0x2283, &(0x7f0000000000)) 310.793534ms ago: executing program 0 (id=197): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000e8ffffff000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x29, 0x12, &(0x7f0000000b40), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r2, 0x221, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200447bd, &(0x7f0000e68000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200447bd, &(0x7f0000e68000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r8 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10132) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x10132) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r11 = openat$cgroup_int(r8, &(0x7f00000003c0)='net_cls.classid\x00', 0x2, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[], 0x118) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x2c, 0x1, 0x1, [r5, r10, r12, 0xffffffffffffffff, 0xffffffffffffffff, r7, r1]}}, @rights={{0x1c, 0x1, 0x1, [r6, 0xffffffffffffffff, r11]}}], 0x50}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r9, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r13}}, 0x10) close(r9) 262.704847ms ago: executing program 1 (id=198): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101002, 0x80, 0x2}, 0x18) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x120, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20044040) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0/file0\x00'}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xd07eb90fbe3322e9, 0x3, 0xe5, 0x4, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x10, 0x3, 0xc}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000880)={'erspan0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x20, 0x1, 0x10001, 0x10000, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1b, 0x15, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000980)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x1, 0x700, 0x5, 0x8, {{0x21, 0x4, 0x3, 0xd, 0x84, 0x68, 0x0, 0xf, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_prespec={0x44, 0x3c, 0x87, 0x3, 0x2, [{@empty, 0x5}, {@local, 0x80}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@multicast1, 0x2}, {@empty, 0x8000}, {@local, 0x40}]}, @lsrr={0x83, 0x17, 0x3f, [@broadcast, @local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}]}, @timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0x7, [{@broadcast, 0x7}]}, @ssrr={0x89, 0xf, 0x28, [@rand_addr=0x64010100, @multicast1, @rand_addr=0x64010100]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a00)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000ac0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b00)={'erspan0\x00', 0x0, 0x8000, 0x7, 0x1, 0xd, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x65, 0x0, 0xd, 0x2f, 0x0, @multicast1, @multicast2, {[@ra={0x94, 0x4}, @generic={0x89, 0x12, "e88fd5f5581a2885b5035ce1858ec375"}, @rr={0x7, 0x1b, 0x94, [@local, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @lsrr={0x83, 0x1b, 0xe6, [@empty, @empty, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0xe4, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x6}, {@empty, 0x8}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000014c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000000c40)={0x808, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x8, 0x3, 0x8}, {0x5, 0x40, 0x5, 0x8}]}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0xd, 0x8, 0xfe000000}, {0x6, 0x8, 0xc0, 0x7fffffff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xca}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r15}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40f949cb}}}]}}, {{0x8, 0x1, r16}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r18}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x89c}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xec46}}}]}}, {{0x8, 0x1, r19}, {0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x9, 0x8, 0xb, 0x80000001}, {0x3, 0xac, 0x2}, {0x9, 0x3, 0x1, 0x1}, {0x8, 0x37, 0xa, 0x5}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x808}, 0x1, 0x0, 0x0, 0x2}, 0x24008801) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x11, r2, 0xd0e78000) r20 = openat$zero(0xffffffffffffff9c, &(0x7f0000001500), 0x400000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, r20, 0x0, '\x00', r9, r0, 0x0, 0x1, 0x5}, 0x48) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x88, 0xa, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x20b7}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x91}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x59}]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001800)={'gretap0\x00', &(0x7f0000001740)={'sit0\x00', r6, 0x7800, 0x0, 0x3, 0x7, {{0x27, 0x4, 0x3, 0x8, 0x9c, 0x66, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0x7, 0x52, [@remote]}, @timestamp_addr={0x44, 0x1c, 0xf9, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x2}]}, @lsrr={0x83, 0x7, 0xf, [@dev={0xac, 0x14, 0x14, 0x2b}]}, @rr={0x7, 0x1f, 0x8d, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @rand_addr=0x64010100, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x1c, 0xe8, 0x3, 0x2, [{@remote}, {@loopback, 0x9}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x74, 0x3, 0x8, [{@rand_addr=0x64010101, 0x5}, {@private=0xa010102, 0xf33}, {@multicast1, 0x80}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001840)={{{@in=@multicast1, @in6=@remote, 0x4e24, 0xd, 0x4e21, 0x4, 0xa, 0x20, 0x40, 0x67, r21, r3}, {0x0, 0x800, 0x1, 0xfffffffffffffffb, 0x4, 0x101, 0x2, 0x9}, {0x6, 0x9, 0x7f, 0xffffffffffffff01}, 0x80000000, 0x6e6bba, 0x2, 0x1, 0x2, 0x3}, {{@in6=@loopback, 0x4d3}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x0, 0xb1, 0xfffffffc, 0x7fffffff, 0xfe}}, 0xe8) r22 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r20, &(0x7f0000001b00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x88, r22, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r23}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x24, 0x13, [{0x9, 0x1}, {0x12, 0x1}, {0xc, 0x1}, {0x24}, {0x1b}, {0x48}, {0xc}, {0x3, 0x1}, {0x12, 0x1}, {0x36}, {0x18, 0x1}, {0x2}, {0x30, 0x1}, {0x6, 0x1}, {0xc, 0x1}, {0x16, 0x1}, {0x1b, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x9, 0x1}, {0x6, 0x1}, {0x1b}, {0x30}, {0x7cfbe6c1dcd7963f}, {0x60, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {0x42, 0x1}, {0x60, 0x1}, {0x1, 0x1}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x200}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9ef2, 0x8821}}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x11, 0xbe, "3b38c581125290f4b7d25403e2"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1b9}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) 262.155468ms ago: executing program 1 (id=199): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 261.342508ms ago: executing program 3 (id=200): syz_emit_ethernet(0xcc, &(0x7f00000005c0)={@local, @local, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xb6, 0xfffe, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@nop, @exp_fastopen={0x1d, 0x14, 0xf989, "0d75ebf2e15d4624645a76a0c4a3814a"}, @sack={0x5, 0xa, [0x6, 0x101]}]}}, {"e6459775eb83e7b0afcbd77eafe063a225ccd97b0e0364bf2be4233a483ab1d04c9e44fc03b3d1a42c00c599852ca92311bf1820ff3b6212aa58fb8c751ec235a3d68df670d0a73ca19a760ceddb9c9502dcfcb0b5f414f79cbfeeacd8ce29dd6537145d7f456b5c1a41cb5cffc0"}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000050000000000000000000000000000000a30000000030a03000000000000000008020000000c000240000020f974536daeadb42a53a40000000000020900010073797a300000000004000880140000001100010000000000000000000000000a3ab06771110915d1533a7da799da1c973d44ab6377e8de95d689738049aadbe2ba28b4616dda4d607b60490347481d80a84eee34d04126c81393950696473b50e1e48b72c436ebdb87acbc6f52e00a18213e0934cabccd523c9953e797fac471b64070f90d16fbf6412c0c60763e7255efdd7feb771f26ff33eae64bbd3aeb7650486b71cd64ab5f"], 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000a2cbd7000ffdbdf25010000000c00030000000000000000000800a136389dbd09000400000008000800020000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=r3}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000380), 0xb14c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x800, 0xfffffbfe}) writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000140)='T', 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000000)={0x0, r8, 0x0, 0xfffffc05, 0xdc6}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000340)={0x1f, 0x3, 0x2}, 0x6) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001480)=@filter={'filter\x00', 0x2, 0x4, 0x4b0, 0xffffffff, 0x0, 0x1c0, 0x1c0, 0xfeffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'erspan0\x00', 'pim6reg0\x00'}, 0x2f2, 0x198, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "855d60569bd62d192cffecebc395616666e4864226393ed55a10311ce87ede05c02d963e82d891b866f9f24d658abb00ec91030315954d1646b80a87e999ff3c7c64f9c5c1c415c80196f6a70066f78017ea3746b1613077d1b4b972f72226030d6df330c724e3aa4448e90ab673dbe681b057c9bd4be0385e3ade7e06d76e61", 0x7, 0x3}}, @common=@srh={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r12 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 211.340152ms ago: executing program 0 (id=201): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x0, 0x5b5, &(0x7f0000002a80)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000e6ffffffffc40000001f00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001200010a40001d6eef09d62ed90000000000008002"], 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0xa, 0x4, 0x6, 0x0, r3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000580)="4d9b104d75cc651296ce37cd2eb849980da2eea4bd79e810117cc2b4e5f45cb1aec11e8f14200ba262b915e415a09e516b1d7223ee1a309a3429c057125286e61e777c12", &(0x7f0000004600)=@buf="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", 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fddbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="0c009900c2b046e5b1ebbe43f56b5d5d07d14c3d0500006f000000080005000c0000002400178004000400040001000400020004000300040002000400030004000400040006001c00e700d7f988b99a56496f69befbdb5717b0a417a6fc395f0987032a0017800400050004000400040004000400020004000100040001000400010004000400040003000a00e80008021100000100001c04e700b8f837652b81ed9373deed92ee5b0d089804fbca584cd7ed"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) 187.443324ms ago: executing program 3 (id=202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x4, 0x4) close(0xffffffffffffffff) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000080)) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) (async) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)=""/252, 0xfc}], 0x1}}], 0x1, 0x0, 0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1}, 0x4) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="18390000010000000000000000000000850000009e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000000057080001000000185500000a00000000000000000000001838000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000183a00000500000000000000deffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r2}, 0x10) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$TCSBRK(r4, 0x5417, 0x4000000000000000) (async) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x4, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x2, 0x4, 0x7fe2, 0x5, 0x1401, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = dup2(r5, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x10) (async) unshare(0x62040200) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc, 0x100000}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) r9 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000580)=[{0x16}]}, 0x10) (async) sendto$inet6(r7, &(0x7f0000001600)="1c0000801200055a7f5c8d9af70a4857269f000000015a870b61ad9a0f6aca080c126b872d3f6cda57", 0xffffffffffffffc5, 0x404c8c7, 0x0, 0xfd57) 142.360488ms ago: executing program 3 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000400)=[{&(0x7f0000000700)=""/224, 0xe0}], 0x1, &(0x7f0000000600)=""/232, 0xe8}, 0x1}], 0x2, 0x30185aa1441f8a3a, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x63}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000300)=0x800185, 0x4) r4 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000002700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211c0011800b00010065787468647200000c0002800800064000000003140000001000010000000000000000000000000a"], 0xa0}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x10010) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x4}, @jmp={0x6, 0x0, 0x4}]}, &(0x7f0000000540)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='ext4_es_lookup_extent_exit\x00', r6}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="54010000100013070000000000000000ac14aa1c33c5000000000000000000000000000000000000000080000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff000000000000000000000000000000003200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"/268], 0x154}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) 67.424514ms ago: executing program 1 (id=204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000fe80000000000000000000000000001500000020000000000200001000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6251c78ced42731adcd735700000000eeffffff00"/112], 0xb8}}, 0x0) 67.250524ms ago: executing program 2 (id=205): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x4, 0x0) connect$l2tp6(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xe2a9, @local, 0x80000001}, 0x1c) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000ac14140000000064ffffffffffffff00ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000000000000000ffffac1414bb000000003300000000000000fe8000000000000000"], 0xfc}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @multicast2}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e23, @private=0xa010100}, 0x142, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000)='pimreg\x00', 0x8, 0x0, 0x8}) 66.991294ms ago: executing program 1 (id=206): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) ppoll(&(0x7f0000000900)=[{r0}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 46.162816ms ago: executing program 2 (id=207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', '', [], 0xa, "649f98571d435284db098e82ccd8aa3687d10d510c187fb600f974db1d589f361cb76232d2410e0d0a6fffd45e756d312f1b1177d6447cb1a719faea16a3d11927e47985c730d17d27e89d1a8c54c728ea438e760c556901982dea23010000008db1c939a4f577bb648087f3c5dc7a4b3bb3bf211a047e7c0c60fa6d5d0ca30d5fb9186b421e"}, 0x8a) (async) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', '', [], 0xa, "649f98571d435284db098e82ccd8aa3687d10d510c187fb600f974db1d589f361cb76232d2410e0d0a6fffd45e756d312f1b1177d6447cb1a719faea16a3d11927e47985c730d17d27e89d1a8c54c728ea438e760c556901982dea23010000008db1c939a4f577bb648087f3c5dc7a4b3bb3bf211a047e7c0c60fa6d5d0ca30d5fb9186b421e"}, 0x8a) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0xf, 0x0, 0x8, 0xff, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) (async) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0xf, 0x0, 0x8, 0xff, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendfile(r1, r0, 0x0, 0xffefffff) sendto$packet(r1, 0x0, 0x0, 0x4010, &(0x7f0000000380)={0x11, 0x1c, 0x0, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x4010, &(0x7f0000000380)={0x11, 0x1c, 0x0, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000001080)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@nobh}, {@usrquota}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0x88d}}, {@delalloc}, {@discard}, {@nojournal_checksum}], [{@smackfsroot={'smackfsroot', 0x3d, 'usrquota'}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@pcr={'pcr', 0x3d, 0x16}}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") creat(&(0x7f0000000380)='./bus\x00', 0x84) (async) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x84) r3 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000a0200000000000000000000010500000000000000000000000100000500000000000000000100000000000000000049b20e4859a65cc1912c60d5531040ced7cbc598af8ee869354fc1fbaa6eb78646361e9ec28df955ff48338df1ae567f1917a07aebccea1888ffa53d0829c2f55c6ea44be23b0852a9fa8c3154f4e1b583c72fb5"], 0x0, 0x4e}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000a0200000000000000000000010500000000000000000000000100000500000000000000000100000000000000000049b20e4859a65cc1912c60d5531040ced7cbc598af8ee869354fc1fbaa6eb78646361e9ec28df955ff48338df1ae567f1917a07aebccea1888ffa53d0829c2f55c6ea44be23b0852a9fa8c3154f4e1b583c72fb5"], 0x0, 0x4e}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="01030000000000000000170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) ftruncate(r3, 0x7fff) (async) ftruncate(r3, 0x7fff) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000780)={0x0, 0x1}) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)='f', 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r6, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000180)=""/65) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x2, 0x9, 0x5, 0x104}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r8, &(0x7f0000000000)={0x24, @long={0x3, 0x3}}, 0x14) 45.786506ms ago: executing program 3 (id=208): r0 = socket$inet(0x2, 0x6, 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x9, 0x9, 0x0, 'queue0\x00', 0x8}) fcntl$setstatus(r0, 0x4, 0x42000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x100, 0x31d, 0x3, 0xffff}, 0x14) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000280)={&(0x7f0000000140), &(0x7f0000000180)=""/205, 0xcd}) r3 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r3, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000340)=0x80) r4 = socket(0x10, 0x5, 0x2) write$char_usb(0xffffffffffffffff, &(0x7f0000000380)="552149e966647c6bee1878cc5df8ebb321d468df6eca4dcb7f135791a31078679488007447e821990ac2ad99159c24340bc56d05ec195e44463bbc5c7e4ad7b43f8d450af635e2e8670902463ce0ac0565e4d951d333600a4987777f9506f09f7d096a13800be79a63ac1dd7780ad36a35ca45fd75b1e44ad9234774e60af3b818b5561f57b4634ab7706fdd7aacfa10ab2e234b84ba8c854ac83537f352affe60f5d005e88f40a3ee7ce963770a354cb67336ce8841d5d1f4b658e33fffc9d5aeb89bb22641b526e715083905b76936757e8ae9b5f952ac6945ba1f218aebf7", 0xe0) r5 = syz_open_dev$loop(&(0x7f0000000480), 0xae9, 0x80) fadvise64(r5, 0x8, 0x4, 0x2) read(r2, &(0x7f00000004c0)=""/215, 0xd7) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x6}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000640)={r7, 0x10000}, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000680)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x100000000, 0x6, 0x100000000, 0x100, 0x2]}, &(0x7f0000000700)=0x78) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000740)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='afs_make_fs_call1\x00'}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r4) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x88, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4090}, 0x400c0) setsockopt$sock_int(r6, 0x1, 0x1, &(0x7f00000009c0)=0x2, 0x4) r9 = socket$pppoe(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xb67967806343b216, &(0x7f0000000a00)=0xfffffffb, 0x0, 0x4) r10 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r10) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000a40)=0x0) kcmp(r11, 0x0, 0x4, 0xffffffffffffffff, r3) 0s ago: executing program 3 (id=209): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ptrace(0x10, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r0, r1) fcntl$dupfd(r0, 0x0, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x202, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000c001600050004000000000008", @ANYRES32, @ANYBLOB="06001500070000409d5f7c2c9ecffeaa8eb21c4d604eabd254bc6839e1ba310128390a35322bc89ab8d81572074bc01231afef51b4cb399a31c20f1876ca7eb88fcc029f5ad70813313a4be211eb3b5070"], 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x7a00}, 0x0) r8 = openat$incfs(0xffffffffffffffff, 0x0, 0x2000, 0x100) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x401, 0xffff, 0x1, 0x2840, r9, 0x3, '\x00', r5, r8, 0x5, 0x1, 0x3, 0xc}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r11}, 0x0, &(0x7f0000000a40)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11}, &(0x7f0000000880), &(0x7f00000008c0)=r10}, 0x20) kernel console output (not intermixed with test programs): [ 20.447646][ T29] audit: type=1400 audit(1724358179.223:81): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 25.286889][ T29] audit: type=1400 audit(1724358184.063:82): avc: denied { mounton } for pid=3245 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.288199][ T3245] cgroup: Unknown subsys name 'net' [ 25.309625][ T29] audit: type=1400 audit(1724358184.063:83): avc: denied { mount } for pid=3245 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.337011][ T29] audit: type=1400 audit(1724358184.083:84): avc: denied { unmount } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.478335][ T3245] cgroup: Unknown subsys name 'rlimit' [ 25.571181][ T29] audit: type=1400 audit(1724358184.343:85): avc: denied { setattr } for pid=3245 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.594654][ T29] audit: type=1400 audit(1724358184.343:86): avc: denied { create } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.614084][ T3249] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.615118][ T29] audit: type=1400 audit(1724358184.343:87): avc: denied { write } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.637965][ T3245] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.644191][ T29] audit: type=1400 audit(1724358184.343:88): avc: denied { read } for pid=3245 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.673148][ T29] audit: type=1400 audit(1724358184.343:89): avc: denied { mounton } for pid=3245 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.698118][ T29] audit: type=1400 audit(1724358184.343:90): avc: denied { mount } for pid=3245 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.721541][ T29] audit: type=1400 audit(1724358184.403:91): avc: denied { relabelto } for pid=3249 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.784879][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 26.843515][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 26.898247][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 26.912760][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.919896][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.927180][ T3257] bridge_slave_0: entered allmulticast mode [ 26.933625][ T3257] bridge_slave_0: entered promiscuous mode [ 26.942572][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.949701][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.956912][ T3257] bridge_slave_1: entered allmulticast mode [ 26.963341][ T3257] bridge_slave_1: entered promiscuous mode [ 26.978560][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 26.994686][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 27.040561][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.049716][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.056823][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.064118][ T3264] bridge_slave_0: entered allmulticast mode [ 27.070633][ T3264] bridge_slave_0: entered promiscuous mode [ 27.086889][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.098358][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.105435][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.112702][ T3264] bridge_slave_1: entered allmulticast mode [ 27.119302][ T3264] bridge_slave_1: entered promiscuous mode [ 27.174927][ T3257] team0: Port device team_slave_0 added [ 27.181483][ T3257] team0: Port device team_slave_1 added [ 27.192826][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.201998][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.209093][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.216272][ T3269] bridge_slave_0: entered allmulticast mode [ 27.222734][ T3269] bridge_slave_0: entered promiscuous mode [ 27.234317][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.241574][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.248903][ T3260] bridge_slave_0: entered allmulticast mode [ 27.255592][ T3260] bridge_slave_0: entered promiscuous mode [ 27.262149][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.269270][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.276777][ T3258] bridge_slave_0: entered allmulticast mode [ 27.283313][ T3258] bridge_slave_0: entered promiscuous mode [ 27.295826][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.310122][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.317227][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.324444][ T3269] bridge_slave_1: entered allmulticast mode [ 27.331160][ T3269] bridge_slave_1: entered promiscuous mode [ 27.337414][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.344478][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.351725][ T3260] bridge_slave_1: entered allmulticast mode [ 27.358342][ T3260] bridge_slave_1: entered promiscuous mode [ 27.364627][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.371830][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.379115][ T3258] bridge_slave_1: entered allmulticast mode [ 27.385489][ T3258] bridge_slave_1: entered promiscuous mode [ 27.425427][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.432460][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.458474][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.470059][ T3264] team0: Port device team_slave_0 added [ 27.475991][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.482984][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.508914][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.520772][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.531193][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.545798][ T3264] team0: Port device team_slave_1 added [ 27.559962][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.574950][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.589950][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.600152][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.614795][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.621806][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.647838][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.679943][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.686960][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.712938][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.726970][ T3260] team0: Port device team_slave_0 added [ 27.743430][ T3258] team0: Port device team_slave_0 added [ 27.750121][ T3269] team0: Port device team_slave_0 added [ 27.757237][ T3269] team0: Port device team_slave_1 added [ 27.763419][ T3260] team0: Port device team_slave_1 added [ 27.782922][ T3257] hsr_slave_0: entered promiscuous mode [ 27.789348][ T3257] hsr_slave_1: entered promiscuous mode [ 27.795973][ T3258] team0: Port device team_slave_1 added [ 27.817166][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.824137][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.850252][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.866159][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.873190][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.899201][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.919939][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.926972][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.953151][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.966647][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.973671][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.999590][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.015429][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.022548][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.048570][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.066583][ T3264] hsr_slave_0: entered promiscuous mode [ 28.072714][ T3264] hsr_slave_1: entered promiscuous mode [ 28.078725][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.086393][ T3264] Cannot create hsr debugfs directory [ 28.105679][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.112786][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.138837][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.157025][ T3269] hsr_slave_0: entered promiscuous mode [ 28.163181][ T3269] hsr_slave_1: entered promiscuous mode [ 28.169150][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.176897][ T3269] Cannot create hsr debugfs directory [ 28.221700][ T3258] hsr_slave_0: entered promiscuous mode [ 28.227925][ T3258] hsr_slave_1: entered promiscuous mode [ 28.233835][ T3258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.241455][ T3258] Cannot create hsr debugfs directory [ 28.268964][ T3260] hsr_slave_0: entered promiscuous mode [ 28.275055][ T3260] hsr_slave_1: entered promiscuous mode [ 28.281131][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.288744][ T3260] Cannot create hsr debugfs directory [ 28.423803][ T3257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.432351][ T3257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.444058][ T3257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.465266][ T3257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.507047][ T3264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.515593][ T3264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.534598][ T3264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.545691][ T3264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.561007][ T3269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.572096][ T3269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.585697][ T3269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.600990][ T3269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.629388][ T3258] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.638776][ T3258] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.650173][ T3258] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.670762][ T3258] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.694749][ T3260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.705457][ T3260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.715516][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.727658][ T3260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.736164][ T3260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.769485][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.800226][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.807329][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.826915][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.834034][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.852888][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.872290][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.891029][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.900090][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.908276][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.924968][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.932162][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.941904][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.948998][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.970455][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.979806][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.986997][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.005845][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.019540][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.026723][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.039263][ T3257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.055037][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.062232][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.073320][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.080441][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.101355][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.122205][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.129293][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.166386][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.173559][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.198471][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.259247][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.290703][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.322351][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.385128][ T3257] veth0_vlan: entered promiscuous mode [ 29.403787][ T3257] veth1_vlan: entered promiscuous mode [ 29.417131][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.429826][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.443117][ T3257] veth0_macvtap: entered promiscuous mode [ 29.488087][ T3257] veth1_macvtap: entered promiscuous mode [ 29.530553][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.568956][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.577612][ T3264] veth0_vlan: entered promiscuous mode [ 29.592056][ T3260] veth0_vlan: entered promiscuous mode [ 29.600972][ T3264] veth1_vlan: entered promiscuous mode [ 29.611769][ T3257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.620614][ T3257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.629462][ T3257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.638269][ T3257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.650892][ T3260] veth1_vlan: entered promiscuous mode [ 29.665673][ T3269] veth0_vlan: entered promiscuous mode [ 29.692122][ T3258] veth0_vlan: entered promiscuous mode [ 29.707549][ T3269] veth1_vlan: entered promiscuous mode [ 29.717253][ T3258] veth1_vlan: entered promiscuous mode [ 29.733735][ T3260] veth0_macvtap: entered promiscuous mode [ 29.749427][ T3260] veth1_macvtap: entered promiscuous mode [ 29.761480][ T3264] veth0_macvtap: entered promiscuous mode [ 29.769885][ T3264] veth1_macvtap: entered promiscuous mode [ 29.808814][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.819408][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.830305][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.838669][ T3258] veth0_macvtap: entered promiscuous mode [ 29.846761][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.857312][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.867222][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.877664][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.888503][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.900551][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.911327][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.923232][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.930578][ T3401] loop1: detected capacity change from 0 to 256 [ 29.938594][ T3260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.947367][ T3260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.956129][ T3260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.965190][ T3260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.979914][ T3258] veth1_macvtap: entered promiscuous mode [ 29.989737][ T3269] veth0_macvtap: entered promiscuous mode [ 29.998557][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.009212][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.019277][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.029829][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.040640][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.052368][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.062930][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.072784][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.083230][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.093065][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.103625][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.118579][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.134989][ T3264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.143998][ T3264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.152847][ T3264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.161690][ T3264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.174595][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.185138][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.195005][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.205618][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.215467][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.225934][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.237841][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.246128][ T3269] veth1_macvtap: entered promiscuous mode [ 30.268831][ T3258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.277711][ T3258] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.286608][ T3258] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.295651][ T3258] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.330441][ T3403] syz.1.7 (3403) used greatest stack depth: 11248 bytes left [ 30.355163][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.365785][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.375805][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.386630][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.396749][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.407530][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.417542][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.428130][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.430376][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 30.430392][ T29] audit: type=1400 audit(1724358189.203:146): avc: denied { open } for pid=3410 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.439448][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.444110][ T29] audit: type=1400 audit(1724358189.203:147): avc: denied { kernel } for pid=3410 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.491993][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.502490][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.512316][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.522760][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.532627][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.543317][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.553219][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.563786][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.574972][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.595653][ T3269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.604580][ T3269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.613392][ T3269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.622185][ T3269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.657691][ T29] audit: type=1400 audit(1724358189.433:148): avc: denied { write } for pid=3416 comm="syz.0.1" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 30.680759][ T29] audit: type=1400 audit(1724358189.433:149): avc: denied { open } for pid=3416 comm="syz.0.1" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 30.727976][ T29] audit: type=1400 audit(1724358189.433:150): avc: denied { create } for pid=3416 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 30.734095][ T3421] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 30.747296][ T29] audit: type=1400 audit(1724358189.433:151): avc: denied { ioctl } for pid=3416 comm="syz.0.1" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 30.777099][ T3421] loop2: detected capacity change from 0 to 512 [ 30.782389][ T29] audit: type=1400 audit(1724358189.473:152): avc: denied { create } for pid=3410 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.808620][ T29] audit: type=1400 audit(1724358189.483:153): avc: denied { write } for pid=3410 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.828508][ T29] audit: type=1400 audit(1724358189.483:154): avc: denied { nlmsg_write } for pid=3410 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.910746][ T29] audit: type=1400 audit(1724358189.503:155): avc: denied { getopt } for pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.966532][ T3430] loop4: detected capacity change from 0 to 7 [ 30.974224][ T3430] Buffer I/O error on dev loop4, logical block 0, async page read [ 30.975664][ T3433] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 30.982699][ T3430] Buffer I/O error on dev loop4, logical block 0, async page read [ 30.999934][ T3430] loop4: unable to read partition table [ 31.010286][ T3430] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 31.010286][ T3430] ) failed (rc=-5) [ 31.021355][ T3433] loop1: detected capacity change from 0 to 256 [ 31.048094][ T3433] vfat: Unknown parameter 'checkname' [ 31.148631][ T3447] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.164883][ T3450] loop2: detected capacity change from 0 to 256 [ 31.540957][ T3469] loop1: detected capacity change from 0 to 512 [ 31.564841][ T3469] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.19: corrupted in-inode xattr: invalid ea_ino [ 31.584074][ T3469] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.19: couldn't read orphan inode 15 (err -117) [ 31.596556][ T3469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.631723][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.651822][ T3480] loop4: detected capacity change from 0 to 7 [ 31.661710][ T3482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.21'. [ 31.670998][ T3480] Buffer I/O error on dev loop4, logical block 0, async page read [ 31.679249][ T3483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.21'. [ 31.679475][ T3480] Buffer I/O error on dev loop4, logical block 0, async page read [ 31.689776][ T3483] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.696123][ T3480] loop4: unable to read partition table [ 31.696492][ T3480] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 31.696492][ T3480] ) failed (rc=-5) [ 31.791114][ T3494] loop0: detected capacity change from 0 to 512 [ 31.792431][ T3496] loop1: detected capacity change from 0 to 256 [ 31.804344][ T3494] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 31.877429][ T3501] loop1: detected capacity change from 0 to 512 [ 31.885266][ T3501] ======================================================= [ 31.885266][ T3501] WARNING: The mand mount option has been deprecated and [ 31.885266][ T3501] and is ignored by this kernel. Remove the mand [ 31.885266][ T3501] option from the mount to silence this warning. [ 31.885266][ T3501] ======================================================= [ 31.947029][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 31.947080][ T3501] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4579: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 31.955822][ T3506] loop3: detected capacity change from 0 to 2048 [ 31.969290][ T3501] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 32.030578][ T3506] Alternate GPT is invalid, using primary GPT. [ 32.036955][ T3506] loop3: p1 p2 p3 [ 32.090541][ T3514] loop4: detected capacity change from 0 to 7 [ 32.112526][ T3514] Buffer I/O error on dev loop4, logical block 0, async page read [ 32.128145][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 32.140488][ T3519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3519 comm=syz.3.36 [ 32.141235][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 32.160077][ T3514] Buffer I/O error on dev loop4, logical block 0, async page read [ 32.170558][ T3514] loop4: unable to read partition table [ 32.171122][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 32.187903][ T3514] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 32.187903][ T3514] ) failed (rc=-5) [ 32.207088][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 32.213062][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 32.236151][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 32.241234][ T3521] loop0: detected capacity change from 0 to 256 [ 32.348552][ T3530] tap0: tun_chr_ioctl cmd 1074025677 [ 32.357870][ T3530] tap0: linktype set to 778 [ 32.397950][ T3537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.406921][ T3537] netlink: 48 bytes leftover after parsing attributes in process `syz.0.44'. [ 32.443013][ T3545] loop4: detected capacity change from 0 to 512 [ 32.454055][ T3545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.464212][ T3547] loop0: detected capacity change from 0 to 1024 [ 32.467743][ T3545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.473225][ T3547] EXT4-fs: Ignoring removed i_version option [ 32.485166][ T3545] ext4 filesystem being mounted at /4/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 32.493640][ T3547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.509069][ T3545] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 3: comm syz.4.46: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 32.529753][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.546039][ T3545] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 3: comm syz.4.46: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 32.567469][ T3545] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 3: comm syz.4.46: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 32.590562][ T3545] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 3: comm syz.4.46: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 32.611529][ T3545] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 3: comm syz.4.46: bad entry in directory: directory entry overrun - offset=60, inode=15, rec_len=46528, size=2048 fake=0 [ 32.639808][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.661539][ T3553] loop0: detected capacity change from 0 to 256 [ 32.669491][ T3554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'. [ 32.679921][ T3269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.720888][ T3561] loop0: detected capacity change from 0 to 1024 [ 32.737301][ T3561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.751940][ T3561] syz.0.49 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.752749][ T3564] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 32.779120][ T3564] team0: Port device dummy0 added [ 32.834935][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.857008][ T3567] loop4: detected capacity change from 0 to 7 [ 32.863237][ T3567] Buffer I/O error on dev loop4, logical block 0, async page read [ 32.871339][ T3567] Buffer I/O error on dev loop4, logical block 0, async page read [ 32.879413][ T3567] loop4: unable to read partition table [ 32.885192][ T3567] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 32.885192][ T3567] ) failed (rc=-5) [ 33.225374][ T3576] loop3: detected capacity change from 0 to 256 [ 33.337527][ T3591] netlink: 44 bytes leftover after parsing attributes in process `syz.3.59'. [ 33.380092][ T3599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 33.540231][ T3564] syz.4.48 (3564) used greatest stack depth: 11024 bytes left [ 33.551378][ T3604] loop4: detected capacity change from 0 to 7 [ 33.557758][ T3604] Buffer I/O error on dev loop4, logical block 0, async page read [ 33.565622][ T3604] Buffer I/O error on dev loop4, logical block 0, async page read [ 33.573591][ T3604] loop4: unable to read partition table [ 33.579352][ T3604] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 33.579352][ T3604] ) failed (rc=-5) [ 33.624851][ T3606] loop4: detected capacity change from 0 to 256 [ 33.631525][ T3606] vfat: Bad value for 'fmask' [ 33.644669][ T3606] loop4: detected capacity change from 0 to 512 [ 33.651298][ T3606] ext2: Unknown parameter 'subj_type' [ 33.848773][ T3616] loop0: detected capacity change from 0 to 256 [ 34.055124][ T3620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3620 comm=syz.0.69 [ 34.068939][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 34.081182][ T3620] loop0: detected capacity change from 0 to 512 [ 34.098232][ T3620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.110879][ T3620] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.155005][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.234263][ T3627] loop0: detected capacity change from 0 to 512 [ 34.254483][ T3627] EXT4-fs (loop0): orphan cleanup on readonly fs [ 34.278142][ T3638] loop1: detected capacity change from 0 to 128 [ 34.289440][ T3627] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.71: Failed to acquire dquot type 0 [ 34.325146][ T3627] EXT4-fs (loop0): 1 truncate cleaned up [ 34.332065][ T3652] loop4: detected capacity change from 0 to 7 [ 34.338228][ T3627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.351159][ T3652] loop4: unable to read partition table [ 34.357275][ T3652] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 34.357275][ T3652] ) failed (rc=-5) [ 34.381196][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.400058][ T3657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.421507][ T3658] loop1: detected capacity change from 0 to 256 [ 34.427992][ T3657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.453831][ T3662] team_slave_0: entered promiscuous mode [ 34.459560][ T3662] team_slave_1: entered promiscuous mode [ 34.467758][ T3662] team_slave_0: left promiscuous mode [ 34.473348][ T3662] team_slave_1: left promiscuous mode [ 34.509442][ T3664] loop1: detected capacity change from 0 to 256 [ 34.516524][ T3664] vfat: Unknown parameter 'nnonumtail' [ 34.532645][ T3664] loop1: detected capacity change from 0 to 1024 [ 34.541862][ T3661] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 34.558706][ T3664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.571571][ T3664] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.599010][ T3257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.639242][ T3676] loop1: detected capacity change from 0 to 256 [ 34.777827][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888111e52200: rx timeout, send abort [ 34.786217][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888111e52400: rx timeout, send abort [ 34.794628][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888111e52200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.809093][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888111e52400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.851363][ T3687] loop4: detected capacity change from 0 to 512 [ 34.866248][ T3687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.878543][ T3687] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 34.886660][ T3687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 34.903053][ T3687] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 34.912612][ T3687] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 34.928440][ T3691] Option ' ' to dns_resolver key: bad/missing value [ 34.929909][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.965116][ T3691] Cannot find del_set index 0 as target [ 34.972298][ T3687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 34.989174][ T3695] loop2: detected capacity change from 0 to 256 [ 34.995545][ T3687] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 35.021546][ T3687] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 35.078130][ T3687] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.87: dx entry: limit 65535 != root limit 120 [ 35.083666][ T3700] loop2: detected capacity change from 0 to 256 [ 35.090121][ T3687] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.87: Corrupt directory, running e2fsck is recommended [ 35.138372][ T3269] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.164906][ T3713] netlink: 'syz.2.98': attribute type 2 has an invalid length. [ 35.209249][ T3718] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.230387][ T3722] loop0: detected capacity change from 0 to 128 [ 35.241967][ T3722] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.264238][ T3724] loop2: detected capacity change from 0 to 512 [ 35.274661][ T3722] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.305441][ T3724] 9pnet_fd: Insufficient options for proto=fd [ 35.404616][ T3728] Zero length message leads to an empty skb [ 35.490516][ T3735] TCP: TCP_TX_DELAY enabled [ 35.540690][ T3733] loop2: detected capacity change from 0 to 256 [ 35.557266][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 35.557286][ T29] audit: type=1400 audit(1724358194.233:556): avc: denied { execmem } for pid=3734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.582933][ T29] audit: type=1400 audit(1724358194.253:557): avc: denied { name_bind } for pid=3725 comm="syz.4.102" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.604556][ T29] audit: type=1400 audit(1724358194.253:558): avc: denied { node_bind } for pid=3725 comm="syz.4.102" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.626603][ T29] audit: type=1400 audit(1724358194.273:559): avc: denied { read } for pid=3736 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.647932][ T29] audit: type=1400 audit(1724358194.273:560): avc: denied { open } for pid=3736 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.671423][ T29] audit: type=1400 audit(1724358194.273:561): avc: denied { mounton } for pid=3736 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 35.693134][ T29] audit: type=1400 audit(1724358194.323:562): avc: denied { create } for pid=3725 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 35.764812][ T29] audit: type=1400 audit(1724358194.523:563): avc: denied { mounton } for pid=3732 comm="syz.2.104" path="/15/file0" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.796510][ T29] audit: type=1400 audit(1724358194.573:564): avc: denied { mount } for pid=3732 comm="syz.2.104" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.827864][ T3749] loop3: detected capacity change from 0 to 1024 [ 35.834611][ T3749] EXT4-fs: Ignoring removed oldalloc option [ 35.841758][ T29] audit: type=1400 audit(1724358194.573:565): avc: denied { create } for pid=3732 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.883470][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.915814][ T3756] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 35.930399][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.944845][ T1599] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.990247][ T1599] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.031990][ T1599] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.045086][ T3736] chnl_net:caif_netlink_parms(): no params data found [ 36.073635][ T1599] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.102711][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.110039][ T3736] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.117841][ T3736] bridge_slave_0: entered allmulticast mode [ 36.124794][ T3736] bridge_slave_0: entered promiscuous mode [ 36.132539][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.140042][ T3736] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.149168][ T3736] bridge_slave_1: entered allmulticast mode [ 36.156071][ T3736] bridge_slave_1: entered promiscuous mode [ 36.182005][ T3736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.194044][ T3736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.256092][ T3736] team0: Port device team_slave_0 added [ 36.260612][ T3783] loop0: detected capacity change from 0 to 1024 [ 36.268649][ T3783] EXT4-fs: Ignoring removed orlov option [ 36.276726][ T3736] team0: Port device team_slave_1 added [ 36.300352][ T3783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.305105][ T3791] loop3: detected capacity change from 0 to 128 [ 36.344884][ T3791] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.358891][ T1599] bridge_slave_1: left allmulticast mode [ 36.364770][ T1599] bridge_slave_1: left promiscuous mode [ 36.370603][ T1599] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.376591][ T3791] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.388846][ T1599] bridge_slave_0: left allmulticast mode [ 36.394521][ T1599] bridge_slave_0: left promiscuous mode [ 36.400368][ T1599] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.409602][ T3260] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.447739][ T3801] loop4: detected capacity change from 0 to 7 [ 36.464161][ T3801] buffer_io_error: 2 callbacks suppressed [ 36.464181][ T3801] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.477971][ T3801] Buffer I/O error on dev loop4, logical block 0, async page read [ 36.485971][ T3801] loop4: unable to read partition table [ 36.492009][ T3801] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 36.492009][ T3801] ) failed (rc=-5) [ 36.532680][ T3258] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.558039][ T3806] loop3: detected capacity change from 0 to 256 [ 36.569587][ T1599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.581854][ T1599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.592643][ T1599] bond0 (unregistering): Released all slaves [ 36.601579][ T3736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.608610][ T3736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.634591][ T3736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.648588][ T3736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.655572][ T3736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.681613][ T3736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.721531][ T3813] syz.4.120 uses obsolete (PF_INET,SOCK_PACKET) [ 36.739619][ T3817] loop3: detected capacity change from 0 to 512 [ 36.748596][ T3817] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.751262][ T3808] syzkaller0: entered promiscuous mode [ 36.767432][ T3808] syzkaller0: entered allmulticast mode [ 36.767644][ T3817] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 36.779960][ T3817] EXT4-fs (loop3): mount failed [ 36.900596][ T1599] hsr_slave_0: left promiscuous mode [ 36.907267][ T1599] hsr_slave_1: left promiscuous mode [ 36.913172][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.920751][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.929909][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.937549][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.970196][ T1599] veth1_macvtap: left promiscuous mode [ 36.975721][ T1599] veth0_macvtap: left promiscuous mode [ 36.981385][ T1599] veth1_vlan: left promiscuous mode [ 36.986736][ T1599] veth0_vlan: left promiscuous mode [ 37.204198][ T1599] team0 (unregistering): Port device team_slave_1 removed [ 37.219563][ T1599] team0 (unregistering): Port device team_slave_0 removed [ 37.293992][ T3736] hsr_slave_0: entered promiscuous mode [ 37.300241][ T3736] hsr_slave_1: entered promiscuous mode [ 37.402806][ T3850] loop4: detected capacity change from 0 to 256 [ 37.455035][ T3850] loop4: detected capacity change from 0 to 2048 [ 37.754963][ T3736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.780958][ T3736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.799445][ T3865] loop0: detected capacity change from 0 to 32768 [ 37.810667][ T3888] loop4: detected capacity change from 0 to 7 [ 37.811067][ T3736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.825968][ T3888] Buffer I/O error on dev loop4, logical block 0, async page read [ 37.837588][ T3736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.847646][ T3888] Buffer I/O error on dev loop4, logical block 0, async page read [ 37.855535][ T3888] loop4: unable to read partition table [ 37.863896][ T3865] loop0: p1 p2 p3 < p5 p6 p7 > [ 37.876675][ T3888] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 37.876675][ T3888] ) failed (rc=-5) [ 37.900766][ T2960] loop0: p1 p2 p3 < p5 p6 p7 > [ 37.938846][ T3436] udevd[3436]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 37.945533][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 37.971212][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 37.978016][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 37.983902][ T3795] udevd[3795]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 37.995979][ T3894] udevd[3894]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 38.039732][ T3899] loop3: detected capacity change from 0 to 1024 [ 38.073533][ T3736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.085713][ T3736] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.108747][ T3358] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.115957][ T3358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.121184][ T3899] loop3: detected capacity change from 0 to 2048 [ 38.137587][ T3251] udevd[3251]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 38.147777][ T3894] udevd[3894]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 38.150001][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 38.162358][ T3795] udevd[3795]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 38.180595][ T3899] loop3: p1 < > p4 [ 38.191588][ T3358] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.198790][ T3358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.216888][ T3899] loop3: p4 size 8388608 extends beyond EOD, truncated [ 38.270303][ T3736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.305724][ T3917] loop2: detected capacity change from 0 to 256 [ 38.349699][ T3925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3925 comm=syz.3.133 [ 38.372690][ T3736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.413748][ T3925] netlink: 'syz.3.133': attribute type 11 has an invalid length. [ 38.432514][ T3925] tipc: Started in network mode [ 38.432601][ T3925] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 38.432653][ T3925] tipc: Enabled bearer , priority 0 [ 38.433059][ T3925] program syz.3.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.603562][ T3736] veth0_vlan: entered promiscuous mode [ 38.628277][ T3736] veth1_vlan: entered promiscuous mode [ 38.640955][ T3967] loop4: detected capacity change from 0 to 7 [ 38.668224][ T3736] veth0_macvtap: entered promiscuous mode [ 38.674518][ T3967] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.685287][ T3967] Buffer I/O error on dev loop4, logical block 0, async page read [ 38.693337][ T3967] loop4: unable to read partition table [ 38.701094][ T3736] veth1_macvtap: entered promiscuous mode [ 38.710908][ T3967] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 38.710908][ T3967] ) failed (rc=-5) [ 38.729310][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.739888][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.749794][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.760248][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.770109][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.780651][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.790528][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.801058][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.819818][ T3736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.831507][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.842152][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.852080][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.862603][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.872650][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.883151][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.893405][ T3736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.903970][ T3736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.927759][ T3979] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 38.946436][ T3736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.955248][ T3736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.964136][ T3736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.972943][ T3736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.981679][ T3736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.138960][ T3992] __nla_validate_parse: 4 callbacks suppressed [ 39.138982][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 39.154812][ T3994] tun0: tun_chr_ioctl cmd 1074025677 [ 39.175278][ T3994] tun0: linktype set to 823 [ 39.251231][ T3997] loop3: detected capacity change from 0 to 4096 [ 39.298627][ T3997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.312339][ T3999] tap0: tun_chr_ioctl cmd 1074025681 [ 39.415498][ T3994] loop2: detected capacity change from 0 to 8192 [ 39.438177][ T9] tipc: Node number set to 8432298 [ 39.460794][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.515090][ T3994] loop2: p1 p2 p3 [ 39.545134][ T4012] loop1: detected capacity change from 0 to 8192 [ 39.554549][ T2960] loop2: p1 p2 p3 [ 39.590786][ T4012] loop1: p1 p2 p4 < > [ 39.594962][ T4012] loop1: partition table partially beyond EOD, truncated [ 39.616298][ T4012] loop1: p1 size 108986237 extends beyond EOD, truncated [ 39.644201][ T4012] loop1: p2 start 65535 is beyond EOD, truncated [ 39.650700][ T4012] loop1: p4 start 50331648 is beyond EOD, truncated [ 39.744095][ T4032] loop4: detected capacity change from 0 to 7 [ 39.753583][ T4035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 39.774137][ T4032] Buffer I/O error on dev loop4, logical block 0, async page read [ 39.809033][ T4032] Buffer I/O error on dev loop4, logical block 0, async page read [ 39.816964][ T4032] loop4: unable to read partition table [ 39.842860][ T4032] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 39.842860][ T4032] ) failed (rc=-5) [ 39.911850][ T4043] loop1: detected capacity change from 0 to 1764 [ 39.941070][ T4045] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 39.992936][ T4051] loop2: detected capacity change from 0 to 1024 [ 40.021849][ T4058] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 40.026295][ T4051] EXT4-fs: Ignoring removed oldalloc option [ 40.053971][ T4058] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 40.082477][ T4051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.144409][ T4071] loop3: detected capacity change from 0 to 256 [ 40.166003][ T4051] netlink: 104 bytes leftover after parsing attributes in process `syz.2.162'. [ 40.176941][ T4071] vfat: Bad value for 'utf8' [ 40.290068][ T4068] loop1: detected capacity change from 0 to 4096 [ 40.304554][ T3264] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.325142][ T4068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.410356][ T4082] loop4: detected capacity change from 0 to 7 [ 40.469188][ T4082] Buffer I/O error on dev loop4, logical block 0, async page read [ 40.477614][ T4083] loop3: detected capacity change from 0 to 2048 [ 40.487318][ T3736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.507752][ T4082] Buffer I/O error on dev loop4, logical block 0, async page read [ 40.515650][ T4082] loop4: unable to read partition table [ 40.529070][ T4085] loop2: detected capacity change from 0 to 8192 [ 40.534009][ T4083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.536104][ T4082] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 40.536104][ T4082] ) failed (rc=-5) [ 40.561290][ T4085] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.577872][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.586769][ T4085] FAT-fs (loop2): Filesystem has been set read-only [ 40.593483][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.602434][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.611275][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.620422][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.632215][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.645534][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 40.645551][ T29] audit: type=1400 audit(1724358199.413:677): avc: denied { create } for pid=4080 comm="syz.3.171" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 40.645871][ T4083] netlink: 'syz.3.171': attribute type 4 has an invalid length. [ 40.656541][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.699218][ T4089] loop1: detected capacity change from 0 to 256 [ 40.719231][ T4085] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 40.729999][ T4090] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 40.741311][ T29] audit: type=1400 audit(1724358199.513:678): avc: denied { bind } for pid=4080 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.786414][ T4095] loop1: detected capacity change from 0 to 128 [ 40.786910][ T4083] netlink: 'syz.3.171': attribute type 17 has an invalid length. [ 40.793129][ T29] audit: type=1400 audit(1724358199.563:679): avc: denied { mounton } for pid=4088 comm="syz.1.173" path="/7/file0" dev="tmpfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.837967][ T4095] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.882164][ T4095] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.893040][ T29] audit: type=1400 audit(1724358199.663:680): avc: denied { name_bind } for pid=4096 comm="syz.4.175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.924411][ T4100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.932462][ T4095] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.954528][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.976869][ T4097] raw_sendmsg: syz.4.175 forgot to set AF_INET. Fix it! [ 41.016013][ T4100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.110293][ T29] audit: type=1400 audit(1724358199.883:681): avc: denied { block_suspend } for pid=4104 comm="syz.1.178" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.111629][ T4103] loop3: detected capacity change from 0 to 1024 [ 41.154494][ T29] audit: type=1400 audit(1724358199.923:682): avc: denied { create } for pid=4106 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.197892][ T29] audit: type=1400 audit(1724358199.953:683): avc: denied { read } for pid=4117 comm="syz.1.181" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 41.211593][ T4103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.220976][ T29] audit: type=1400 audit(1724358199.953:684): avc: denied { open } for pid=4117 comm="syz.1.181" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 41.256841][ T29] audit: type=1400 audit(1724358199.953:685): avc: denied { create } for pid=4119 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.276856][ T29] audit: type=1400 audit(1724358199.953:686): avc: denied { bind } for pid=4119 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.365882][ T4131] loop2: detected capacity change from 0 to 256 [ 41.433990][ T4136] loop4: detected capacity change from 0 to 7 [ 41.441305][ T4136] loop4: unable to read partition table [ 41.448538][ T4136] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 41.448538][ T4136] ) failed (rc=-5) [ 41.525159][ T1599] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 41.994346][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.062718][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.096675][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.111323][ T4170] loop0: detected capacity change from 0 to 256 [ 42.215295][ T4183] loop0: detected capacity change from 0 to 1024 [ 42.224012][ T4183] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.231570][ T4180] loop4: detected capacity change from 0 to 7 [ 42.233199][ T4183] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 42.242762][ T4185] modprobe (4185) used greatest stack depth: 10760 bytes left [ 42.257858][ T4180] buffer_io_error: 2 callbacks suppressed [ 42.257872][ T4180] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.280645][ T4180] Buffer I/O error on dev loop4, logical block 0, async page read [ 42.288597][ T4180] loop4: unable to read partition table [ 42.294455][ T4180] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 42.294455][ T4180] ) failed (rc=-5) [ 42.381794][ T4200] dvmrp0: entered allmulticast mode [ 42.425968][ T4209] loop2: detected capacity change from 0 to 1024 [ 42.434349][ T4209] EXT4-fs: Ignoring removed nobh option [ 42.445442][ T4209] ext2: Unknown parameter 'smackfsroot' [ 42.459252][ T2960] ================================================================== [ 42.467547][ T2960] BUG: KCSAN: data-race in d_delete / lookup_fast [ 42.473996][ T2960] [ 42.476321][ T2960] read-write to 0xffff888106bb1240 of 4 bytes by task 3436 on cpu 0: [ 42.484394][ T2960] d_delete+0x73/0x100 [ 42.488498][ T2960] d_delete_notify+0x34/0x100 [ 42.493205][ T2960] vfs_unlink+0x320/0x430 [ 42.497553][ T2960] do_unlinkat+0x236/0x4c0 [ 42.502005][ T2960] __x64_sys_unlink+0x2e/0x40 [ 42.506807][ T2960] x64_sys_call+0x280f/0x2d60 [ 42.511512][ T2960] do_syscall_64+0xc9/0x1c0 [ 42.516053][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.521965][ T2960] [ 42.524289][ T2960] read to 0xffff888106bb1240 of 4 bytes by task 2960 on cpu 1: [ 42.531847][ T2960] lookup_fast+0xd9/0x2a0 [ 42.536199][ T2960] walk_component+0x3f/0x230 [ 42.540801][ T2960] path_lookupat+0x10a/0x2b0 [ 42.545428][ T2960] filename_lookup+0x127/0x300 [ 42.550224][ T2960] do_readlinkat+0x89/0x210 [ 42.554746][ T2960] __x64_sys_readlink+0x47/0x60 [ 42.559610][ T2960] x64_sys_call+0x13c3/0x2d60 [ 42.564310][ T2960] do_syscall_64+0xc9/0x1c0 [ 42.568845][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.574764][ T2960] [ 42.577173][ T2960] value changed: 0x00600108 -> 0x00008008 [ 42.582905][ T2960] [ 42.585235][ T2960] Reported by Kernel Concurrency Sanitizer on: [ 42.591572][ T2960] CPU: 1 UID: 0 PID: 2960 Comm: udevd Not tainted 6.11.0-rc4-syzkaller-00033-g872cf28b8df9 #0 [ 42.601827][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 42.611983][ T2960] ================================================================== [ 42.628488][ T4214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.209'.