last executing test programs: 1m12.806502953s ago: executing program 2 (id=2265): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x40000120, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8407, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c005, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x290}, 0x50) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="5400000012000100040000000000020300000000000000000308000000000000380000000100000000000000000000000000000000000000033406ce449611f1361a1f65d819eadef15deee19de93699257c7ab025f26b9824d50a4f4c46917f5126d8a3240fbc711e822b7791280828f3d60f14b63b", @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011000000"], 0x54}}, 0x200040c4) getresuid(&(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000580)=0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, r3, &(0x7f00000005c0)={0xa, 0x170a, 0x0, 0x3, 0x0, 0x64731362, 0x1, 0xfffffffffffffff9, 0x2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) setresuid(r3, r4, 0xffffffffffffffff) fremovexattr(0xffffffffffffffff, 0x0) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x804, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) 1m12.526245491s ago: executing program 2 (id=2275): r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[@txtime={{0x18, 0x1, 0x3d, 0x23d}}], 0x18}, 0x8000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x10000000000, 0x18, 0x0, 0xfffffffffe000001}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000a24a2cc12cd2f564d0801245b1a608a461e6"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r3}, 0xc) 1m12.041030359s ago: executing program 2 (id=2282): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x2, 0xf1ff, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) 1m11.711579029s ago: executing program 2 (id=2291): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000400)={0x1, 0x1, 0x7, 0xff, r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000740)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffff8, @private2, 0x6}, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x9}, r3, 0x10}}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getpgrp(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 1m11.3821086s ago: executing program 2 (id=2301): bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = timerfd_create(0x0, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000004340)={r10, 0x200, 0xb}, &(0x7f00000045c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340)={r10, 0xffff}, 0x8) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) sendmsg$inet(r13, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/133, 0x85) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x10b, 0x0, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xd, 0x8, 0xfffffffc, 0xfffffffe}, 0x1}}, @TCA_IFE_METALST={0x4}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x894}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd=r3, 0x2, 0x0}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1m10.714526079s ago: executing program 2 (id=2308): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x2, 0xf1ff, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) 1m10.714110189s ago: executing program 32 (id=2308): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x2, 0xf1ff, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) 46.402059541s ago: executing program 4 (id=2707): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x558, &(0x7f0000000340)="$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") 45.294082916s ago: executing program 4 (id=2720): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffffffffffe}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xbc, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_ADT={0x64, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x800}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xaa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x800) munlockall() keyctl$chown(0x4, 0x0, r3, r4) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000000c0)=@filename='./file0\x00', r3, &(0x7f0000000140)) copy_file_range(r0, &(0x7f0000000040), r2, &(0x7f0000000080)=0x8, 0x3ff, 0x0) r5 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xb) close(r6) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@mcast1, @in=@multicast2, 0x4e20, 0x4, 0x4e24, 0x7, 0x2, 0x20, 0x80, 0x87, 0x0, r7}, {0xa, 0xa3, 0x274, 0x0, 0x2, 0x5, 0x2, 0x6f68}, {0x3, 0x5b, 0x8, 0x6305}, 0x3, 0x6e6bb5, 0x2, 0x1, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4d5, 0x32}, 0x2, @in=@remote, 0x3504, 0x0, 0x3, 0x1, 0x800, 0x8000, 0x4}}, 0xe8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4854}, 0x20004000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 44.90234826s ago: executing program 4 (id=2730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x0) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0), &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140002140002800800050000000000000000000000000000376da174e08d3ec8c34c6fa04561a94cc491a937b3a988050c959f2c053e6f97a0a38a4578c1e9da3799de803821351afec0641556be57bfe99df8833824ca1bef758655f2bf9e5816cddca72038536ac5485597a34a7889bb29fac153d8efa8780dd8c89aaf30aceb468d6130d309a822863347794e93b2bdf186f2233beef9eedcc3e4f35569814c5621a14199e001befd3e9a3214b3d6ddcfbcfb04581673000000000000", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) 44.854584193s ago: executing program 4 (id=2731): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone3(&(0x7f0000000600)={0x40000000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x3}, &(0x7f00000003c0)=""/230, 0xe6, &(0x7f00000004c0)=""/231, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0xa0, 0x68e8bc0000000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) r2 = syz_clone(0x909000, &(0x7f0000000700)="43effc243e0cb7029506501600e9ce26cc67d494dc8f295f18d97f7461c50646807ff3549dc8ce24bc9e985fa60eff8617872a989773dc29dc3ef450b7ea8bb8b5b5d4101567a10d2b269a1eca155a1ce16d6bf2d6e7801f5cfe0aa47627284157218092c4229a12954d15c38c934f69e6", 0x71, &(0x7f0000000780), &(0x7f0000000880), &(0x7f00000008c0)="792055182f81cdf370b8d797fcf879") r3 = getpgid(r2) syz_open_procfs$pagemap(r3, &(0x7f0000000100)) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x0, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x1c, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x7, 0x1, @val=0x2}, @IFE_META_TCINDEX={0x5, 0x5, @val=0x3}, @IFE_META_TCINDEX={0xfffffffffffffd77, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x2b}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a5bd7000fddbdf2528"], 0x4c}, 0x1, 0x0, 0x0, 0x240480cc}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 44.461774085s ago: executing program 4 (id=2738): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x10403, 0x0, 0x11000, 0x0, 0x3, 0x7ffeffff, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x0, {0x7, 0x80000001, "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", 0xf, 0x6, 0x3, 0x1, 0x6, 0x8, 0x5, 0x1}, r3}}, 0x128) ptrace(0x10, r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0x9) ptrace$pokeuser(0x6, r1, 0x358, 0x100000000afe9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r5, 0x2, {0x1, 0x0, 0x2}}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x450040, 0x80) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x44001) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') epoll_create(0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) connect$llc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x8402, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xf7f}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4404, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) 44.258017148s ago: executing program 4 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1b, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[], 0xff, 0xa4a, &(0x7f00000007c0)="$eJzs3c1vHOd9B/DvLEmJoV1JcVTXFRxxJVcK47AUSdVSBR9SiVxJTPlSkBRgoYcojahCEFu3cQs4RoEoQNFTjBZo0UN7M3rqyUAuTQ+FL0V7a049FCj8LwQ9qScGM7skl+Qul2IoklY+H2J35+U3z/PMyzMPd3d2nvDFsnZ6y9jaWvXY5/i9fz6EEnOM3Zr+/JNPPy4fP3yaE+nLO8W/JINJ6kl/kjeSganpxYW5Hgk9SR4k+SwpkpxM83VPHqT467y6Of5Zin8s8+3qxF5Tppc1fqkd9fEHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHUTE1PT4+UZzIzPy99+pNSX2HqenFhSJrazvnrC/T9JOq1+/iJz3zTYrykcHB9a6+3zi7Ofv1JPWLebM59mbVIXkG89Err5959yv9tfXlu5XmF3Jy78l+8P2PnnxndXXlex3nFsUBluqYaR4jdxrzM0sLM3M37zTqM0sL9RvXro1fuXt7qX57ZraxdH9puTFXn1ps3FxeWKyPTH29PnHjxtV6Y+z+wr35O9Njs431idd/c3J8/Fr9W2O/17i5uLQwf+VbY0tTd2dmZ2fm71Qx5ewy5np5IP7uzHJ9uXFzrl5/9Hh15eq2kvVl2/FbBk30Wp8yaLJX0OT45OTExOTkxA9bvWdvTLj2zo13ro+P9483vZrWQHZEvKCDluPlS91388GfxGGfas32P5nNTOZzL++l3vFvKtNZzELmusxvWW//L11p7Jpt2tr/Vivf3zb/XPl0Medbo4Nd2v8uZTm8vw/y/XyUJ/lOVrOalXzvyEt0uH930sh8ZrKUhcxkLjerKfXWlHpu5FquZTzfzt0MZyn9uZ2ZzKaRpdzPUpbTqI6oqSymkZtZzkIWU89IpvL11DORG7mRq6mnkbHcz0LuZT53Mp2bVSqP8rja7ld3KeNG0MRegiZ3CdrRmHdr/zdsX6Sx/Z8TXkK1XffyCziLw/6stdr/E71DR6YOo0AAAADAgfv1/8yps6/9x/8mRb5afS9/e2a2MX7UxQIAAAAOUHW53pvly0A59NUU3v8DAADAy6aofmNXJBnKcHNo/ZdQPgQAAACAl0T1/f/5FMObE7z/BwAAgJdM73vs94woRtdv/1t/2Hx92IpojhVDt2dmG2NTC7PvTuRydZeB6pcGO1LrS4qB6ucHb+dCM+rCUPN1aDPFMs/BMmpi7N2JvJ2LrRUZeat8eWukQ+RkM/JrzcivtUf2ZUvk1TISAF52F3dpj/fa/r+d0WbE6Lmqye8/t6UN7qta1nEtKwAcFxt97Px/q0uzDu3/+ea9Ac53a/9/a5f3/2XEa3k03LykYCzfzftZzcOMpnXFwXCnVNd7I2hehjDa49OAodYlCz+9Xsvojs8DBjfWtT12JZMZ7fiJQFu6xXoZrjbj+l7UXgCAw3Vx13Z4vf2vPiTv2v6P7v7+v63NdUkhABwHGz3YP+/A8N6Dj3odAYCttNIAAAAAAAAAAAAAAAAAAAAAAAAAAABw8PZ0A///upysrq4k++0soMPAT//9X3+la8yPXkkGn6eEuw/UcjBlPv4DfUmOKvdv5rmXKvfxcdl0L9NA8bSqsL9QOkd8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQFElfp+m15GSS8SRXDr9UL87Toy7AQanvb7HiWZ7lw5w66OIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyya93/v5bm6yvNSemvJZeSPEjy+0ddxucx2GP+s0Mqx/HzR9Vz2/3/a8lA1or0Z21tbS0pBqamFxfmykOhOFnO//yTTz8uH12T/MH6wM5eFcoEyhy2dC7RyqFtysDWpb5cLTU0vfLBkz97/0/q07eqA/PW8u3Z6bk7i7+zGfh68eNmFwjt3SCsl/cvLv3b37RNPtHK/Mfp77Yi2/O9XeU7vTPfX+u0dJd89+Dx6spkmdNy473lP//jWvus13IheWskGdma0x+Wjy45Xdi+Pbcqflb8VXEqf58H1f4vt0axVpS76HS1/l969Hh1Zey7768+3CjTDx5/2JbAmQwnebi1lvUo03B1PunolSrXgTLX8SqofDrbI71dtaU4sbldt6zDl6tDZui51qHefR0qPbZ7q0RXt5dorawkf/unX8nlXff0yQ4pXu6RY0fFz4r/Ke7mv/OXbf1/1Mr9fykda2eHJKrItiOlfd6W6lW7tLnmk+0zvr09za61khfgR/mD/PbG/q9V5//2ejPZpd5snI++2TaxS71Zr1pd6sXJrTV1R71o6VUvdtbUfzq9o0XZmmvObmuRWmefbsu0ynm2GdWlnL+abyT9557rjPKNHmeUXsvvt/7/QzGS/8tT/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHX5H0dZpeSy4lOZPkdDleT9a2xzzdR361oWI/xTww+ynzF0/RdUWLZ3mWD3PqsEsEAAAAAAAAwItxa/rzTz79uHxU38f35TdqrTn1pD/JmeLvBqamFxfmeiQ0kDxY/0p/sHNIl8l5UD69ujn+WTn2Ro/8jvbyAQD4Qvt5AAAA//9B+m/L") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000100001000000000000000000fb00000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 44.242718389s ago: executing program 33 (id=2743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1b, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000100001000000000000000000fb00000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0) ioctl$TUNSETNOCSUM(r3, 0xb702, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 15.902515275s ago: executing program 6 (id=3112): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0xa6ffffffffffffff, &(0x7f0000003700)={0x77359400}) 15.704063727s ago: executing program 6 (id=3116): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r5, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) shutdown(r7, 0x2) sendmsg(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20044044) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x6c) getpid() r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0d00000402000000000000", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000000)=0x6, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x7, r9}, 0x38) 15.296331521s ago: executing program 6 (id=3123): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 32) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') (async, rerun: 32) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x1000802, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a242, 0x1a1) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x7f, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) fchdir(0xffffffffffffffff) pwritev2(r4, &(0x7f0000000b80)=[{&(0x7f0000000940)="6826be6c71323ff1262aabe42acf881af233303968", 0x15}], 0x1, 0x53fe, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xfffffffffffffffd, 0x9, [@func={0x7, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0x2d}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000000e000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x38) syz_genetlink_get_family_id$batadv(0x0, r8) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x1, 0x1, {0xa, 0x4e22, 0x54, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, 0x3a) (async) socket$inet_udp(0x2, 0x2, 0x0) splice(r5, &(0x7f0000000040), r6, 0x0, 0x800000000fe, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001b40)=@mangle={'mangle\x00', 0x10, 0x6, 0xf40, 0xc40, 0xd80, 0x0, 0xc40, 0x0, 0xe70, 0xe70, 0xe70, 0xe70, 0xe70, 0x6, 0x0, {[{{@uncond, 0x0, 0x8b8, 0x8e0, 0x0, {0x7a00000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x959, 0x1}, {0x3}, {}, {0x8, 0x3}, {0xffffffff, 0x3}, {0x7fff, 0x2}, {0x7}, {0xb}, {0x1, 0x2}, {0x9, 0x1}, {0x8001, 0x2}], [{0x9, 0x401}, {0x3, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x7, 0xa5}, {0x5, 0x400}, {0x8, 0x101}, {0x0, 0x4}, {0x5, 0x70000}, {0x1, 0xc10}, {0x80000001, 0x7}], 0x2, 0x6}, {[{0x5e23, 0x1}, {0xc04, 0x1}, {0x3, 0x1}, {0x4, 0x2}, {0xfffffffe, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x8, 0x2}, {0x0, 0x3}, {0x7, 0x2}, {0x3, 0x3}], [{0x7ff, 0x9}, {0x5, 0xfffff12e}, {0x167f, 0x81}, {0x2, 0xe}, {0x7, 0xffff}, {0x5, 0x9}, {0x73d, 0x9}, {0x3, 0xdb}, {0x3, 0xffffffff}, {0x1, 0x8}, {0x7, 0x9}], 0x2, 0x5}, {[{0x1ff, 0x1}, {0x3, 0x3}, {0xb, 0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0xffff8001, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x3, 0x1}], [{0x4}, {0x7, 0x7}, {0x32, 0x6a1}, {0x9, 0x8001}, {0xafc, 0x5}, {0x1e0000, 0x3}, {0x2, 0xc86}, {0x9, 0x7}, {0x8, 0x4}, {0x1, 0x1}, {0x8, 0x2d1d}], 0x5, 0x2}, {[{0x6, 0x1}, {0x8, 0x2}, {0x1, 0x1}, {0x7f, 0x2}, {0x4, 0x2}, {0x549, 0x2}, {0xfffffa2f, 0x1}, {0xa55, 0x2}, {0x8, 0x1}, {0xfff}, {0x3, 0x2}], [{0xa22}, {0x7, 0x8001}, {0xfff, 0x5675}, {0x5, 0x7}, {0xfffffff8, 0x9}, {0x3, 0x8}, {0x9, 0x5}, {0x1, 0x1}, {0x3, 0x7f}, {0x5, 0x7}], 0x3, 0x6}, {[{0x39, 0x1}, {0x6, 0x1}, {0x8}, {0xffff, 0x2}, {0x7, 0x1}, {0x3}, {0x2, 0x3}, {0xb, 0x3}, {0x800, 0x1}, {0x1, 0x3}, {0x50, 0x3}], [{0x40, 0x9}, {0x10000, 0x825}, {0x8, 0x3}, {0x1, 0x4}, {0x6, 0x30}, {0x200, 0xd}, {0x8, 0xffffff7f}, {0x3, 0x7}, {0x80000000, 0x1}, {}, {0xfffffff7, 0x400}], 0x6, 0x6}, {[{0xd5bf, 0x3}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x4}, {0x0, 0x3}, {0x7fffffff, 0x3}, {0xb}, {0x4d, 0x3}, {0x1, 0x13103fd830a8255d}, {0x8, 0x2}], [{0x1b6}, {0xfffffff9, 0x56d2}, {0x0, 0x80000000}, {0x1, 0x9}, {0x400, 0x3}, {0x9, 0x40}, {0x6, 0x8}, {0x23, 0xffff}, {0x3ff, 0xc0}, {0x800, 0x8}, {0x4a, 0xf91a}], 0x9, 0x8}, {[{0x0, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x4}, {0x3a55, 0x1}, {0x0, 0x3}, {0x8, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x8, 0x2}, {0x8000}], [{0x6, 0x54}, {0x6}, {0x715d, 0xbb}, {0xe60e, 0xab43}, {0x10, 0x1}, {0x10, 0x6}, {0x3, 0x4}, {0x6, 0x6}, {0x40000000, 0x7}, {0x80000001, 0x19}, {0x4, 0x2}], 0x7, 0x7}, {[{0x1, 0x1}, {}, {}, {0x8}, {0x7, 0x1}, {0x2}, {0x6}, {0x7, 0x2}, {0x6c31b608}, {0x81, 0x1}, {0x7ff, 0x3}], [{0x200, 0x7}, {0x1, 0xd3}, {0x80000, 0x9}, {0xc, 0x9}, {0x8, 0xa91}, {0x7fffffff, 0xfffffffa}, {0xfffffffe, 0x4}, {0x3, 0x93}, {0x400, 0x6}, {0x420f, 0x6}, {0xb1, 0x3ff}], 0x9, 0x8}, {[{0x7}, {0xf793, 0x2}, {0xf}, {0x6, 0x3}, {0x5, 0x3}, {0x9, 0x3}, {0x10000, 0x5}, {0xa1, 0x1}, {0x4, 0x2}, {0x6, 0x2}, {0xb9}], [{0x8, 0x5}, {0x2, 0xc}, {0x7, 0x401}, {0x3, 0xa8}, {0x8, 0x2}, {0x7, 0xab09}, {0x8001, 0xfffffe01}, {}, {0x7, 0x5}, {0x7, 0x7}, {0x3, 0x80000000}], 0x1, 0x4}, {[{0x4, 0x2}, {0x1000}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x1969, 0x2}, {0x0, 0x1}, {0x8, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0xd, 0x2}], [{0x6, 0x3}, {0x9, 0x486a}, {0x24, 0xb4b}, {0x1, 0x4}, {0x81, 0x8}, {0xffffffff, 0xfffffff1}, {0xe3eb, 0x9}, {0x100, 0x3}, {0x8, 0xffffffff}, {0x1, 0x35c08c74}, {0x4, 0x7358}], 0xff, 0xb}, {[{0x4, 0x3}, {0xfffffff9}, {0x75, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x10001}, {0x7, 0x3}, {0xd, 0x1}, {0xffff0000, 0x1}, {0x7, 0x1}], [{0x1000, 0x5}, {0x4, 0x4}, {0x480000, 0x48d7}, {0x8, 0x6}, {0xff, 0x6}, {0x3ff, 0x4}, {0xfffffff7, 0x6}, {0x1, 0xfffffffa}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x3}], 0xb, 0x9}], 0x7, 0x1}}, @common=@srh={{0x30}, {0x3c, 0x8, 0xcd, 0x9, 0x5, 0x800, 0x820}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x2e29, 0x1}}}, {{@uncond, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x80, 0x40}, {0x5}}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@mcast1, 0x37, 0x33}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@local, 0x10}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x17}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'erspan0\x00', {0xff}, {}, 0x3c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfa0) 15.074631384s ago: executing program 6 (id=3124): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, 0x0, 0xe8) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) r1 = syz_io_uring_setup(0x1a0, &(0x7f0000000380)={0x0, 0x60d0, 0x1, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6003, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001700)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000013, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000b4000000000000000500204000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pread64(r4, &(0x7f00000022c0)=""/4066, 0xfe2, 0x1fb) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f0000000080)=0x8, 0x0, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x1, &(0x7f0000000080)={0x0, 0x300}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x8, 0x5, 0x1, 0xe0, 0x5, 0x0, 0x0, 0x0, 0x8}, r5, 0x8, r4, 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae391638305000000f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac6000000000000000030006000000000002004e20ac141400000000000000000002000100000000000000060000000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0) 14.616371761s ago: executing program 6 (id=3132): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) fsetxattr$security_evm(r0, &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "d8e50a4bf1958df189d29a0dd6bf4fe6806de235"}, 0x15, 0x0) (async) fsetxattr$security_evm(r0, &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "d8e50a4bf1958df189d29a0dd6bf4fe6806de235"}, 0x15, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x10, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000001840)=0x18da, 0x26a, 0xc) (async) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000001840)=0x18da, 0x26a, 0xc) r2 = syz_io_uring_setup(0x239, &(0x7f0000000680)={0x0, 0x405e5, 0x10100, 0x3, 0x2e4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x7}, 0x10) socket$caif_stream(0x25, 0x1, 0x1) (async) r4 = socket$caif_stream(0x25, 0x1, 0x1) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000002980)=@secondary) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000500)=@IORING_OP_LINKAT={0x27, 0x2, 0x0, r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0\x00', r1, 0x400, 0x1}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r10, 0x89fa, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x5c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4080014) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x5c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4080014) io_uring_enter(r2, 0x663e, 0x0, 0x2, 0x0, 0x0) 13.808557909s ago: executing program 6 (id=3139): socket$nl_xfrm(0x10, 0x3, 0x6) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="111ec20239e2", 0x6}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000008201", @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) close(r0) 13.753878312s ago: executing program 34 (id=3139): socket$nl_xfrm(0x10, 0x3, 0x6) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="111ec20239e2", 0x6}], 0x1, 0x4000001, 0x0) sendfile(r2, r3, 0x0, 0x8000fb00) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="050000008201", @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) close(r0) 2.314524084s ago: executing program 1 (id=3267): r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x1000, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x5c, 0x0, 0x0, 0x4, &(0x7f0000000240), 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x1}, {0x1, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1}, {0x2, 0x2, {0x1, 0xf0, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x0, 0xf0, 0x2}, {0x2, 0xf0}, 0x1, 0xff}], 0x4000) listen(r3, 0x5f14) accept$phonet_pipe(r3, 0x0, 0x0) 1.435352606s ago: executing program 7 (id=3285): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xe, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000804) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=[{0x2, 0x4, 0x7, 0x1}, {0x0, 0x1, 0x4007, 0xb}, {0x11, 0x2, 0x9, 0x3}, {0x0, 0x8, 0x1, 0x9}, {0x3, 0x2, 0x7, 0x8}, {0x5, 0x2, 0x9, 0x1}, {0x4, 0x6, 0x4000004, 0x2}], 0x10, 0x1000}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x400000000000007, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000480), 0x4}, 0x10, 0x2, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='tW%\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000400e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000"], 0x64}, 0x1, 0x0, 0x0, 0xfcb3ae1e096881cb}, 0x8006) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r7, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa9000000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f85b37154e19"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffff33}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xee}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) 1.396250228s ago: executing program 1 (id=3287): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0xf5ff}, 0x0) 1.318153523s ago: executing program 1 (id=3289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x14, 0x1, 0x0, 0x3, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r3, r2, &(0x7f00000001c0)=0x1, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_config_ext={0xffff, 0x2}, 0x3804, 0x40, 0x1, 0x8, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34660bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f6980b", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x1000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r7, 0xc0085508, 0x0) r8 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x17, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x20, 0x1}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.02599695s ago: executing program 0 (id=3293): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 977.642503ms ago: executing program 5 (id=3295): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x1600, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 915.898277ms ago: executing program 7 (id=3296): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f00000004c0)="$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") setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)={{}, {0x1, 0x1}, [], {0x4, 0xffc3}}, 0x24, 0x1) 913.008027ms ago: executing program 0 (id=3297): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x600, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r0, &(0x7f0000001100)=""/64, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x110, &(0x7f00000008c0)={0x0, 0xfad8, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000940)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, {0xa, 0x4e21, 0x23496a38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)="2eea27f8a51c13f6341325f8ba20fd374836e369fb69b0466dc8e2687f81a110a55f13d28826b03a3d04bbad3daea29168e364f9f680ddb3821f36d4192dc4b7600e37e509ae706e0d357c215cc59aa755dd8f7ae8f9aeaedd44c724fd7c6fd8476706144c695ea6642565a162562d1516e4863504cfb9321bab42d5fb9f318756129982a484e64099851efea61b096068bbdbfaec7dafce00d10fc36eb668848eb641842c4256eb2de646e559d3007969e3cec0b4e543a78d5b0850e1095463866b840ca9ca84e56d4062559fdc7831c6c0a71add738dbb1205260b04e6", 0xde}, {&(0x7f0000000340)="3972978916531f4b951c5828959ed18071f3344bb17b60493f06f7cc012eec3e8970bb591d65b5f4685eec91fdb990938bd9f0f2be75237d40c2fc53ea7620e12ecc256bd884eb134d516bc97bf7ffbaa50998ecf8e5", 0x56}, {&(0x7f00000004c0)="4c52a1ec1d42a67fb9b19a6f77bbffa6c7f4585ea487a21ebf56a2667716ed7e2933d5cda6f5a2cf40509a2174a6", 0x2e}, {&(0x7f0000001340)="b7de4dd8f6817ca94e0f3812c3873bb2aa5472089d71de2bfa27290420184db83000f1a4a17c61775ffbab000dd8dc223412191e12cea316402f41096e889f7fed39095e4e57f5efb3b2b2b0fa97c4e831808499c206a78a2ce3fe52f90b927bfd4a37abef2b81f7fafd4f50594418ffacea432b871b9b0ae99de4cb78b6960a6adacf81af36017b2aa997aa7680e10c0846b2c30e2ff986d5f9cd44e3e379b886c593c02f68616d0d4d5e7e9afd5b34be415c2225931cbae20a2b0ae840b28f73717c90d8a3ebdff9c1c6c608b3d64a6f5cca71b3189faf2b6c8f4528ad073a6d475ff8804480205dce4ed1b76e8098a51ba73cd372c9176472b65dab2a1276e354d204ef2c85383cb94b68e26e0f62b0387f5e7d55954f3174bf7250c842e8f059f7037081d6d8217a04dc87404f21d15dc5a905afb446810d6c190d4254fe7ef9acc174f05d1dff3adeefe7b250c47d69a9e2a6b55e093c1c10591420fd664a88ae9ab0a78cdc8ffb9d306da44e67779d7cbe0101c5039c7ee490eade6217a6c7f3a49443f695f7674cb3cc4ac65a7920425310667885a86dff83d85cc7c666dc462c2df1fdba3bbb3d75d23fecc9999019f6469aed6d16d7d143ecdb5fb0d39aba8ee9e63b37975597e71ced67bd935aaae8e7121583690f14e5129ecf2e7205fa9cf2250bd4fadde7f08e67b3ff066e764c3609b53c797b3304c620cd6c2aa2d438cf5e4cba0a23e8d9dbeced0fc9cecaf3e51df9aba3153d367b2fc07b2c2b2f7f18225f2d3b295ad1c17f14958add7739a9ef3a877391f2c0db2e07437a2f024d4b236f0ae9e88583068b6b88d34ca0a2644331aeb820ae851de1e307a3ca419f63235fac19752fd4e04fd2a7babc904b0b8ed28704b8ffbe49ba5c7e6869411d3b637925ff477ef168c6019629bfe60673375a37c53870ba3c6bc9b394827f90aa05562b385a1dfa1a9d45f947eb760932d47c2a9e390d368064bae913d03c0822c792e76b66282a8705da0c9b17c641a984f025d47c21109eb3f8d19863dc5a1ee98e402c01ba8b66f4aad87525c809ccebace1cdc821cbd407203ac49a2ea5b59876c289d7f9ce0121548bad87c4facbec182ec4362dd11a8d7c6081465fa297d0fdf26c69dc46e9517a2fd7f79de397b8d28a99cb6f827ec9b982dcead5f77e2a0f9755c162a92e5cc6ac5e216cd5c0153bd47d9f4531ad19024fdca6508fcfea7b6e67038891f42c44933f2229bef5f8729020d9e7809c2238c201b1c001cce267f401089486fe98db2edc2e1246ccefaafa336c608c33bdc58090d6815af7d1555971a428586d8c30461d3d642546080f924849b4321a17038f81f58526b1bfb10c253b6a7bdacecc3186908f3e0ae7cb2f664ff61209e91c80d48fbb5a85a019e78c2130ed5a650e71f2dab6ecc0966f36ad2c8492e82eba11b4bc51f6fbc9a6e79c0b3df30ac0d0bacbdd907540a2068d9a5b1be6a961d228266815ade00723b0845c1d4abf814b10ba2b2e46b5ac546701814feee4b980ed35d2938f08a38ccc6781bcfdea32c8c0f152360c003367891289c628c9fcc9f04e335a3b340ccf46f76678211e9a28cc1da69a36adc8951f84a53a04c1b4a770bf6fa241e15426aeba7baba9ffb1b8c29f78eb69f0066ada85f3c970b405dc555dde7c5e6a3cfa93e3b8ef67179e4699cc3079e59e297f0d7a2029453a5093d3115eddc848a5b52807781d9482ecbfbe4b114191b58446b6c425f9b435374d359bc8adcaa1830ccb76e4405fd90b804640ba952f92dfd7de20fddc6c592418a2f4726b60f116c2a791ca269f302d2702fc2bc583cb77f44420aa41be58c5aae48a07e5b33cd28a71f4c286a2eb836d6d3feda9bf31d12cf72da56dbcfeb853e37396864d2f43ec8168bb0cb6e38f91f513fddb5f7ab4855a94894c90040b6d8d5a20f7eba477f5f1600c57c8491d887778132d26284d3b947c253792af9afba9137d493107aabb028860ec24553be47f675c5239fab3debf7a29fe2a72b83394ad746f6994009ec09ce89df8cd7bb13a77c9b43c74a610783228ea9d801aee22401cbf48d01997e71002b11d727ee4d3f63a1dd2c0bb36d602eff8bab7baafc0700c120d731c7848be59acf74c11652963ae0f7ab94b7e3f37d770731c9e8b101dc1158d00e7394982485649f88a6b36df5997b26900a90bf045fc41b633bca8f8825176437c83197f8b251c8d24f731751945f09b0802f0c0ead58f8c080441fdfb482f5f4bb8b9195d92c7210c2a45be298346e49f7999aded4ef5e49ea046b164f3d729219b2165d27c5651d5c5386aeb95378eaa058f4c7cf300291c46aedf8dc10e2d4bfebff19a6ff614faaab6d541c3fede5b12bc84d84fd0ddd6291952fbec5bdd878046403627e85c3b7925e7e381709cfb89b049621167f4966c006ed105e84943ec08deab4a0838a9e60cc9da526c1166381b8c4a0673d21aeea443987cff27e669f151ad98f86b6f7d4f395b750314def7fe3c88ca61fc2967c308e00c79b6b4df61f8263f88126337574096a7b4b67ff4b36aac8d909a8c5d7c94bd21e0571f29b1830dda7e2e76f208b9391306fa8932483e783f5b53da5a92f922e3e773a7d379d40049ae9a0d4e45fc932ada0e372ad9b6f5caeceb3aae1eb82a8a745da7460a64d48c7e220ba09d7277e8bf4e1d65bccca791d51bfbba4f40509ed20a181cf952d21fde849789869c894df3df5a432b645e576eae67de1d4d5b8ff341cadc7a78918e32606fcc3c172e5b670f62e215d08dc72bf4cac8d345dfcf25e891edeabda02a5b857c0de4149bf82d3584d8692d153ef9a23353f989130c5917cc69c17c786e5caeb699560196d277b306a6e31b4fd70bb19f042ac4a8c40a03b29e93e7d98097ddae63df8cbc1c8020c72c118ae2c3c0a20186787400df77cd4e6604b61cc9ff0e7f6054b7b290e19b8ef52ca17cc79239de376214cc47872373d1f1a2eb708c6db804be40089c9d32f2e70a514574664d261d6b0612202ac14881ad210c3fc37656708e774fdcf47507b23650611642b2dfb3981fc3ed2b3bd237e547f2c31efa122d2f69864039da0c08dce42762ace689d98681e4b8ac3e98135c89f726787bd8ad9c47d0a27392bb648a67c78672d000b67ea10b058588ab8447e84de31801b90333bfda175dd0ed213967b0a05477cb2bed72d5a925793343c9039d0c52f34dea283b4d12eab42989ed99cb494c33d8d0ec52edf1affe334ce719423834462ac4ec0e451961068d63e7f5f840742e49afd1b192a566c40ccf0abdd4eafb69890d4f52c76df0de066af34fbd8f9b1afd24a3ec34b1b7c8057f46d939753302b72d70bd8ad05b651a720d796c4c6db5d47b0d9e4c8253511153df3090ce87c9857d5e02aec6d7aab6fceb59af9dd94fd4d3054c983034139fb836442be044b9a4e86dd132cae8b56e1a765e874d16f954a426514d6db4e1ae85dcdd2ed6fdb935ced619acbfc7e46871ca5253e311b32af765c6d245001ad9c6c95ef346a87d719e28f689ca54a3ee6750ef7922ff14bc0843835dad2175ece7740c868f25eb0151c876bfc8897fbd5fa7285a0bbab9d16b3784cb4154b591a4017e27fea9bbff15e81bad540012e0491d74e16e2cff0efe09cbdd6b01f3f37821882053c5f13c2ec36da9c0dbea9c76fd20fbcd8d2fbc8297635e2084bd47c7e66cbd1a3e52b4542539beab64bd6ee89a96b14526d206e2f1188295d40e04ad59e7f904291c19b408cabbcda21b7d23dec2f45170884ffdf15ee125942511bbb20823afab59af288bb7dc7accc208cb59b20cbd1a22f007fc3a18baed5c8660bc61ce13bbcffe12e52feeeaa0a6c9b9d62251942323d7a1d4e93ad7810f651592d791165a6823b86eb5a2c6bb07cd0f172a7536f8883109bdece4b50626dad3af42b2971c1241eb72cac497882e7dc9cc9b6f3275aec487d3ad2e6c06219319e99e4ed38693666eb208263ed4101a1b0cc90499cfaa727eb6f42033ddab9628316a57fa6fe60241bde4e23a3cef152ddfd12974ca911d29a19817cf390e2d667a9a2c4ec1da19e5bee47649d5ae463461b2b50a4d1723a0a6132a6eaa980a5602dccfe68b5197f2f03732e39b6171eca351276e3373cbeb659b6f2192afeb88e1b2adefbaf9959f50b8ccd2039b8f040a6f97bec9a97d5315c0699342d1414fa593283fbfd15060c5870a742007ce94d929ae3cc9904a0bb132b2423cb1faa8e967f0d85ea8a036a383af1181370b516f41746b662f3c280507e5d7da5abf0353420bb9f09d709edbf0b6cc6a754151323690c99171b7683dbf37797936b45aa6fa726cecab7c9ba17f6cf5506f925d6c3c826086b08acc34844d2659add6e37a000fad1740489a743fbf74d6cb13e717aa8c570e2cee46c51b9204b028d7893965604e60cbe2e5a06060a04ef66ed58ed5a6e708934550698925cbfe675348b288b15fc64d2c0cbb54682b808be127cae34bfce59a4fa1becea234d68fda9274c3a5ed606fa18e580f5b4a0b2e25e8a8dd803a1e777c2c03aed950904b627671c889d6117dfda38cd36cce50b1badce657d84f12c6b44279471cde8224b4277bd32ed758e24453d56cff545eb9d5d86bdeb86161aea6929585a9443792f3bd5992f01fc41657c8e0e182b299e32619b660ff25dce0a46cd8f3aba328f1d5fdb2004a4b988f839c972caad72042ef8b7cf88f958fc34c5184dc57ed05b6852534fe53ddc9aa69f981d74b082e26bded0eef3708354849068658f5c59bb09fc229ca42a869501761108ab21a332df2a325a898d6fd2453b592cecc67c1e2105774dca82d7b6f01f85890c8f9db18825f12b722800a38cbe200dc8745d716b3139122debbe2e8dc0c86a009de23ebbcb9649d386f7e7d9943276fde945939959f83d52b4215385d3a117af7afffd77fc32927d2d7ed341da4b6b74116665a07bcb9b63d64a0aab9a579ab2bb840f4105879a342614a23cdaaee448e91044942b68b18ce735af74ef64b6157addfc797fd2df151bac841696c884974c583db32cbadde9fbef72c406af4e268cbabf786af27603d13dbe39b35ce496fe6891bebd9f36dd1ee3e30f9efd534eed9251007f467a869ba0c05d36e0166ae2562ee2a112f1aa927a6a6e625f73d255f3bdc01d1f9ba93d41921b9552148042c51e787999d971584827abff535fec41dd6543f7d94f73c2fdd063b367da6b721a7b1fcfc60216539c152d34022bf515d11ebfdcbbd1d79ede7d12ea22718a4b907fb75f61fc5ec983b616339a3870f2d8bc70f237429bd34d55b89c6c43745f616521f324cdb8698241940d9f91fe3c2a14881d2a004b223fef04b77731cdf02471a87841b1e90a2d1ecb226b9498f9ac02932eb940b53edebd72352a525b2e7f8423e08c6b7c86237c6e5f640f418c5763eb81922852db285ab6fbab111c1eaef5f1f0183553895f6203670a2ce9ecda05ff356b8abce339ce5c38e757e78256b18ce618657c82dd064ceb350831948088907e0712f3f85074b13bf19a3e04d5110dab4d244052c639dbd5081cb1f256e417304922c2da548cecc44d18decc9d35c79747be7d406d94700bc0ec9aee548649f0aeb972a9b820b5959981785ec0eb0ae279600c6e33dff323f2dda33d8e7fa9e9a9eb79be9bd8e16f50870efd10f9c1e83001d5639a3d754e1578c30200e99b232ea6e5c90d1f0fc41b58165bbd8555b12f47fc0940bdbfdd2187dfa03ee03d4eb22538e0f206a2fd995", 0x1000}, {&(0x7f0000000780)="d355c9b5c1c04d6925481135cc9dd4b1be7706672f998fb597556a9cae820b7e1f7efb71cf60eace5c3e50e866ddc901df00b898a5c5b783b8c3ca25b53060a217e2167e6f861f282aebdb0ef0cc2b58ec0316fc53d812916f3ad156fdc4489c233b54b4bf10ee36b248b507a2816e8b44d7bf01150f58e10fffd38c9af1b1a9405a1b6671641a6bd542bea178c06612dadb50e01de4a2e10bacb60123bcee11d37375cf2494bed04168305197bd77c0c81081a8e22ad4e004f6545387310784bf6f933c32b43c1d647d844cf4cc8ec6254f19b27a3c4c343fde0ed2870eaed8d20a9512534fa81d", 0xe8}, {&(0x7f0000000540)="1e0106de76a6d62119306e6ca7663a7d24eabd3702ff63f9f3b10eecc97083a4d361a5c56ab0e3793ede7ef423c4ae0f", 0x30}, {&(0x7f0000000580)="93eb04dea95243b631b3cfd82e64bb9244", 0x11}, {&(0x7f0000000980)="519b768283e9bea8b5c40445df101b6684d3b73668886f6ae9846e45ca20cc4acdaa8ac2730aff4e3d8034a2b4239a2a0cdcb41b3a49575530114b1689bfdbdb55773aedc373e221026618636c5deb63d942574ea44e014670755a39bf520834b0d3124097b75099d0331ff0e5d22aa83dd738e6127245da6006843c05f79adb53e6fe641ac61b542849f4770bc8d1a2c553ece756377dc247d51fa75676c53274", 0xa1}], 0x8, &(0x7f0000000b00)=[{0x78, 0x0, 0x10001, "229ec4949a4f43267b3f9b1c9b36f4f63c711581a97dea2a283dfdc83586f3ed2754feb719f652a9a6997aaaff1d951efc9dfe98ab4df7a9578779ac435077d506ce66795c34b797fb199066629d31a284b71093c19f4702a3cb19e4e5214d1d0323"}, {0x110, 0x116, 0xd, "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"}], 0x188}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000000020000052400048020000180070001006374000014000280080002400000001008000140000000100900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e80)={0xa40fb27, 0x0}, 0x8) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000f00)=@o_path={&(0x7f0000000ec0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@bloom_filter={0x1e, 0x7b5b, 0x4, 0x4, 0x51920, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r5, 0x3, 0x0, 0x2, 0x7, @void, @value, @value=r5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x6, 0x17, &(0x7f0000000d00)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x71}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], &(0x7f0000000dc0)='GPL\x00', 0x401, 0x1000, &(0x7f0000002340)=""/4096, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x8f, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0x1, 0x0, 0x2c64}, 0x10, r8, r9, 0x1, &(0x7f0000000fc0)=[r5, r10], &(0x7f0000001000)=[{0x0, 0x4, 0x6, 0x3}], 0x10, 0x2}, 0x94) io_uring_enter(r2, 0x133d, 0x0, 0x8, 0x0, 0x0) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x1313a1, 0x400000, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r1) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 770.109275ms ago: executing program 5 (id=3299): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x24, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0xe1, 0x7, @loopback, 0x7}, @in={0x2, 0x4e21, @multicast2}], 0x3c) unshare(0x2c020400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = msgget$private(0x0, 0x722) msgsnd(r2, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x2000, 0x800) 769.908955ms ago: executing program 7 (id=3300): r0 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x2000000, 0x0, 0x0, r0}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x0, 0x0, 0x4, 0x0, 0x1, r0}]) 719.344928ms ago: executing program 3 (id=3301): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 694.994779ms ago: executing program 0 (id=3302): r0 = socket(0x1, 0x80802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0xffffff02, 0x80000001, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x10, 0x55, 0x0, 0xd, [0x7f, 0x3, 0x3]}, @generic={0x89, 0xa, "04d2f00057603357"}, @end, @ssrr={0x89, 0xb, 0x28, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @generic={0x7, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x96, 0x3, 0x6, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8000, 0x1, 0x3, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0xe40, 0x7800, 0x5349, 0x400, {{0x1c, 0x4, 0x3, 0x1e, 0x70, 0x64, 0x0, 0xc4, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x3c, 0xb, 0x1, 0x3, [{@private=0xa010100, 0x8}, {@loopback, 0x3}, {@empty, 0x3}, {@local, 0x264212fd}, {@multicast1, 0x1}, {@rand_addr=0x64010102, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}]}, @generic={0x82, 0xb, "ff9586b5f99a67d23e"}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x2, [0x6, 0x6, 0x6, 0x56]}]}}}}}) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r6, 0x267a4e37}, 0xc) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000400)={@private, @multicast2, 0x0}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)={0x88, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40831) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r10, &(0x7f0000000080)=[{}], 0x1, 0x80000004, 0x0, 0x0) shutdown(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000440)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@user_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@oldalloc}]}, 0x3, 0x44c, &(0x7f0000000840)="$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") 630.874744ms ago: executing program 3 (id=3303): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c000000130001002bbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="024a0000810500004c001a80100002800c00018008000d0008000000380002801c00018008"], 0x6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000050) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getaddr={0x20, 0x16, 0x20, 0x70bd26, 0x25dfdbff, {0x2, 0x8, 0x8a, 0xff, r3}, [@IFA_FLAGS={0x8, 0x8, 0x202}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044805}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 630.720103ms ago: executing program 3 (id=3304): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x70f7197ac6348e24, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) 630.148413ms ago: executing program 7 (id=3305): unshare(0x6020480) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000980)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x30}}, {0xc, 0x8, {0x1}}}}]}]}, 0x48}}, 0x4000) fadvise64(r1, 0x9, 0x1ff, 0x5) r2 = fsmount(r0, 0x1, 0x10) write$nci(r2, 0x0, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 577.296146ms ago: executing program 3 (id=3306): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) ioctl$KDDELIO(r0, 0x4b35, 0x9) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) syz_emit_ethernet(0x1012, &(0x7f0000000080)={@empty, @local, @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@generic={0x6558, "58e6b0c31c64d50eb5edfc5cf4a100f9f6c8bdf3e9426a1173ceabac3e5b6f3b5e5647f24f632e190efd7283fdcdc17a804f6e8d3e8183f6d0d8b27e31d9652b670dcad26ab6111987079c624eaa2ea7aa0b08c7757366612359698b260a6ee21e9d448f2d3f6b24e125489ba3b92914f15129771702e116c9e37cd23952dbb7d54479c65f9c2461a142ee80271d69bed8080001bba8fe70a376e3779d2eb17a2cff35f7fd0db7c8221a9f4b6252500d926ae6eb99c104f999a93811219ed3e3d6b11f42cfcfd39fd15c989919ee1bc0376c26fd844c3ba16ee5483182f8306f10d0c9732a252cf2fbb39ebae346844657b30e6c0dd7731387610f2fe727caf681a3fe2bbb104b001e17b899aabf59a667eee414d80604eeca39e5411e43d12ebb5ca8a635570e41567f5644b1912c95728e86bf1f1bd0d1ab8013839a2e6547dd9cbc7b4ac04b93969edb1f3b1aaa73613fd0a8f0c27380233cf6fd45c5ac8b99ad7818c3b543c49f55f84210c0a4aa264ff00daab3fa8259024fe7d416a347a151f3e2d58ccdb7081f69b060e058dab9303f2bf6f728fce54ddcb031ca252300235fba2934c7671a973388ab3f215b216481b205cc2c187406030129ed90265593fa0149216663ce7dc465384f76bc8eba25fe8c68ab7e4c5d15f672971156207793eade63c58ec51217207508c253981764e2514a02ff67908fb9beb277014bcab3109bb95463cf4b577eec136c9e2f39e49441feb32d2c27bfb7727ff99c81f7fa7ef7673a296c6e0bfdbb85f7f44fd51bfda649ad2fc64168f63612972664a09d6dc327440ea41491da2ac4a0b3d9b500767c3865ed5a3e197cf78659035a1203ec0cc6d1286e2098ea9e46bea35457a0615b2dc6b6934b02379d80fc02016e414070d9cc0980cb864cb4959124970fde316459829d8fba9d9a8ac50bbfe78302a9e20711b00381af2a5a6072cf2e08ead42d8f95ebc084225a93192240f866f4aef271f00e3dbca2a7ba530182777e0b12042a372f464a4ffeb814074c010881849bb1ca4cc03ade3c13db55e95e20794e92dcd36804a98ab54f2782ee53ce0f62f00912251a06dbf10c0ebf096c32b64dd1a0b2ee0c075d791dc0f642504e7cb463149e858ac4c0d8a58e403109a7f47fca3309a80fb5a08ef6ecf408c419494522d33ba8e264fc4b3dba58eeda730dab45363bcc6fb3447802f5ba2257d7e1bb87c838840513d7c33b502dc0f23f26dcf211b49b615361b62e70747a00fcfed6b8696f1c36ea8fb4c8ca156e91872e615b40ab7889934e207b1add6ec1538b29f2afed193b6adad9b535396dffb72cf36c568834ecfa7ff4ef07eb0c7ca621ae8970543540b9c6331a37c44990e9749f61edf34a118da376be5e9ba2d36b60e19fd1e13f4eaffbafde10eec07d4133787cc4adaf9a9ceb100738ff560dbedaa2825943ee00383135f47182a453d481142e1c22862b1e0705df9d34149d6734ff6e3804816bd06d96c8947c84fd764d091c0f93eae3a0bb336fb6e560a89d91d2e290c2cebb27d51597b8408d2029fb9a9025d3a238721dbafeb4bca4b88d83a8649a9a0b17c632318b6e94e95b3c6c22ba3bf664abc4ca4a4235edaeb7ecbd1e432d3a200a6d511d3c2665c4501cfaa41f6599355e9ee1c6c65ff17a0e2ef5f189a04e4f8d1a6d79e41bceb624c1ca0761589d485754e6d25f0e38937f02a438b93d7ef65485e51d3aaeab40631d077cdb5027e78043f064b3163ac5b7d229e5792ef6731697da580b4f8332b2b29cc43b216e71faec4a8575ead0d64480ea167f8d74b1314ac746707a072d5ff8920832184504722292c44e17b17a0b478373861f2a6043cdc5c258e11fac93a8793829a5674accbace26aacfe07e8c7ffbe8bae65c5325c1ddce0fc5a0448021eb24aeb6f9c77745dc243c19a6935b2f8ceca4a24aeda914632ac8bdbe29d76edb55481788a712753f4ff181b0e538d8f0d03759c081296c9d70d98366f656ab6c88514cd549d5aafc4709312e29dd99611d785a0e7c995aea1e811f4ecbed1cda3b28c46cbd03d193706f9f3d268e057d51d09adca35c2f1822228dcf2ad2a6de97496dd9e04ab63c138eaf28ab3c61f3c0e64a6c5ed20ff7b92ec985cb4de533852524a67f0765b75573e8bd44853ddc8f74283aaadbd5c500baae57cf8d7073576c08c261abb03fb64d5c8684d480a61c78864d86bd3956adfc136041647fe7e56079693bede6448421f384f317f48a18090be5b6fac76aad3699905ebfc0f778ac6796f7f011d1e5070e1bad025bc46e7ef2a4f9ffa97ad196bebef968dc44ba08c729750cb11943c7fdd25c900b6d498d4c99f378800b08e46e06ae5b85e10cdfca43a321e4a00c26bee30f93e77e4f18141b9170abbf930049be4f53d934f2424bfd47eeb714e8d33ec4065971c43ed5c2d0848436021fde04899962fa27388cc7fe8767277a5a580f3b871790c422c4838ee34e9cd3783af37378c7360612267f7fcbfcb3d6be191f4394fa42d7bd257474339a74de9c71419fe2064f453de8127192ffc2a7250ff342d7d232a82c94ebff16e691ce7a65f89ceaa1dcfd826ca06ecdc9ad9d09c437d818138e64601457ed80d3c83f4fd3a42537a6b4b8c53a777ce0a3454ddf97066fd4deaad677052119c741b757425f0f3c7aa69463f686c3f6171b926ec9e84739c941eb50cada33276c43d2747125e7a966040a4497eff59765ae47a6b5d7c4ec932d576e9bf33c1e6965ffb3afd2c70264317f0c2d0511db93d64cd0fbada7dd197edfc5d8958c39a75b52e1dda591679c7534c60d565e6ae2f9c486f3a18fe9c17152ca5f914c4828f4059753debe0691338318166f9acd648e4ae4dda9691c511129547e6d34fc1926e6d157de67eb31b0d47eff82923278052de54e3baf672de784a015d8c4b5cdc217e5cab2de1d147eb1c9f29a6ecb49cd22a55c2a8da4d94b959ce4ccd9fe40ddc167ccd2490325fe47138a85bad6f4e58a1db23891e8ab7482432ded752258b66945088eefd6fd445101437fc882c577806ea59ee69311fb4cb1dc7cd449b45071406adc49889d4929d1b144446f155387569565a9dac05a8f234da2d5ab922d18f4dd4e6722ac5425cf1b038a330e7a36e4bbbeed7405bff5ed8a1faa0adb3c511e66ba6ca045f6c29acea0be0245587495a9db78edf8a8e27e545aef51e26305cc6a62a73d4547535faa29d5f06a0d9412be12c2ce9979b1d3312a8a2b3d0f4ddee42767b8702a461b96c96a7cead13bcea595a26e44a3741354c25217b7ae084cc352c448c9280fbc2cdcd74c1df43c723ddaee6635a542d38e76285119e6a09bdf4f9e066b1051a7c3634ca5fbf3b37f80eb16defe68d50439fefaee7169c3278ef3d773eefabac02b3f5f07211a5e8e54fbd0c6a82fed7e962e7edf695646fbd39d3bd035eef8ce1d7ceba11362ed7b04a2b5619c2bad8ae50831c442dd92d729398be0807512545dc51eb64ed87af78be3bd3c01562a9cd53c1d5174c5d17944cafb681a9a23eb744e16c1266dab1b06adf335e231468c7401c72b4517cce6bb9085def202ec7a6d49f255ff2909baa42e4e3b6b9cb6ee53e7473f5569c144e4851527ff1986ded843051e028ae0498c8b0481364fef1fb0220212d73cb3197436fd3fe37969826ab22d35117b34fcee523b86ba1cf36e4e7925ff40228c9050fbe08099b9bd594229438ddf64ca7d44486cef189464cf15f75f66cbe2c50b5de8d7488ed3e6d587cb3172f49e4e11633d5b055b739bcf98f0f52dc9380028413319e54459f9e01804f9c8ac8cfba2256142151bca8bdc9bf77b2b7fd4c9b94e4ea5db60e33f370fa0df26a9cdfa4510bb22365503b94042d2e7776cb71d82857ab9ba8153586d1c9dbfe2c9f53476182a5e0d63674bff684998ca1198ae15f85036917e0b02f7d1b971dc7fcd6d624b646a463881253a1c43f48482171de6090c51fb8f906cd1f2dd1a55b98c4d7c03d2f91ae6f40710fe824de05b53a84604f82c4977f9eabebf6f24476a4bd25cf4ed24f5e8c6f7bddd59040f9816489e5e959080ce0d7b9e98236a8f0dd5344aa312ca7afa4a8cef84cd54819d2d43afa4ac00dd195eb0fa9980734a3706b16aa100561beb03e63b98d9e3e820fceb12642886252e6a2fc8ac6f3c132206aa3d0330994e8a872d8756415613ae4c27daf2c367ad256d724e40e89c761f33534aa5642ca44336e878360a8e50906df58938e82e11300fc3e57fa1da0892ca46727e554162ea6ed1ef9b9b7c28390ff0071453fb93fb5c36697b54ebab2dfe13b3b8adb2d3bd2c96e7ff027eb4b912a5979bd645ebbb4bd683ff3bf9435dfd0fa9cac7485352ba2d420e0f2e8f1b8b059246ff3a14b509e07b5f1443744e066eaff4f72e0f7abd865fc0869b6a5f37318ded79cb17f7d4416507cfaf0439a2d0eccdadd1fb1d84fccf85df63bff9ce1a19cfb839c993802864328aeb570b7d77cf3ba82d372c097d601d9b924b86eb1f25a19e403a95558550edc50ef46455f8da649fae414121d87d41d26f7d35ae96fa39e3b0330847e16fb099ce367879ca6c235fb37f428a3d8746a04e6859e53eb1327cadbb772a0c6f44687c83efde7f58c794ee8a84ccdf5bd575cfa34092f388a6973a86bce34fe9f4956429b535b216695668175e8639d160f7806a7ff6b861015e8812b7fc64a588de292782b457b653be0d9bee748b1855e7b265fa7a8095248482c9a6aa2849dfcef2f88550021dbca40c9d7c000948c5f7df540cfc1c67ff2b89ad1b7db5571831631a38cd9a7df257bf03991d0f5da8fb54311b5689daf81fa8608c8a55efaca0351c4c464a1debc9d320bd9b9127e7806b46aab4c47bc768f2a53017c73cd042e3fd9759481412c69328018d1262aaf1d5a70aacf4566ff5207d4fbdc070a1ac617c536af8390d035eab7d9437663d051b6b64bb296e18243cccdef284d607baeb866e0a50e0b1889898be5e65a44927519d7fdbf0e3804eb91cf4b4948ccb1288f1aaebcff6b840e6c50ee96aa52a4aa91376dc10a5d9d0048e84d0d47abafd6d9f9ed3415dc62e02cc49a0759ab0172fb995773e909e82cf3eaab1590bb930ef453040edfeeb65e76c38779ac4e55cf72b0775581771b83808fab269859cb0a20c5320b0d414b1ff46d9b165b55a96e61c2cde65355438437b4f6fa00e99a23eb12f2b0053a14072fa1ab9cc64ffdb2f51a851d8901d25de882a9d16f03b2af4ba4c1963b973f5776d63b77687c36bac4235c9e7358edede8bfc42f2193259f50e49db99c10441f03d014c8c4550046c5b4a6d83c8f247ccf22ba6f969f0285c26e9dc8a6417465b69d65b53a271990572728e2ff17ef2c32ded44af536a581bb5f377b555832f8ffb3dcd31d65e3a90bea040e609da6973ee0cf0591b3ff981218c404833048c504618c1581a1b0865c685dc8473da73e979f6550fb9032d9a1e9815d005248c0c530a890d2f8089d430d724c9949625eca34f87618e594986ac60ba8cc16edacf978e3384ca7c1d1a21030b82b1329dc4b6433d57ed9484be68d18394b8f461d332efda87f6f64c08392cafc024d8230a19a54303ab32f1d3b5a1ab6f953529c35a8933e6dce71b7f01b7688063e4fda292ea180e8eb92685e510cf46d98d4ee278a90ca09b15868b1165d2b591e1aca17dc7573b39e68621b8a1948b6f91c668898dbdcde0e95c6f07dbad5751cc0aeb8c809e9823e454979ccbbaa342b8121ac4ba"}}}, &(0x7f00000010c0)={0x0, 0x1, [0x6c9, 0x882, 0x701, 0x9ac]}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x6c, r2, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001280)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bind$inet(r3, &(0x7f00000012c0)={0x2, 0x4e22, @multicast1}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000001300), 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001340), r4) r5 = socket$netlink(0x10, 0x3, 0x15) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000014c0)={@private2, 0x0}, &(0x7f0000001500)=0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={r3, 0x20, &(0x7f0000001680)={&(0x7f00000015c0)=""/35, 0x23, 0x0, &(0x7f0000001600)=""/72, 0x48}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x17, &(0x7f0000001380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x4, 0xb, 0x2, 0x5, 0xfffffffb}], &(0x7f0000001440)='GPL\x00', 0x5, 0x0, &(0x7f0000001480), 0x41000, 0x48, '\x00', r6, @fallback=0x2a, r3, 0x8, &(0x7f0000001540)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0x5, 0x73, 0x7}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000001700)=[r3, r3, r3], 0x0, 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001840)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x48, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x40090) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000001980)={0x5, 0x6, 0xa, 0x7, 0x9, 0x7}) syz_emit_ethernet(0xcf, &(0x7f0000001a00)={@random='L^\x005b7', @empty, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x13, 0x4, 0x0, 0x4, 0xbd, 0x66, 0x0, 0x8, 0x11, 0x0, @remote, @broadcast, {[@rr={0x7, 0x1f, 0xae, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ssrr={0x89, 0xb, 0xd2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}, {0x4e20, 0x4e21, 0x71, 0x0, @gue={{0x2, 0x0, 0x1, 0x1, 0x100}, "3834c16cafca2cb45dd56f6205028978c73093580f305da4882ea26818b2d09ff51a288ca9c454fc4957b26dd6e10800a19b38834bafd4466ad87a577c620d82da4b2b5e7b8c20eae9f15b6855d7ecc858ad2e6a147cd0c4066a88b432b3cb783d"}}}}}}, &(0x7f0000001b00)={0x1, 0x2, [0x440, 0xa03, 0x4f, 0x817]}) ioctl$BLKSSZGET(r3, 0x1268, &(0x7f0000001b40)) r10 = fsopen(&(0x7f0000001b80)='reiserfs\x00', 0x0) close_range(r3, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$KDDISABIO(r0, 0x4b37) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000001cc0)={0x2, 0x8, 0xdc, &(0x7f0000001bc0)=""/220}) r11 = memfd_secret(0x0) sendmmsg$unix(r11, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d00)="b5c8a7422916722a7f9aae031bf09e516629f0438a17b3638ffd5b4250c2374ef538eeb452b748cbdc427237dbb8a717059ed599e55f039da19bb3f7f38f88a234c7c3dc3f93520fae1f37fe0f84e07003cce4624bb74cca7b0e38ee3ee8a63b0dd38f136ce8", 0x66}], 0x1, &(0x7f00000022c0)=[@rights={{0x1c, 0x1, 0x1, [r0, r3, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r5, r8, r0, r3, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r3, r5, r10, r3, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r10, 0xffffffffffffffff, r5]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r5, r8, r10, r10, r5, r3, r5]}}, @rights={{0x20, 0x1, 0x1, [r10, r8, r8, r5]}}], 0x150, 0x4000001}}, {{&(0x7f0000002440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000024c0)="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", 0xfc}, {&(0x7f00000025c0)="fb51bb87c1521d3e5d28c926707977a1972ff85486583d1378bb05f1f0f0ecb62fc848b732698d62a53869d563106773deb5873ad3", 0x35}], 0x2, &(0x7f0000002640)=[@rights={{0x30, 0x1, 0x1, [r10, r3, r5, r0, r5, r5, r3, r10]}}], 0x30, 0x48014}}, {{&(0x7f0000002680)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000002700)="4db4202a91df350035dcf2d8a80d2c249d4456db2857e450a86d15df2d095172a8c70d5754c7d5dd9c004eb91c6eeda477edf9c2354475fde1e6d3f800c4ff1e46de8eb0476b7baaee0db6c944e821170328b92cbbe3e185c43fd658f3b4a7de2cfb8e25f07b643ab317cc9eb97c69f4329664116a46e96f8ccc9806bd67b5097344eb5327f2e9c6e91e97", 0x8b}, {&(0x7f00000027c0)="ba54b165fe372ddf5cea563f964fc978d12905a5338c63a70cf0c26ce7861ba8d5f4c26b23b7a1aadcfd969d63bc0f87b3173e0d9e4a73d81796e79e0ed53db5e9497d6c7f38697e705281c68c03541c95e6d369f0cdd57280c2e13ad8a1f4b0340d743c8bbeff9bd21d4d0285c55a6c2498ee3e37a216946f0bf31cd95ebac26cab476d074af0f46b25c5ac8834283dab1437fd187f5f450a0127b8f6aa149cad5784ff449cc1bd845d1228a81ae4e135aaddc1d1264c8e11b1b6f2708e9cd8797227e51aaff8453c337ba235ece3bf33c70ec595871c838c458e059b8fa8796a973ac62dbaf2dfc618f0e50a25afba577a9e05948e6ad386f2ba3c93d3ed640864bec4162e6472fb1e60d5ca136136757b7303fb02bb86e9d812de506e6680960428d03a6887b56294b2158a26e34372fb643ce3c44ed0a33183efdb7735cb8da5082ef9547a3c20cec9512b717b751ebfad8dd4f2171e06ab26e632f1a7b3c6aa71f45bc7fb6e3782187a58e1784e26acc78ae24c4da0e382cae84dd89ce11b5bf2f495f5ca9eaf815a2a35ec80fbb20dac57e048cb619a9fd1f54dc2327a7ff631b607c50e00bfdad4d67a338fa383e3f60dcb14260e6a70e96e61afe797a6fbfef885373ea9f9cff73baeb7502c64c6264710ac8e2d46720f6d7bdef910e4d00c64a1bdde00d434b3a3e4c898f9ec135f481e8181c7bc62193e9e27949d5ece6797c8cad3dfd068d88e359397ed824f424c745e99df1ce92b169e0efb824d78a32d30b6e59d0bad17e83743230d5fc200b6f52be3ecef16ac7fb343a34d38a591c84d4d0a38402ffe1cf699deead401eaf381214763020aec60972bab36cacf25abc501d273095deabd35fb6a79dccb50a480bf6f085ff9ef0001738a4e42e917ea4283f72a9e79202ea55d6050f95968903f08cde135971f690072a16a442f792c9049c73cb41b655ef8a2dfc760535f2284dd378fc2a015ad776fe4c3b0f82081cccab0f92cb8726e33bc1b0b309439359a9bcbadb5ecebd09a6979bcd7ac342e9200a0f9520c1f98a1a31ba5241bcd25e30003e901fbedaa4df96545517013a4e4df3e0624ce8bc2588208ca473b9038bd1558e490875a491dd16c105faa355dfc6ca3d613978c610382ce2f4a5c3d39b44c3a71e29ab2b277dfbc8ea499892e70e70aaa05dffcb7a563fefac7d6aa2657b720912bfa6c91efe3fde64f92c50121e694438162dfb674f86121b23dd320ae8188bb4b1b3c3b2c9b7c007e049b8b0d0774d29d120f7926e5b7fc49a725fbaf91549a5b2169fba5da28edf5018762e5b944edb0fee84bda7ce8c029f2bd4d1ea768cde7db02974fa055a572d147bbe97f4b6e11db1b6d8ef0bd0b70788302cd196b947cf6a1c047d09e36672389ce2a653a7b2e0f1720bd1b642cc9840314765e623b9924016d5ad41d9a9b56d2d5eaf200c2c4d6d168dedc9ce929477edeb80beea9760e3ced71401aafc546341570fcbe52b388c309016efdd0d786f1450a8b9ae9482305073ffc93b20056c0def7934d0ea6963d977b0fd9a8a204e2a7aff2afc70d1e1d9bde39015dc82f6e73f02a96f1f90389a12587d17f3692df3a5fbbc6b02cad797ec5707baf99566b03d7931e93686303737e50a9dcc37fbb91b7f0f463e94991c2bcc932efa1db6f7248bac994ca5a3d5f9483c5fdeee0f409842d1d47f79d5f807686b2b2904e9e834ff01a712ad2983793ba193270c376c77a5988aa6800db1ce1183e00f48863c586c443090e9c25461ea721978fd0b3c8d7f7476f134e7917935e85a95c43b0935e3d9a1657fe82fa0f399c7eedfa7856b22181c363d98349d7c2a04de149c94aa969051a62e97d70aa8c4c4b44fe7bceb13ba9743f9f585d727a2ad47d0cb58446aa84edf568bba7aa5aa1b7cece7ba4dffb7d4f0a93408a90e1552b19b5a8c687eef8d49698e0761ee703499859672b89490e2778544da6739298312a6bf0dba60391d948b90e7c0194a0c50bd78f20501105012d1b157b533bdf4e764cad2c79c19af943e6003626bbc3fac64c01c62a694cf48f37eb2d43916a148fb4e115f018709faad754d478d8a865f0636f4c04d7ab668c660dc5d310bb98360c4e83cfef2c25bc77790101981588a719831256da5f9f2b7798ca2046941698173299821ce4f76efc9a54947b1faf9b1a91ce3ac60b81f15996d29a65de0f5034b662d6fe90929e7e47123a95ce11c5644b966314fd811103aac44148c2b46ecdcda634ecb7d88356c01579d6a7f45880212ce2a8e61e11f7d5157bc8f53d0ea1a36696e0be4125dbfb1e672dca7f73979461d275976fe3d38652b73896c98fcd6fd728489bc2af3c5d4f14706370b71bb0fa6641ecdafd4ec04d799447a01cccb687b39d20ab976bb2918a2ce4815258f45d1e2988a7176181df6f28188c2a35c0f2f1c15b46f819d911b51411a0a76fee40d1b6c89d4c23551a44f48841bb5b6746df236b14c990da8b157cec7e17f29e0574c353166f4d3a36ca3488b663168ccccd206f2af968d62d4ee64383f78d21b6c6a063dc95ce7c10db462eaffe399de1bf553836548a912a8db4974fd3c6fc31bc5ea8f993799b292b7995c29a282ad15ba71e0b1e364ac86b62e052842296a59d7b5cca27fd6e5374fe80033809137f6a7dbf3d1c94f1e44f1847e23787f8568817a3211aa925d3e0087babc83ce13dcad790fa59604330de0384dac80b9c2013d1bcdb610899cfc93f45e07c6d9ff7a5eb2ee242b8f56ba81b4c166e9870958230ec2a3fd8f54372e057fd37fa1f7b4b17fd1e40f8d79fc67371b1e69261493c00e8d49a46c04ca34d453b0b974a9543629011565ba056aee4ba93184a7bb758e525992fdf0b2dc7f4cb63cbc51e17c70ebc96fc6f8461f18e2f4f0265ddb7361914ff61e59619beb8fad338d8a311ce373f0eb3e9a2f5e983ac1e136d85a2b96abbc49d614f643a484dce5b224acb20e88365710d7b9cc240013cdc1d3b81acbb474983b6016b0f0079796ab7bb19c18272cac6c15202cf94ae1b1dcad74e4675feb196b3678c4a2e289817eee9ce5518aa42a062bb5f68af19401014d34552c859a1fe03258579a1b7f2a896b1d00dcbaa4031211e12a671349e609d9982a08b0940da18ce71349d585ab712fe0775407112063bf65d703c60ca94cb5bf1f1e387e0f1c74a8ed85d3d017e55698991d7c29810f795d4bd06befd57bc91b1d6303d8d6016a919ebf585d660ced22f557991bc04e270965aab761dbbbf223d4150b6d4f77d4ff38a0a1b5984c258ce78915f0d183bf64b2ed059a142261874c797d48c310903e6e971c5677a7ab465c6257f845577ec65e127c764c0fa28be8e74fff3b3ac4446d14af6655269ea09a11ce540b259e34f51528470068b6e82b9255e079843d22d49fd44ac55bbab96a37eac523c27ddf441e17dfb5f131fa62dfe123ebc3b8ce6d8fd71b4693ae62fed70d477d848cc90e759f43c153e3b4f4b6996d13da075931127746ca7741c04ff60c826d5cbfd1d8a7b8090e2af69861e18628cbb2b0ed766ebe82807760926c981dde04135f729925d38050d1a767d5a4db224a1a9c75f1402e73a6af7b4369d0512804655825134370bf36fd063546041a4d094fa25e377b1a8ad18db3b6e543e6ff7cccf1d1567fbbb02ebe50c94ce6165fa53d8889a99730c65388dbb5cd758a92ae7d15fb1cba305ddb2f5320c4bebbfae6461a5b45aac8a932ade12efcd4a0afb62370e36d50099f9cb30202022b61b47264873a2084c26bc48a99d3db9f83311f13a38bbb1f51c571adb5e64015f4349b48b8c183d8eafd91da9df408fb163844b37d84e26da394ed2a5bc92ea34b9572ed9b3db9160d25ef3d058fcd1be335c928fa24527bf4292367fc26379fe115fda3c58474bb214987ecc7ebe9fc95b02ef778a7686802cf83ddabc5bef2223dbe466ba71ca494fe09bbeea8348048de445bfbc6ed048a147d7047954c1a745ec9814c7b6ef8d92c3066ed7d994d254aa0b8b58961fd77c3d7973cc2c51db1f61be175df673a4fd3957556e9d6c91fa75f1e9ad45a157706421ca3f928c15e5094191eb4ba7507965ac84258785dca8c491d4f7ff5fd0ca46524c1b5340831e0279b22a9840f15a1ebc23ff99b182c334821c94a17362ed68e2611e65d48e84641af421212d765c96d2ce41248a80e498c1a1f16e3f05f370d345676db48ea41630907eaa981d408cb7bcae5daecf746cb11129042d16d0d8ea6253112130c5cc9f65bdec426c6c984de21566e125514e87b7319928c9ad73ab9e72abbdb207173e7c5e6374f8349633230aa9ccc399fb23b0f7a2cabe86641fd60e35ecded6cb84bb53ce9545b548bcf40878b58acd1ab8953251326f1d74736ff4f6f2f65f10d61a62be82070083b3839a95ad2fbc6097b640ef53abaa0a53cdd2c9ea1fb59b1fb948c2488892db5bd600dc979f952c5fc3e32082b344e93510d885c929ad3cbfb7b76fb1077ee2218dba7091af7bebd196c79294fbf34603c8b8cdfb167c170c0ab72e1580c726f69ebdf5bd7eb86c367aa6ecc432540e8c05da8c0f492f48fa66554b1bca981d4ee53535b8bf89074d3fc653ab32160cbcd8dcd113ca179bb525b4325053d21982879f0c095542b706d8206fe15fc48673ab4717c5246f05d913cf6e28d8a2cb1d8adf015c2036534f17ca853ead46063cefb6f4dd851ac8d5d78b89039d1d7a3577d3e0f3203b695a27007b8ed8d7ecc77f578277c6e9a75611dd7e0446079b40f12e94bf4df94f876190e93faf003d5e70de89b8d10aa0c652270b39a38c46c93e511bce7803fb5adc27190ae9d06ae0d52bc283dc8c2e402779d2ad15764a570de96d571dd4b8c8174ed7462d45f856eeb90c4cb1113a032e8c3a3791354a9b7265245ff58b6e00ba50588686e4e8f035304a0ba388fafe22c64e3c3e970093b18c6069b80dc01cf166b41ce511eb6a6a3875b9d7c102b978d707440550d330bb728e53d6fe99b849c728943ebcb57aa0ec749b8eba5dac28f94ee53ef59754b4d0d197a9bd30a6cb810f741b48751085f89390003767e3cdc263a27f3afec2ea4d65c452f2ccdaffdbb89fd37507dc8989f510b9ecdbce181343e7fa7025cedde539a8c815705f88ab0547b1bab33ab39dec47c76538cbe6c404e1734534616919aa4c52cc2e50bef4f2c9c008ac1dd7743dfaa44388b7aeaabc5ec0328c5fe94ee04d51f745c47379ab42ca89e9ba4c04db63b72daad22ad6d0de46b1f97bf184673b0811a8f0431ee0e6e29c89186e3b50431590ab27487c98e0186240bff111c8eaa0cfe8bde14348018027cd116b36568a16f5cc77d46017bc9bc8337825dbca2534c29399810b6b03374b549be8896da4d0ee0ba46f78dca85b65b2543896a9f253fbf1d85214bd803a4d829c2f41e01ac6f2b797fb179cda0c39975a45bab0531a0784a7aa216d96b98bf7d69fbc6030dbeda7f18e312c0c72edf88e7b96934a5271f3b3ef88f5a2ab80e4d015f4ab5e17cdef842ff6d3dee97dd73e19b5fa0c7e1bb44f956b03b227798124175df630671aa206db47f78fe73a3d24f0b8675e360e9eafb729389535acfa0cb66bc5a737f94e56a1f17df24a66cadbe9e0c3295d06b50b6313157fdf8410695a7a3c3846a9d8fa184f5883722865c7698a09c94710eb874e628782b1834215eab495a577cf0f0f37b3f05e77cb7edbfad88e735ecfbde4c5aba74401941f213231277b366ec6c126bc42fd3882e7", 0x1000}, {&(0x7f00000037c0)="e962303eeec5f4c8fe628c44", 0xc}, {&(0x7f0000003800)="83a14d7b4df9139ea151fc183be033298faa9827870fa9fdaf3382ecf7a30293bb7387141dc1fd7eb16573e68cbbb2482d10372e75a5f1b8b6c66bc92868997bf0312104b01d1bad3d6e349843d598a1e78c551b4873ba063e6aef275f8d5c37ad45fa43e6fe8211f90e82ec263c6c717d22482333f4a1e294e6cb05ee17c6ade6c8214a12", 0x85}], 0x4, &(0x7f0000003cc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r5, r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r10, r0]}}], 0x78, 0x4004084}}, {{&(0x7f0000003d40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003dc0)="6707d31a1c024738fdd778362fa9a87bd6dee69aff52c84336f5a305bbbcaa7f7fc26aa0f6f3af4a99972a7139dfeb13347406d54122b23d6eaba3ff9a4c571305fbd0166a7207636a8be3d3b3da65d977593889154dff8a04e00a1b970fdd63b599c90f5a9a07e2edfc8ef2e5112c73428f47451a9da2c14724f9f3788f4ad8c58fb1596d636a41a3fa04d817161169ddfe4be7ed1fa60129b12618031f14ff0edd67f7eb6626640224d2715ed2170926118167d6e3624d0994841929da567ddc1f0525056fccc04c8e8a6f157dc3c50b5a09f27554ca9645093909dc74dbbbdc3999796a", 0xe5}, {&(0x7f0000003ec0)="f8838e6235cbb0587309aded36ff8982cc7759f36a74cf6532c637c5ac8139e07467786d258ca5c5f760155607423fb3a97bfac159639d495d6ac5b29fee698ff01cbec54fcd9861427ad29ea6506e873b89acb82de138c116dcad35823fc330b644d32e8d2f1df2e46ef059db7d5880e5705372d929d4fdc88271501434933cc6ab64b82767d67695c15910c5987c3347b8fe758fa2a4", 0x97}, {&(0x7f0000003f80)="85032d7b236ca01d613e94813232935b19a04f67737ae73e673565f6761b4ae3a06f81afba", 0x25}, {&(0x7f0000003fc0)="02240bdf854b419b867ebcb86a6e5d4f93148ec2ddf2600db4538abc30aeb888ae45a61dd93a87f08bd47024df959daa6f32babd3305cef60ea6b2b17c6ed3fcdb192f168ef0247198bb4ae6fdc2c71d6512802b542088dec7556e50df8d5c4d78ac3a3d533f37d5e0afee6b3b0df75b68d870ee194e6876efdd64", 0x7b}, {&(0x7f0000004040)="dc7b28f8f72387201d6c0c1e6b9d6cfcec314dd9588d9364a0fb18", 0x1b}, {&(0x7f0000004080)="7cfe54d9d7d813d80dbf8eec61d0e2067c7e6329257ad5d01584fab7890d5c22b656585da6821b81a4aadbaf1c71a3dd78ca326ab02075d2e756390061500374e216ca712937557ab6d92302fbc625e0b89118431dfb8beb95382d6371831356cadd06cb111b0fcbd0ee74826db6bd8039bedc0d969a33e8423ae40aabe119c39b586aec427826ba352081a853cef0", 0x8f}], 0x6, &(0x7f0000004340)=[@rights={{0x28, 0x1, 0x1, [r5, r3, r3, r8, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x18, 0x1, 0x1, [r10, r8]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r8, r0, r3, 0xffffffffffffffff]}}], 0xc0, 0x4008000}}], 0x4, 0x4000041) 546.372559ms ago: executing program 5 (id=3307): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x9c3fa077fa966179, 0x3f, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 438.606825ms ago: executing program 3 (id=3308): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb000000}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x6, 0xffffffffffffffff}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 438.369635ms ago: executing program 7 (id=3309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x4888}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 362.761059ms ago: executing program 1 (id=3310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 356.819299ms ago: executing program 0 (id=3311): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x0, 0x0) dup2(r1, r2) 286.384894ms ago: executing program 3 (id=3312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x1f00}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 285.288424ms ago: executing program 5 (id=3313): r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 284.947734ms ago: executing program 7 (id=3314): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r5 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) vmsplice(r6, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) close_range(r6, r5, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xe, 0x3f}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 275.761014ms ago: executing program 1 (id=3315): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x10, 0x1ff, 0x2, 0x29d3}, 0x80000006, 0x0, 0xfffffffd, 0x5, 0x5, 0x0, 0x1, 0x5, 0x4, 0x420, {0x101, 0xffffffff, 0x5, 0x0, 0x2, 0x9}}}}]}, 0x78}}, 0x20040084) 244.440216ms ago: executing program 5 (id=3316): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@bh}, {@nogrpid}, {@grpjquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") lchown(&(0x7f0000000140)='./file1\x00', 0xee00, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x48001) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 114.533523ms ago: executing program 0 (id=3317): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000100037040400"/20, @ANYRES32=0x0, @ANYBLOB="87002100841c0500200012800f000100626f6e645f736c61766500000c000580060005000000000214003500626f6e645f736c6176655f30"], 0x54}, 0x1, 0x0, 0x0, 0x9005}, 0x0) 108.350604ms ago: executing program 1 (id=3318): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000001000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 76.947176ms ago: executing program 0 (id=3319): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x5, 0x5, 0x34, @private2, @private0, 0x40, 0x10, 0x8000, 0x80000001}}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 0s ago: executing program 5 (id=3320): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x30000000) kernel console output (not intermixed with test programs): 2237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.042369][T12237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.076406][T12240] loop4: detected capacity change from 0 to 1024 [ 222.122872][T12240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.232956][ T28] audit: type=1400 audit(1771026958.193:2515): avc: denied { rename } for pid=12239 comm="syz.4.2731" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 222.277292][T12246] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 222.415547][ T5158] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 222.423298][ T28] audit: type=1400 audit(1771026958.383:2516): avc: denied { unlink } for pid=5158 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 222.452674][ T5158] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 222.610735][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.754902][T12278] loop3: detected capacity change from 0 to 256 [ 223.009126][T12281] SET target dimension over the limit! [ 223.152102][T12264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.160656][T12264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.328226][ T28] audit: type=1400 audit(1771026958.793:2517): avc: denied { getopt } for pid=12274 comm="syz.3.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.408495][ T28] audit: type=1400 audit(1771026959.373:2518): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 223.441347][T12288] FAULT_INJECTION: forcing a failure. [ 223.441347][T12288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.469566][T12288] CPU: 1 UID: 0 PID: 12288 Comm: syz.3.2748 Tainted: G W syzkaller #0 PREEMPT(full) [ 223.469599][T12288] Tainted: [W]=WARN [ 223.469606][T12288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 223.469636][T12288] Call Trace: [ 223.469643][T12288] [ 223.469654][T12288] __dump_stack+0x1d/0x30 [ 223.469724][T12288] dump_stack_lvl+0x95/0xd0 [ 223.469759][T12288] dump_stack+0x15/0x1b [ 223.469783][T12288] should_fail_ex+0x263/0x280 [ 223.469808][T12288] should_fail+0xb/0x20 [ 223.469832][T12288] should_fail_usercopy+0x1a/0x20 [ 223.469907][T12288] _copy_from_user+0x1c/0xb0 [ 223.469941][T12288] simple_transaction_get+0xe2/0x120 [ 223.469983][T12288] selinux_transaction_write+0x9d/0x110 [ 223.470011][T12288] ? __pfx_selinux_transaction_write+0x10/0x10 [ 223.470103][T12288] vfs_write+0x269/0x9f0 [ 223.470134][T12288] ? __rcu_read_unlock+0x4e/0x70 [ 223.470194][T12288] ? __fget_files+0x184/0x1c0 [ 223.470276][T12288] ? mutex_lock+0x57/0x90 [ 223.470302][T12288] ksys_write+0xdc/0x1a0 [ 223.470352][T12288] __x64_sys_write+0x40/0x50 [ 223.470385][T12288] x64_sys_call+0x27e1/0x3020 [ 223.470418][T12288] do_syscall_64+0x12c/0x370 [ 223.470507][T12288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.470533][T12288] RIP: 0033:0x7f2099bdbf79 [ 223.470552][T12288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.470570][T12288] RSP: 002b:00007f2098637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.470601][T12288] RAX: ffffffffffffffda RBX: 00007f2099e55fa0 RCX: 00007f2099bdbf79 [ 223.470614][T12288] RDX: 0000000000000056 RSI: 0000200000001a80 RDI: 0000000000000004 [ 223.470629][T12288] RBP: 00007f2098637090 R08: 0000000000000000 R09: 0000000000000000 [ 223.470645][T12288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.470659][T12288] R13: 00007f2099e56038 R14: 00007f2099e55fa0 R15: 00007ffd721cc828 [ 223.470692][T12288] [ 223.671747][ T4154] bridge_slave_1: left allmulticast mode [ 223.678629][ T4154] bridge_slave_1: left promiscuous mode [ 223.685811][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.695740][ T4154] bridge_slave_0: left allmulticast mode [ 223.701424][ T4154] bridge_slave_0: left promiscuous mode [ 223.708362][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.829034][ T4154] bridge0 (unregistering): left allmulticast mode [ 223.879140][T12304] x_tables: duplicate underflow at hook 4 [ 223.918318][T12309] __nla_validate_parse: 10 callbacks suppressed [ 223.918335][T12309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2754'. [ 223.940054][T12312] program syz.5.2752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.979894][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.993164][ T4154] bond_slave_0: left allmulticast mode [ 224.004284][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.016782][ T4154] bond_slave_1: left allmulticast mode [ 224.022595][ T4154] bond0 (unregistering): Released all slaves [ 224.031613][ T4154] bond1 (unregistering): Released all slaves [ 224.041416][ T4154] bond2 (unregistering): Released all slaves [ 224.055685][ T4154] bond3 (unregistering): Released all slaves [ 224.115849][T12320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2758'. [ 224.145096][ T4154] tipc: Left network mode [ 224.367732][T12324] Set syz1 is full, maxelem 65536 reached [ 224.396572][ T4154] hsr_slave_0: left promiscuous mode [ 224.445226][ T4154] hsr_slave_1: left promiscuous mode [ 224.575143][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.594002][ T3418] IPVS: starting estimator thread 0... [ 224.594611][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.704014][T12352] IPVS: using max 2256 ests per chain, 112800 per kthread [ 224.717980][T12357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2764'. [ 224.720483][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'. [ 224.823176][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 224.833285][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 224.940981][T12361] loop3: detected capacity change from 0 to 128 [ 224.955874][T12361] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.956035][T12361] ext4 filesystem being mounted at /566/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 225.015211][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.065855][T12370] loop3: detected capacity change from 0 to 512 [ 225.066107][T12370] EXT4-fs: Ignoring removed bh option [ 225.066134][T12370] EXT4-fs: inline encryption not supported [ 225.066686][T12370] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 225.081340][T12279] chnl_net:caif_netlink_parms(): no params data found [ 225.089737][T12370] EXT4-fs error (device loop3): ext4_quota_enable:7190: comm syz.3.2768: Bad quota inum: 15, type: 1 [ 225.089823][T12370] loop3: lost filesystem error report for type 5 error -117 [ 225.089920][T12370] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=15). Please run e2fsck to fix. [ 225.090281][T12370] EXT4-fs (loop3): mount failed [ 225.458385][T12390] Set syz1 is full, maxelem 65536 reached [ 225.476345][ T4154] IPVS: stop unused estimator thread 0... [ 225.482383][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.489859][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.498232][T12279] bridge_slave_0: entered allmulticast mode [ 225.505073][T12279] bridge_slave_0: entered promiscuous mode [ 225.522384][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.552439][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.576909][T12279] bridge_slave_1: entered allmulticast mode [ 225.588221][T12279] bridge_slave_1: entered promiscuous mode [ 225.616261][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'. [ 225.656661][T12408] loop3: detected capacity change from 0 to 512 [ 225.670696][T12408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.691951][T12419] loop5: detected capacity change from 0 to 512 [ 225.698941][T12408] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.719272][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.735642][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.764810][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.784369][T12419] ext4: Unknown parameter 'mask' [ 225.808536][T12424] loop3: detected capacity change from 0 to 1024 [ 225.833024][T12419] loop5: detected capacity change from 0 to 1024 [ 225.862297][T12279] team0: Port device team_slave_0 added [ 225.869019][T12424] EXT4-fs: Ignoring removed nobh option [ 225.876499][T12419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.890606][T12279] team0: Port device team_slave_1 added [ 225.903075][T12424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.913477][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2774'. [ 225.923873][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 225.923888][ T28] audit: type=1400 audit(1771026961.893:2540): avc: denied { read } for pid=12413 comm="syz.5.2774" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 225.959045][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.967289][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.994382][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.015797][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.023052][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.050783][T12424] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.063627][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2774'. [ 226.087683][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.194895][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'. [ 226.205502][T12279] hsr_slave_0: entered promiscuous mode [ 226.234009][T12279] hsr_slave_1: entered promiscuous mode [ 226.240768][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.244111][T12279] debugfs: 'hsr0' already exists in 'hsr' [ 226.284370][T12279] Cannot create hsr debugfs directory [ 226.298699][T12438] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=12438 comm=syz.5.2778 [ 226.413801][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2779'. [ 226.695411][T12279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.733913][T12279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.766381][T12279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.783793][T12466] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2783'. [ 226.814737][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.836227][T12279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.929386][T12474] loop3: detected capacity change from 0 to 512 [ 226.935888][ T28] audit: type=1400 audit(1771026962.893:2541): avc: denied { setattr } for pid=12473 comm="syz.3.2782" name="RAWv6" dev="sockfs" ino=38253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 227.022759][T12474] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 227.118347][T12474] EXT4-fs (loop3): mount failed [ 227.209316][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.250482][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.277577][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.284824][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.321005][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.328267][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.514742][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.654144][ T4147] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.683917][ T4147] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.692765][ T4147] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.714538][ T4147] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.795832][ T28] audit: type=1400 audit(1771026963.763:2542): avc: denied { read } for pid=12526 comm="syz.5.2792" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 227.837635][T12279] veth0_vlan: entered promiscuous mode [ 227.870209][ T28] audit: type=1400 audit(1771026963.793:2543): avc: denied { open } for pid=12526 comm="syz.5.2792" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 227.889687][T12279] veth1_vlan: entered promiscuous mode [ 227.926338][ T28] audit: type=1400 audit(1771026963.883:2544): avc: denied { ioctl } for pid=12526 comm="syz.5.2792" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 227.979227][T12279] veth0_macvtap: entered promiscuous mode [ 228.002663][T12279] veth1_macvtap: entered promiscuous mode [ 228.036590][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.051130][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.079392][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.091163][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.130823][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.160453][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.255118][ T28] audit: type=1400 audit(1771026964.223:2545): avc: denied { create } for pid=12553 comm="syz.3.2801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 228.263012][T12558] syzkaller1: entered promiscuous mode [ 228.282397][T12558] syzkaller1: entered allmulticast mode [ 228.293727][ T28] audit: type=1400 audit(1771026964.223:2546): avc: denied { create } for pid=12553 comm="syz.3.2801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 228.316859][ T28] audit: type=1400 audit(1771026964.223:2547): avc: denied { bind } for pid=12553 comm="syz.3.2801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 228.339687][ T28] audit: type=1400 audit(1771026964.223:2548): avc: denied { name_bind } for pid=12553 comm="syz.3.2801" src=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 228.364365][ T28] audit: type=1400 audit(1771026964.223:2549): avc: denied { node_bind } for pid=12553 comm="syz.3.2801" src=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 228.409487][T12565] bond0: (slave bond_slave_0): Releasing backup interface [ 228.578155][T12577] loop5: detected capacity change from 0 to 512 [ 228.609045][T12577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.624199][T12577] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.698853][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.810338][ T5700] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.838315][T12570] chnl_net:caif_netlink_parms(): no params data found [ 228.891773][T12570] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.899118][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.906706][T12570] bridge_slave_0: entered allmulticast mode [ 228.913412][T12570] bridge_slave_0: entered promiscuous mode [ 228.920444][T12570] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.927887][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.935315][T12570] bridge_slave_1: entered allmulticast mode [ 228.942003][T12570] bridge_slave_1: entered promiscuous mode [ 228.963648][T12570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.974538][T12570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.996586][T12570] team0: Port device team_slave_0 added [ 229.003668][T12570] team0: Port device team_slave_1 added [ 229.026746][T12570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.034258][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.060534][T12570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.083478][T12570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.090503][T12570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.116993][T12570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.170728][T12570] hsr_slave_0: entered promiscuous mode [ 229.177335][T12570] hsr_slave_1: entered promiscuous mode [ 229.183749][T12570] debugfs: 'hsr0' already exists in 'hsr' [ 229.189779][T12570] Cannot create hsr debugfs directory [ 229.341530][ T3418] hid_parser_main: 4086 callbacks suppressed [ 229.341552][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.355729][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.363323][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.370919][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.378550][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.386095][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.393931][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.401526][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.411668][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.419532][ T3418] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 229.473064][ T3418] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 229.529836][T12616] fido_id[12616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 229.550570][T12618] __nla_validate_parse: 8 callbacks suppressed [ 229.550591][T12618] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2819'. [ 229.592106][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2819'. [ 229.605490][T12570] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.675852][T12570] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.703605][T12570] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.717979][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2821'. [ 229.720632][T12570] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.737704][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2818'. [ 229.785191][T12620] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.794697][T12620] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.898144][T12630] vlan3: entered allmulticast mode [ 229.904128][T12630] bond0: entered allmulticast mode [ 229.909582][T12630] bond_slave_0: entered allmulticast mode [ 229.915743][T12630] bond_slave_1: entered allmulticast mode [ 229.923078][T12630] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2822'. [ 229.976353][T12630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.011741][T12630] bond_slave_0: left allmulticast mode [ 230.106819][T12630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.128478][T12640] netlink: 'syz.3.2825': attribute type 7 has an invalid length. [ 230.138009][T12630] bond_slave_1: left allmulticast mode [ 230.138048][T12640] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2825'. [ 230.156762][T12630] bond0 (unregistering): Released all slaves [ 230.229057][T12570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.250944][T12570] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.264373][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.271565][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.296888][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.304059][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.336294][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'. [ 230.447431][ T3435] hid-generic 0004:0000:0007.0006: hidraw0: HID v0.04 Device [syz1] on syz0 [ 230.481124][T12653] loop6: detected capacity change from 0 to 8192 [ 230.571285][T12570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.735283][T12673] wireguard0: entered promiscuous mode [ 230.741053][T12673] wireguard0: entered allmulticast mode [ 230.760816][T12570] veth0_vlan: entered promiscuous mode [ 230.770483][T12570] veth1_vlan: entered promiscuous mode [ 230.795223][T12570] veth0_macvtap: entered promiscuous mode [ 230.805990][T12570] veth1_macvtap: entered promiscuous mode [ 230.820722][T12570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.880668][T12570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.918595][ T4154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.933874][ T4164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.944649][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 230.944666][ T28] audit: type=1400 audit(1771026966.913:2610): avc: denied { write } for pid=12677 comm="syz.6.2834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.978004][ T4164] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.985747][ T28] audit: type=1400 audit(1771026966.923:2611): avc: denied { execmem } for pid=12679 comm="syz.5.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 231.005092][ T4164] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.024376][ T28] audit: type=1400 audit(1771026966.993:2612): avc: denied { write } for pid=12681 comm="syz.5.2836" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 231.069255][ T28] audit: type=1400 audit(1771026967.023:2613): avc: denied { mounton } for pid=12570 comm="syz-executor" path="/root/syzkaller.NpaTdy/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 231.097234][ T28] audit: type=1400 audit(1771026967.023:2614): avc: denied { mount } for pid=12570 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 231.121110][ T28] audit: type=1400 audit(1771026967.023:2615): avc: denied { mounton } for pid=12570 comm="syz-executor" path="/root/syzkaller.NpaTdy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 231.156035][ T28] audit: type=1400 audit(1771026967.023:2616): avc: denied { mount } for pid=12570 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 231.194546][ T28] audit: type=1400 audit(1771026967.023:2617): avc: denied { mounton } for pid=12570 comm="syz-executor" path="/root/syzkaller.NpaTdy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 231.224059][T12688] loop1: detected capacity change from 0 to 1024 [ 231.232315][T12688] EXT4-fs: Ignoring removed orlov option [ 231.240526][ T28] audit: type=1400 audit(1771026967.023:2618): avc: denied { mounton } for pid=12570 comm="syz-executor" path="/root/syzkaller.NpaTdy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 231.284515][ T28] audit: type=1400 audit(1771026967.033:2619): avc: denied { unmount } for pid=12570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 231.314357][T12688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.360706][T12570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.371891][T12697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2840'. [ 231.490909][T12708] loop1: detected capacity change from 0 to 4096 [ 231.496933][T12706] loop6: detected capacity change from 0 to 512 [ 231.522985][T12710] loop3: detected capacity change from 0 to 128 [ 231.533922][T12706] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 231.595500][T12714] loop1: detected capacity change from 0 to 512 [ 231.595750][T12710] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.616800][T12710] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.638971][T12706] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 231.661691][T12706] EXT4-fs (loop6): 1 truncate cleaned up [ 231.668764][T12714] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2846: invalid indirect mapped block 4294967295 (level 1) [ 231.684000][T12714] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.688429][T12714] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2846: invalid indirect mapped block 4294967295 (level 1) [ 231.689051][T12706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.703692][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 231.714497][T12714] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.724340][ C1] EXT4-fs (loop1): initial error at time 1771026967: ext4_free_branches:1023: inode 11 [ 231.750876][ C1] EXT4-fs (loop1): last error at time 1771026967: ext4_free_branches:1023 [ 231.751057][T12714] EXT4-fs (loop1): 2 truncates cleaned up [ 231.751218][ C1] : inode 11 [ 231.780926][T12714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.806090][ T3310] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.078639][T12724] Set syz1 is full, maxelem 65536 reached [ 232.154513][T12733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2852'. [ 232.218636][T12279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.242221][T12745] loop6: detected capacity change from 0 to 128 [ 232.255082][T12745] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.282340][T12745] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.310547][T12279] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.436422][T12570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.583071][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 232.834176][T12738] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.841569][T12738] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.397107][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.471944][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.902767][T12738] wireguard0: left promiscuous mode [ 233.908110][T12738] wireguard0: left allmulticast mode [ 233.943589][T12762] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.950825][T12762] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.987850][ T4164] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.013980][ T4164] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.035442][ T4164] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.046077][ T4164] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.065259][T12814] macsec1: entered allmulticast mode [ 234.070660][T12814] bridge0: entered allmulticast mode [ 234.099791][ T63] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.149795][ T63] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.184704][ T30] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.232855][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.428858][T12798] chnl_net:caif_netlink_parms(): no params data found [ 234.459186][T12853] loop5: detected capacity change from 0 to 1024 [ 234.496782][T12853] EXT4-fs: Ignoring removed orlov option [ 234.525597][T12853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.552994][T12798] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.560220][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.567658][T12798] bridge_slave_0: entered allmulticast mode [ 234.574697][T12798] bridge_slave_0: entered promiscuous mode [ 234.581867][T12798] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.589167][T12798] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.596553][T12798] bridge_slave_1: entered allmulticast mode [ 234.604756][T12866] __nla_validate_parse: 5 callbacks suppressed [ 234.604771][T12866] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2888'. [ 234.608595][T12798] bridge_slave_1: entered promiscuous mode [ 234.654790][T12861] netlink: 'syz.6.2887': attribute type 10 has an invalid length. [ 234.658633][T12798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.688632][T12861] team0: Port device dummy0 added [ 234.745767][T12867] netlink: 'syz.6.2887': attribute type 10 has an invalid length. [ 234.757635][T12798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.816552][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.820117][T12882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2894'. [ 234.839258][T12798] team0: Port device team_slave_0 added [ 234.847229][T12798] team0: Port device team_slave_1 added [ 234.866238][T12798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.873401][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.906826][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2894'. [ 234.924574][T12798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.935919][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 234.985316][T12798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.008521][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.049732][T12798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.132076][T12903] FAULT_INJECTION: forcing a failure. [ 235.132076][T12903] name failslab, interval 1, probability 0, space 0, times 0 [ 235.146581][T12903] CPU: 1 UID: 0 PID: 12903 Comm: syz.5.2901 Tainted: G W syzkaller #0 PREEMPT(full) [ 235.146692][T12903] Tainted: [W]=WARN [ 235.146702][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 235.146718][T12903] Call Trace: [ 235.146728][T12903] [ 235.146736][T12903] __dump_stack+0x1d/0x30 [ 235.146768][T12903] dump_stack_lvl+0x95/0xd0 [ 235.146867][T12903] dump_stack+0x15/0x1b [ 235.146945][T12903] should_fail_ex+0x263/0x280 [ 235.146996][T12903] should_failslab+0x8c/0xb0 [ 235.147038][T12903] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 235.147071][T12903] ? __alloc_skb+0x2d6/0x690 [ 235.147190][T12903] __alloc_skb+0x2d6/0x690 [ 235.147225][T12903] ? __alloc_skb+0x200/0x690 [ 235.147305][T12903] netlink_alloc_large_skb+0xbf/0xf0 [ 235.147417][T12903] netlink_sendmsg+0x40c/0x6f0 [ 235.147441][T12903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 235.147467][T12903] ____sys_sendmsg+0x5af/0x600 [ 235.147502][T12903] ___sys_sendmsg+0x195/0x1e0 [ 235.147540][T12903] __x64_sys_sendmsg+0xd4/0x160 [ 235.147565][T12903] x64_sys_call+0x194c/0x3020 [ 235.147604][T12903] do_syscall_64+0x12c/0x370 [ 235.147641][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.147679][T12903] RIP: 0033:0x7f0de63cbf79 [ 235.147696][T12903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.147714][T12903] RSP: 002b:00007f0de4e27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.147733][T12903] RAX: ffffffffffffffda RBX: 00007f0de6645fa0 RCX: 00007f0de63cbf79 [ 235.147751][T12903] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000006 [ 235.147768][T12903] RBP: 00007f0de4e27090 R08: 0000000000000000 R09: 0000000000000000 [ 235.147871][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.147883][T12903] R13: 00007f0de6646038 R14: 00007f0de6645fa0 R15: 00007ffe517284f8 [ 235.147903][T12903] [ 235.285003][T12914] hub 8-0:1.0: USB hub found [ 235.353324][T12914] hub 8-0:1.0: 8 ports detected [ 235.515019][ T4147] bond2 (unregistering): (slave gretap1): Releasing active interface [ 235.730616][ T4147] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 235.745066][ T4147] bond0 (unregistering): Released all slaves [ 235.758759][ T4147] bond1 (unregistering): Released all slaves [ 235.771239][ T4147] bond2 (unregistering): Released all slaves [ 235.785313][ T4147] bond3 (unregistering): Released all slaves [ 235.797943][ T4147] bond4 (unregistering): Released all slaves [ 235.892850][T12798] hsr_slave_0: entered promiscuous mode [ 235.915435][T12798] hsr_slave_1: entered promiscuous mode [ 235.923427][T12798] debugfs: 'hsr0' already exists in 'hsr' [ 235.931220][T12798] Cannot create hsr debugfs directory [ 236.001615][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 236.001635][ T28] audit: type=1400 audit(1771026971.963:2726): avc: denied { create } for pid=12929 comm="syz.1.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.028467][ T4147] hsr_slave_0: left promiscuous mode [ 236.034645][ T28] audit: type=1400 audit(1771026972.003:2727): avc: denied { connect } for pid=12929 comm="syz.1.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.047438][T12932] FAULT_INJECTION: forcing a failure. [ 236.047438][T12932] name failslab, interval 1, probability 0, space 0, times 0 [ 236.070030][T12932] CPU: 0 UID: 0 PID: 12932 Comm: syz.0.2905 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.070068][T12932] Tainted: [W]=WARN [ 236.070077][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 236.070165][T12932] Call Trace: [ 236.070172][T12932] [ 236.070179][T12932] __dump_stack+0x1d/0x30 [ 236.070206][T12932] dump_stack_lvl+0x95/0xd0 [ 236.070235][T12932] dump_stack+0x15/0x1b [ 236.070262][T12932] should_fail_ex+0x263/0x280 [ 236.070314][T12932] should_failslab+0x8c/0xb0 [ 236.070387][T12932] __kmalloc_node_noprof+0xc8/0x560 [ 236.070499][T12932] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 236.070562][T12932] __vmalloc_node_range_noprof+0x428/0x12b0 [ 236.070585][T12932] ? selinux_file_open+0x2e6/0x330 [ 236.070629][T12932] ? __rcu_read_unlock+0x4e/0x70 [ 236.070690][T12932] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 236.070729][T12932] __vmalloc_noprof+0xa4/0xf0 [ 236.070749][T12932] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 236.070784][T12932] bpf_prog_alloc_no_stats+0x47/0x390 [ 236.070827][T12932] ? bpf_prog_alloc+0x2a/0x150 [ 236.070856][T12932] bpf_prog_alloc+0x3c/0x150 [ 236.070961][T12932] bpf_prog_load+0x506/0x1140 [ 236.071037][T12932] ? security_bpf+0x2b/0x90 [ 236.071143][T12932] __sys_bpf+0x505/0x7e0 [ 236.071191][T12932] __x64_sys_bpf+0x41/0x50 [ 236.071220][T12932] x64_sys_call+0x10cb/0x3020 [ 236.071255][T12932] do_syscall_64+0x12c/0x370 [ 236.071291][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.071401][T12932] RIP: 0033:0x7fd422e0bf79 [ 236.071422][T12932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.071445][T12932] RSP: 002b:00007fd421867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.071471][T12932] RAX: ffffffffffffffda RBX: 00007fd423085fa0 RCX: 00007fd422e0bf79 [ 236.071488][T12932] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 236.071517][T12932] RBP: 00007fd421867090 R08: 0000000000000000 R09: 0000000000000000 [ 236.071535][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.071547][T12932] R13: 00007fd423086038 R14: 00007fd423085fa0 R15: 00007fff5a2382b8 [ 236.071572][T12932] [ 236.071583][T12932] syz.0.2905: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 236.225152][T12938] loop6: detected capacity change from 0 to 1024 [ 236.278673][T12932] ,cpuset=syz0,mems_allowed=0 [ 236.323160][T12932] CPU: 1 UID: 0 PID: 12932 Comm: syz.0.2905 Tainted: G W syzkaller #0 PREEMPT(full) [ 236.323196][T12932] Tainted: [W]=WARN [ 236.323203][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 236.323262][T12932] Call Trace: [ 236.323269][T12932] [ 236.323320][T12932] __dump_stack+0x1d/0x30 [ 236.323347][T12932] dump_stack_lvl+0x95/0xd0 [ 236.323370][T12932] dump_stack+0x15/0x1b [ 236.323421][T12932] warn_alloc+0x145/0x1c0 [ 236.323452][T12932] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 236.323480][T12932] ? selinux_file_open+0x2e6/0x330 [ 236.323521][T12932] ? __rcu_read_unlock+0x4e/0x70 [ 236.323551][T12932] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 236.323596][T12932] __vmalloc_noprof+0xa4/0xf0 [ 236.323616][T12932] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 236.323646][T12932] bpf_prog_alloc_no_stats+0x47/0x390 [ 236.323682][T12932] ? bpf_prog_alloc+0x2a/0x150 [ 236.323711][T12932] bpf_prog_alloc+0x3c/0x150 [ 236.323741][T12932] bpf_prog_load+0x506/0x1140 [ 236.323893][T12932] ? security_bpf+0x2b/0x90 [ 236.323954][T12932] __sys_bpf+0x505/0x7e0 [ 236.324001][T12932] __x64_sys_bpf+0x41/0x50 [ 236.324035][T12932] x64_sys_call+0x10cb/0x3020 [ 236.324139][T12932] do_syscall_64+0x12c/0x370 [ 236.324171][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.324198][T12932] RIP: 0033:0x7fd422e0bf79 [ 236.324224][T12932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.324255][T12932] RSP: 002b:00007fd421867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.324277][T12932] RAX: ffffffffffffffda RBX: 00007fd423085fa0 RCX: 00007fd422e0bf79 [ 236.324291][T12932] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 236.324303][T12932] RBP: 00007fd421867090 R08: 0000000000000000 R09: 0000000000000000 [ 236.324354][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.324368][T12932] R13: 00007fd423086038 R14: 00007fd423085fa0 R15: 00007fff5a2382b8 [ 236.324393][T12932] [ 236.324463][T12932] Mem-Info: [ 236.445838][T12938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 236.500904][T12932] active_anon:9268 inactive_anon:1 isolated_anon:0 [ 236.500904][T12932] active_file:19954 inactive_file:6947 isolated_file:0 [ 236.500904][T12932] unevictable:0 dirty:315 writeback:0 [ 236.500904][T12932] slab_reclaimable:3883 slab_unreclaimable:25289 [ 236.500904][T12932] mapped:29844 shmem:492 pagetables:4051 [ 236.500904][T12932] sec_pagetables:0 bounce:0 [ 236.500904][T12932] kernel_misc_reclaimable:0 [ 236.500904][T12932] free:1784149 free_pcp:5288 free_cma:0 [ 236.533119][T12938] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.590521][T12932] Node 0 active_anon:37188kB inactive_anon:4kB active_file:79816kB inactive_file:27788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119376kB dirty:1260kB writeback:0kB shmem:1968kB kernel_stack:4752kB pagetables:16320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 236.636357][T12932] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.667150][T12932] lowmem_reserve[]: 0 2879 7858 7858 [ 236.672614][T12932] Node 0 DMA32 free:2945092kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948616kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 236.710414][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2908'. [ 236.711398][T12932] lowmem_reserve[]: 0 0 4978 4978 [ 236.749322][T12932] Node 0 Normal free:4176168kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37172kB inactive_anon:4kB active_file:79816kB inactive_file:27788kB unevictable:0kB writepending:1268kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:17392kB local_pcp:13560kB free_cma:0kB [ 236.785035][T12932] lowmem_reserve[]: 0 0 0 0 [ 236.789927][T12932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 236.803884][ T28] audit: type=1400 audit(1771026972.753:2728): avc: denied { mounton } for pid=12936 comm="syz.6.2906" path="/21/file1/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.829849][T12932] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 6*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 2*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2945092kB [ 236.856752][ T28] audit: type=1400 audit(1771026972.773:2729): avc: denied { map } for pid=12936 comm="syz.6.2906" path="/21/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.868285][T12954] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.2906: lblock 0 mapped to illegal pblock 0 (length 1) [ 236.883292][T12932] Node 0 Normal: 1718*4kB (UME) 2654*8kB (UME) 1574*16kB (UME) 1388*32kB (UME) 1020*64kB (UME) 611*128kB (UME) 363*256kB (UM) 168*512kB (UM) 102*1024kB (UM) 87*2048kB (UM) 848*4096kB (UM) = 4176168kB [ 236.915858][ T28] audit: type=1400 audit(1771026972.773:2730): avc: denied { execute } for pid=12936 comm="syz.6.2906" path="/21/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.942954][T12932] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 236.943794][T12954] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 236.964716][T12932] 27381 total pagecache pages [ 236.969417][T12932] 1 pages in swap cache [ 236.974100][T12932] Free swap = 124992kB [ 236.992579][T12932] Total swap = 124996kB [ 236.997002][T12932] 2097051 pages RAM [ 237.000852][T12932] 0 pages HighMem/MovableOnly [ 237.009891][T12954] EXT4-fs (loop6): This should not happen!! Data will be lost [ 237.009891][T12954] [ 237.019761][T12932] 81497 pages reserved [ 237.048531][T12279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.095447][ T28] audit: type=1400 audit(1771026973.063:2731): avc: denied { create } for pid=12960 comm="syz.6.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.130654][T12961] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.142885][ T28] audit: type=1400 audit(1771026973.063:2732): avc: denied { bind } for pid=12960 comm="syz.6.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.173203][ T28] audit: type=1400 audit(1771026973.063:2733): avc: denied { connect } for pid=12960 comm="syz.6.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.214872][ T28] audit: type=1400 audit(1771026973.083:2734): avc: denied { bind } for pid=12960 comm="syz.6.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 237.235934][ T28] audit: type=1400 audit(1771026973.083:2735): avc: denied { bind } for pid=12960 comm="syz.6.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.287310][T12961] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.355550][T12961] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.426208][T12798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 237.445333][T12798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.470148][T12961] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.511595][ T4147] IPVS: stop unused estimator thread 0... [ 237.517730][T12798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.554865][T12798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.614475][ T63] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.641763][ T63] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.654182][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2916'. [ 237.675701][ T63] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.707512][ T4147] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.757693][T12798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.781822][T12798] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.806553][T13019] loop6: detected capacity change from 0 to 1024 [ 237.833691][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.840892][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.843262][T13019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.880294][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.887584][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.902301][T13019] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 237.918894][T13019] System zones: 0-1, 3-36 [ 237.938544][T13019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.950692][T12798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 237.961582][T12798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.038634][T13036] loop5: detected capacity change from 0 to 2048 [ 238.066104][T12798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.163651][T12798] veth0_vlan: entered promiscuous mode [ 238.181844][T12798] veth1_vlan: entered promiscuous mode [ 238.207520][T12798] veth0_macvtap: entered promiscuous mode [ 238.228403][T12798] veth1_macvtap: entered promiscuous mode [ 238.245429][T12798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.264265][T12798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.288456][ T63] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.305385][ T63] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.315320][ T63] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.328008][ T63] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.009284][T12279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.021320][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 241.021339][ T28] audit: type=1400 audit(1771026976.963:2746): avc: denied { mounton } for pid=13092 comm="syz.5.2926" path="/122/file0" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.183302][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2927'. [ 241.424042][ T28] audit: type=1400 audit(1771026977.383:2747): avc: denied { block_suspend } for pid=13129 comm="syz.0.2932" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.649971][T13112] Set syz1 is full, maxelem 65536 reached [ 241.749566][ T28] audit: type=1400 audit(1771026977.713:2748): avc: denied { bind } for pid=13142 comm="syz.3.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 241.827509][T13155] FAULT_INJECTION: forcing a failure. [ 241.827509][T13155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.867926][T13155] CPU: 1 UID: 0 PID: 13155 Comm: syz.3.2936 Tainted: G W syzkaller #0 PREEMPT(full) [ 241.867967][T13155] Tainted: [W]=WARN [ 241.867976][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 241.867992][T13155] Call Trace: [ 241.868001][T13155] [ 241.868011][T13155] __dump_stack+0x1d/0x30 [ 241.868102][T13155] dump_stack_lvl+0x95/0xd0 [ 241.868130][T13155] dump_stack+0x15/0x1b [ 241.868156][T13155] should_fail_ex+0x263/0x280 [ 241.868185][T13155] should_fail+0xb/0x20 [ 241.868209][T13155] should_fail_usercopy+0x1a/0x20 [ 241.868255][T13155] _copy_from_user+0x1c/0xb0 [ 241.868289][T13155] __sys_bind+0x106/0x290 [ 241.868333][T13155] __x64_sys_bind+0x3f/0x50 [ 241.868469][T13155] x64_sys_call+0x2b30/0x3020 [ 241.868502][T13155] do_syscall_64+0x12c/0x370 [ 241.868536][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.868607][T13155] RIP: 0033:0x7f83ee14bf79 [ 241.868627][T13155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.868650][T13155] RSP: 002b:00007f83ecb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 241.868675][T13155] RAX: ffffffffffffffda RBX: 00007f83ee3c5fa0 RCX: 00007f83ee14bf79 [ 241.868693][T13155] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 241.868708][T13155] RBP: 00007f83ecb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.868724][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.868788][T13155] R13: 00007f83ee3c6038 R14: 00007f83ee3c5fa0 R15: 00007ffcb9a886d8 [ 241.868812][T13155] [ 242.118797][ T28] audit: type=1326 audit(1771026978.073:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce19e2bf79 code=0x7ffc0000 [ 242.157318][ T3386] hid (null): bogus close delimiter [ 242.163308][ T3386] hid (null): report_id 46345 is invalid [ 242.169393][ T3386] hid (null): invalid report_count 88294755 [ 242.183268][ T28] audit: type=1326 audit(1771026978.083:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fce19e2bf79 code=0x7ffc0000 [ 242.186224][T13166] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2940'. [ 242.216272][ T3386] hid (null): invalid report_count 1973464226 [ 242.222730][ T3386] hid (null): global environment stack underflow [ 242.229636][ T28] audit: type=1326 audit(1771026978.083:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce19e2bf79 code=0x7ffc0000 [ 242.231786][ T3386] hid (null): invalid report_count 1484752740 [ 242.273151][ T28] audit: type=1326 audit(1771026978.083:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13165 comm="syz.1.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce19e2bf79 code=0x7ffc0000 [ 242.317912][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'. [ 242.339795][ T28] audit: type=1326 audit(1771026978.083:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.6.2938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94d84bf79 code=0x0 [ 242.340937][ T3386] hid (null): invalid report_count 61450 [ 242.391676][ T28] audit: type=1326 audit(1771026978.233:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13144 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd422e0bf79 code=0x7ffc0000 [ 242.395212][ T3386] hid (null): report_id 36727 is invalid [ 242.456836][ T28] audit: type=1326 audit(1771026978.233:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13144 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd422e0bf79 code=0x7ffc0000 [ 242.476717][ T3386] hid_parser_main: 4133 callbacks suppressed [ 242.476858][ T3386] hid-generic 0004:0009:0401.0007: unknown main item tag 0x7 [ 242.537193][ T3386] hid-generic 0004:0009:0401.0007: unknown main item tag 0x1 [ 242.557389][ T3386] hid-generic 0004:0009:0401.0007: bogus close delimiter [ 242.568759][T13189] loop5: detected capacity change from 0 to 1024 [ 242.573039][ T3386] hid-generic 0004:0009:0401.0007: item 0 0 2 10 parsing failed [ 242.581483][T13189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.599284][T13189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.604714][ T3386] hid-generic 0004:0009:0401.0007: probe with driver hid-generic failed with error -22 [ 242.611219][T13189] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c11c, mo2=0003] [ 242.626380][T13189] System zones: 0-1, 3-36 [ 242.655335][T13189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.833288][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.978877][T13215] loop1: detected capacity change from 0 to 512 [ 242.994833][T13215] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2946: Failed to acquire dquot type 1 [ 243.012384][T13215] loop1: lost filesystem error report for type 5 error -117 [ 243.012848][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 243.026662][ C0] EXT4-fs (loop1): last error at time 1771026978: ext4_acquire_dquot:7003 [ 243.101624][T13215] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2946: Failed to acquire dquot type 1 [ 243.173023][T13215] loop1: lost filesystem error report for type 5 error -117 [ 243.173623][T13215] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2946: bg 0: block 248: padding at end of block bitmap is not set [ 243.211411][T13222] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13222 comm=syz.5.2958 [ 243.261485][T13215] loop1: lost filesystem error report for type 5 error -117 [ 243.262743][T13215] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 243.314046][T13215] loop1: lost filesystem error report for type 5 error -117 [ 243.314901][T13215] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2946: Failed to acquire dquot type 1 [ 243.352923][T13215] loop1: lost filesystem error report for type 5 error -117 [ 243.353212][T13215] EXT4-fs (loop1): 1 orphan inode deleted [ 243.373410][T13215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.393067][T13215] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.777317][T12570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.817713][T13246] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 243.843951][T13249] loop6: detected capacity change from 0 to 1024 [ 243.879138][T13249] EXT4-fs: Ignoring removed i_version option [ 243.906970][T13249] EXT4-fs: quotafile must be on filesystem root [ 243.921248][T13258] x_tables: duplicate underflow at hook 4 [ 243.942237][T13258] loop3: detected capacity change from 0 to 256 [ 243.959521][T13258] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.003625][T13258] FAT-fs (loop3): Directory bread(block 64) failed [ 244.021903][T13258] FAT-fs (loop3): Directory bread(block 65) failed [ 244.035257][T13258] FAT-fs (loop3): Directory bread(block 66) failed [ 244.041948][T13258] FAT-fs (loop3): Directory bread(block 67) failed [ 244.048765][T13258] FAT-fs (loop3): Directory bread(block 68) failed [ 244.073071][T13258] FAT-fs (loop3): Directory bread(block 69) failed [ 244.079817][T13258] FAT-fs (loop3): Directory bread(block 70) failed [ 244.087375][T13258] FAT-fs (loop3): Directory bread(block 71) failed [ 244.094166][T13258] FAT-fs (loop3): Directory bread(block 72) failed [ 244.100803][T13258] FAT-fs (loop3): Directory bread(block 73) failed [ 244.311312][T13293] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 244.363844][T13299] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 244.490840][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 244.520859][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2989'. [ 244.531179][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2991'. [ 244.700135][T13328] FAULT_INJECTION: forcing a failure. [ 244.700135][T13328] name failslab, interval 1, probability 0, space 0, times 0 [ 244.724687][T13328] CPU: 1 UID: 0 PID: 13328 Comm: syz.0.2998 Tainted: G W syzkaller #0 PREEMPT(full) [ 244.724726][T13328] Tainted: [W]=WARN [ 244.724734][T13328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 244.724750][T13328] Call Trace: [ 244.724759][T13328] [ 244.724768][T13328] __dump_stack+0x1d/0x30 [ 244.724867][T13328] dump_stack_lvl+0x95/0xd0 [ 244.724891][T13328] dump_stack+0x15/0x1b [ 244.724916][T13328] should_fail_ex+0x263/0x280 [ 244.724939][T13328] should_failslab+0x8c/0xb0 [ 244.725113][T13328] kmem_cache_alloc_noprof+0x66/0x400 [ 244.725151][T13328] ? security_file_alloc+0x32/0xf0 [ 244.725178][T13328] security_file_alloc+0x32/0xf0 [ 244.725233][T13328] init_file+0x5b/0x1b0 [ 244.725257][T13328] alloc_empty_file+0x8b/0x200 [ 244.725277][T13328] path_openat+0x65/0x2050 [ 244.725312][T13328] ? _parse_integer_limit+0x170/0x190 [ 244.725411][T13328] ? _parse_integer+0x27/0x40 [ 244.725467][T13328] ? kstrtoull+0x111/0x140 [ 244.725492][T13328] ? kstrtouint+0x76/0xc0 [ 244.725516][T13328] do_file_open+0x16c/0x290 [ 244.725550][T13328] do_sys_openat2+0x94/0x130 [ 244.725604][T13328] __x64_sys_open+0xe6/0x110 [ 244.725634][T13328] x64_sys_call+0x14b9/0x3020 [ 244.725660][T13328] do_syscall_64+0x12c/0x370 [ 244.725812][T13328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.725847][T13328] RIP: 0033:0x7fd422e0bf79 [ 244.725868][T13328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.726009][T13328] RSP: 002b:00007fd421867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 244.726029][T13328] RAX: ffffffffffffffda RBX: 00007fd423085fa0 RCX: 00007fd422e0bf79 [ 244.726042][T13328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 244.726058][T13328] RBP: 00007fd421867090 R08: 0000000000000000 R09: 0000000000000000 [ 244.726074][T13328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.726089][T13328] R13: 00007fd423086038 R14: 00007fd423085fa0 R15: 00007fff5a2382b8 [ 244.726149][T13328] [ 245.021766][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3001'. [ 245.048972][T13343] FAULT_INJECTION: forcing a failure. [ 245.048972][T13343] name failslab, interval 1, probability 0, space 0, times 0 [ 245.067033][T13343] CPU: 0 UID: 0 PID: 13343 Comm: syz.6.3003 Tainted: G W syzkaller #0 PREEMPT(full) [ 245.067086][T13343] Tainted: [W]=WARN [ 245.067093][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 245.067106][T13343] Call Trace: [ 245.067116][T13343] [ 245.067127][T13343] __dump_stack+0x1d/0x30 [ 245.067229][T13343] dump_stack_lvl+0x95/0xd0 [ 245.067257][T13343] dump_stack+0x15/0x1b [ 245.067284][T13343] should_fail_ex+0x263/0x280 [ 245.067323][T13343] ? uprobe_register+0x106/0x7f0 [ 245.067386][T13343] should_failslab+0x8c/0xb0 [ 245.067425][T13343] __kmalloc_cache_noprof+0x5f/0x400 [ 245.067454][T13343] uprobe_register+0x106/0x7f0 [ 245.067511][T13343] probe_event_enable+0x2e3/0x800 [ 245.067570][T13343] ? __pfx_uprobe_perf_filter+0x10/0x10 [ 245.067660][T13343] trace_uprobe_register+0x86/0x3c0 [ 245.067694][T13343] perf_trace_event_init+0x35c/0x7b0 [ 245.067716][T13343] perf_uprobe_init+0xf9/0x150 [ 245.067747][T13343] perf_uprobe_event_init+0xc4/0x140 [ 245.067820][T13343] perf_try_init_event+0x25a/0x6f0 [ 245.067846][T13343] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 245.067894][T13343] perf_event_alloc+0xb28/0x18e0 [ 245.067932][T13343] ? __fget_files+0x184/0x1c0 [ 245.067968][T13343] __se_sys_perf_event_open+0x4c9/0x1290 [ 245.068009][T13343] __x64_sys_perf_event_open+0x67/0x80 [ 245.068121][T13343] x64_sys_call+0x2789/0x3020 [ 245.068154][T13343] do_syscall_64+0x12c/0x370 [ 245.068183][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.068210][T13343] RIP: 0033:0x7fc94d84bf79 [ 245.068226][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.068245][T13343] RSP: 002b:00007fc94c29f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 245.068270][T13343] RAX: ffffffffffffffda RBX: 00007fc94dac5fa0 RCX: 00007fc94d84bf79 [ 245.068287][T13343] RDX: 0000000000000001 RSI: ffffffffffffffff RDI: 0000200000000180 [ 245.068346][T13343] RBP: 00007fc94c29f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.068360][T13343] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 245.068375][T13343] R13: 00007fc94dac6038 R14: 00007fc94dac5fa0 R15: 00007ffddcc2f578 [ 245.068400][T13343] [ 245.344326][T13345] loop1: detected capacity change from 0 to 8192 [ 245.380315][T13345] msdos: Unknown parameter 'ds1xfloppy' [ 245.431213][T13356] veth0: entered promiscuous mode [ 245.457109][T13355] veth0: left promiscuous mode [ 245.491827][T13360] loop6: detected capacity change from 0 to 512 [ 245.499900][T13360] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.547391][T13360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.689945][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3013'. [ 245.711508][T13377] FAULT_INJECTION: forcing a failure. [ 245.711508][T13377] name failslab, interval 1, probability 0, space 0, times 0 [ 245.734228][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 245.764593][T13377] CPU: 0 UID: 0 PID: 13377 Comm: syz.5.3014 Tainted: G W syzkaller #0 PREEMPT(full) [ 245.764645][T13377] Tainted: [W]=WARN [ 245.764654][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 245.764669][T13377] Call Trace: [ 245.764681][T13377] [ 245.764691][T13377] __dump_stack+0x1d/0x30 [ 245.764730][T13377] dump_stack_lvl+0x95/0xd0 [ 245.764760][T13377] dump_stack+0x15/0x1b [ 245.764786][T13377] should_fail_ex+0x263/0x280 [ 245.764814][T13377] ? autofs_init_fs_context+0xbb/0x270 [ 245.764971][T13377] should_failslab+0x8c/0xb0 [ 245.765004][T13377] __kmalloc_cache_noprof+0x5f/0x400 [ 245.765078][T13377] autofs_init_fs_context+0xbb/0x270 [ 245.765161][T13377] alloc_fs_context+0x4a6/0x580 [ 245.765197][T13377] fs_context_for_mount+0x22/0x30 [ 245.765331][T13377] __se_sys_fsopen+0xa0/0x1e0 [ 245.765353][T13377] __x64_sys_fsopen+0x31/0x40 [ 245.765373][T13377] x64_sys_call+0x29af/0x3020 [ 245.765474][T13377] do_syscall_64+0x12c/0x370 [ 245.765502][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.765567][T13377] RIP: 0033:0x7f0de63cbf79 [ 245.765586][T13377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.765610][T13377] RSP: 002b:00007f0de4e06028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 245.765643][T13377] RAX: ffffffffffffffda RBX: 00007f0de6646090 RCX: 00007f0de63cbf79 [ 245.765709][T13377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 245.765722][T13377] RBP: 00007f0de4e06090 R08: 0000000000000000 R09: 0000000000000000 [ 245.765850][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.765866][T13377] R13: 00007f0de6646128 R14: 00007f0de6646090 R15: 00007ffe517284f8 [ 245.765892][T13377] [ 245.766191][T13379] loop3: detected capacity change from 0 to 512 [ 246.065243][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 246.065309][ T28] audit: type=1400 audit(1771026982.033:2807): avc: denied { ioctl } for pid=13390 comm="syz.1.3022" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 246.154030][T13396] loop3: detected capacity change from 0 to 1024 [ 246.193831][ T28] audit: type=1326 audit(1771026982.163:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13359 comm="syz.6.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d84bf79 code=0x7ffc0000 [ 246.280081][T13396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.298495][ T28] audit: type=1326 audit(1771026982.163:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13359 comm="syz.6.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94d84bf79 code=0x7ffc0000 [ 246.322667][ T28] audit: type=1326 audit(1771026982.163:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13359 comm="syz.6.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc94d84bf79 code=0x7ffc0000 [ 246.346701][ T28] audit: type=1400 audit(1771026982.213:2811): avc: denied { write } for pid=13359 comm="syz.6.3011" path="socket:[41546]" dev="sockfs" ino=41546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.453094][ T28] audit: type=1400 audit(1771026982.413:2812): avc: denied { create } for pid=13394 comm="syz.3.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.476093][T13406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3026'. [ 246.488855][ T28] audit: type=1400 audit(1771026982.413:2813): avc: denied { connect } for pid=13394 comm="syz.3.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 246.528827][ T28] audit: type=1400 audit(1771026982.483:2814): avc: denied { accept } for pid=13404 comm="syz.0.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 246.549866][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 246.569042][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 246.581272][ T28] audit: type=1400 audit(1771026982.523:2815): avc: denied { create } for pid=13394 comm="syz.3.3024" name="ext4" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 246.632574][T13408] wireguard0: entered promiscuous mode [ 246.642864][T13408] wireguard0: entered allmulticast mode [ 246.664873][T12279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.682099][T13413] xt_NFQUEUE: number of total queues is 0 [ 246.697166][T13414] xt_NFQUEUE: number of total queues is 0 [ 246.765724][ T28] audit: type=1400 audit(1771026982.723:2816): avc: denied { mount } for pid=13416 comm="syz.1.3031" name="/" dev="ramfs" ino=41587 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 246.805307][T13417] loop1: detected capacity change from 0 to 1024 [ 246.824559][T13417] EXT4-fs: Ignoring removed orlov option [ 246.847295][T13417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.972950][T13428] netlink: 'syz.0.3034': attribute type 4 has an invalid length. [ 247.063786][T12798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.174257][T13440] loop3: detected capacity change from 0 to 512 [ 247.310531][T13440] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 247.353147][T13440] EXT4-fs (loop3): orphan cleanup on readonly fs [ 247.383428][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3038'. [ 247.399185][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3038'. [ 247.429506][T13440] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.3035: Failed to acquire dquot type 1 [ 247.481431][T13440] loop3: lost filesystem error report for type 5 error -117 [ 247.482866][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 247.496689][ C1] EXT4-fs (loop3): initial error at time 1771026983: ext4_acquire_dquot:7003 [ 247.505553][ C1] EXT4-fs (loop3): last error at time 1771026983: ext4_acquire_dquot:7003 [ 247.574402][T13440] EXT4-fs (loop3): Remounting filesystem read-only [ 247.627364][T13440] EXT4-fs (loop3): 1 truncate cleaned up [ 247.694665][ T4154] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 247.712972][ T4154] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 247.732530][ T4154] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 247.765027][T12570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.775913][T13440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 247.936125][T12798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 248.036994][T13438] Set syz1 is full, maxelem 65536 reached [ 248.079011][T13449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1538 sclass=netlink_tcpdiag_socket pid=13449 comm=syz.1.3040 [ 248.219431][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3045'. [ 248.348244][T13468] loop6: detected capacity change from 0 to 8192 [ 248.371292][T13479] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3051'. [ 248.429471][T13482] netlink: 'syz.6.3052': attribute type 4 has an invalid length. [ 248.554563][T13491] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 248.576174][T13493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13493 comm=syz.0.3054 [ 248.814201][T13524] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 248.814705][T13525] netlink: 'syz.3.3065': attribute type 2 has an invalid length. [ 248.874800][T13525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3065'. [ 248.918560][T13530] FAULT_INJECTION: forcing a failure. [ 248.918560][T13530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.941358][T13530] CPU: 0 UID: 0 PID: 13530 Comm: syz.0.3068 Tainted: G W syzkaller #0 PREEMPT(full) [ 248.941424][T13530] Tainted: [W]=WARN [ 248.941434][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 248.941449][T13530] Call Trace: [ 248.941458][T13530] [ 248.941466][T13530] __dump_stack+0x1d/0x30 [ 248.941495][T13530] dump_stack_lvl+0x95/0xd0 [ 248.941694][T13530] dump_stack+0x15/0x1b [ 248.941716][T13530] should_fail_ex+0x263/0x280 [ 248.941740][T13530] should_fail+0xb/0x20 [ 248.941781][T13530] should_fail_usercopy+0x1a/0x20 [ 248.941880][T13530] _copy_from_iter+0xcf/0xea0 [ 248.941906][T13530] ? kmem_cache_alloc_node_noprof+0x20a/0x460 [ 248.941940][T13530] ? __alloc_skb+0x362/0x690 [ 248.942034][T13530] ? __alloc_skb+0x4f6/0x690 [ 248.942112][T13530] skb_copy_datagram_from_iter+0xb2/0x480 [ 248.942146][T13530] tun_get_user+0x90b/0x27c0 [ 248.942315][T13530] ? ref_tracker_alloc+0x1f2/0x2f0 [ 248.942350][T13530] tun_chr_write_iter+0x15e/0x210 [ 248.942371][T13530] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 248.942451][T13530] vfs_write+0x5a6/0x9f0 [ 248.942484][T13530] ksys_write+0xdc/0x1a0 [ 248.942586][T13530] __x64_sys_write+0x40/0x50 [ 248.942620][T13530] x64_sys_call+0x27e1/0x3020 [ 248.942653][T13530] do_syscall_64+0x12c/0x370 [ 248.942765][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.942798][T13530] RIP: 0033:0x7fd422e0bf79 [ 248.942818][T13530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.942839][T13530] RSP: 002b:00007fd421867028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 248.942863][T13530] RAX: ffffffffffffffda RBX: 00007fd423085fa0 RCX: 00007fd422e0bf79 [ 248.942905][T13530] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003 [ 248.942922][T13530] RBP: 00007fd421867090 R08: 0000000000000000 R09: 0000000000000000 [ 248.942939][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.942954][T13530] R13: 00007fd423086038 R14: 00007fd423085fa0 R15: 00007fff5a2382b8 [ 248.943023][T13530] [ 249.221932][T13541] netlink: 'syz.6.3071': attribute type 8 has an invalid length. [ 249.373278][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3077'. [ 249.475483][T13576] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 249.495615][T13574] FAULT_INJECTION: forcing a failure. [ 249.495615][T13574] name failslab, interval 1, probability 0, space 0, times 0 [ 249.522784][T13574] CPU: 0 UID: 0 PID: 13574 Comm: syz.1.3082 Tainted: G W syzkaller #0 PREEMPT(full) [ 249.522830][T13574] Tainted: [W]=WARN [ 249.522866][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 249.522882][T13574] Call Trace: [ 249.522890][T13574] [ 249.522898][T13574] __dump_stack+0x1d/0x30 [ 249.522930][T13574] dump_stack_lvl+0x95/0xd0 [ 249.522959][T13574] dump_stack+0x15/0x1b [ 249.522980][T13574] should_fail_ex+0x263/0x280 [ 249.523094][T13574] should_failslab+0x8c/0xb0 [ 249.523165][T13574] kmem_cache_alloc_noprof+0x66/0x400 [ 249.523204][T13574] ? radix_tree_node_alloc+0x8a/0x1f0 [ 249.523261][T13574] radix_tree_node_alloc+0x8a/0x1f0 [ 249.523355][T13574] idr_get_free+0x1fa/0x550 [ 249.523384][T13574] idr_alloc_u32+0xf2/0x1a0 [ 249.523422][T13574] tcf_idr_check_alloc+0x1ff/0x2e0 [ 249.523494][T13574] tcf_ct_init+0x232/0xfc0 [ 249.523537][T13574] ? __pfx_tcf_ct_init+0x10/0x10 [ 249.523566][T13574] tcf_action_init_1+0x395/0x4d0 [ 249.523610][T13574] tcf_action_init+0x29c/0x700 [ 249.523663][T13574] tc_ctl_action+0x29b/0x830 [ 249.523759][T13574] ? __pfx_tc_ctl_action+0x10/0x10 [ 249.523786][T13574] rtnetlink_rcv_msg+0x6a7/0x720 [ 249.523817][T13574] netlink_rcv_skb+0x123/0x220 [ 249.523864][T13574] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 249.523943][T13574] rtnetlink_rcv+0x1c/0x30 [ 249.523966][T13574] netlink_unicast+0x5c0/0x690 [ 249.524004][T13574] netlink_sendmsg+0x5c8/0x6f0 [ 249.524105][T13574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.524207][T13574] ____sys_sendmsg+0x5af/0x600 [ 249.524266][T13574] ___sys_sendmsg+0x195/0x1e0 [ 249.524299][T13574] __x64_sys_sendmsg+0xd4/0x160 [ 249.524324][T13574] x64_sys_call+0x194c/0x3020 [ 249.524382][T13574] do_syscall_64+0x12c/0x370 [ 249.524482][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.524506][T13574] RIP: 0033:0x7fce19e2bf79 [ 249.524524][T13574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.524545][T13574] RSP: 002b:00007fce1887f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.524569][T13574] RAX: ffffffffffffffda RBX: 00007fce1a0a5fa0 RCX: 00007fce19e2bf79 [ 249.524626][T13574] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 249.524639][T13574] RBP: 00007fce1887f090 R08: 0000000000000000 R09: 0000000000000000 [ 249.524652][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.524664][T13574] R13: 00007fce1a0a6038 R14: 00007fce1a0a5fa0 R15: 00007ffdeef1f0c8 [ 249.524746][T13574] [ 250.035501][T13595] netlink: 'syz.1.3090': attribute type 10 has an invalid length. [ 250.057039][T13595] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 250.167855][T13600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3092'. [ 250.213207][T13600] ip6tnl1: entered allmulticast mode [ 250.392673][T13612] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.592097][T13634] netlink: 'syz.0.3106': attribute type 13 has an invalid length. [ 250.716678][T13646] netlink: 'syz.5.3109': attribute type 2 has an invalid length. [ 250.743290][T13645] loop6: detected capacity change from 0 to 1024 [ 250.765190][T13645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.774606][T13645] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 250.783472][T13645] System zones: 0-1, 3-36 [ 250.790061][T13645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.815524][T13634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.827285][T13634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.861394][T13649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13649 comm=syz.6.3110 [ 250.954220][ T30] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.962770][ T30] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 45150 - 0 [ 250.999310][ T30] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.008434][ T30] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 45150 - 0 [ 251.018848][T12279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.086109][ T30] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.094849][ T30] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 45150 - 0 [ 251.110194][ T30] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.127687][ T30] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 45150 - 0 [ 251.309325][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 251.309345][ T28] audit: type=1400 audit(2000000002.680:2846): avc: denied { bind } for pid=13670 comm="syz.1.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.513149][ T28] audit: type=1400 audit(2000000002.890:2847): avc: denied { setopt } for pid=13664 comm="syz.6.3116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 251.653010][ T28] audit: type=1400 audit(2000000003.030:2848): avc: denied { mount } for pid=13686 comm="syz.6.3123" name="/" dev="hugetlbfs" ino=42829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 251.741598][ T28] audit: type=1400 audit(2000000003.050:2849): avc: denied { mounton } for pid=13686 comm="syz.6.3123" path="/" dev="hugetlbfs" ino=42829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 251.819749][ T28] audit: type=1400 audit(2000000003.170:2850): avc: denied { unmount } for pid=12279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 251.849469][T13695] loop6: detected capacity change from 0 to 1024 [ 251.874993][T13699] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 251.937289][T13701] __nla_validate_parse: 3 callbacks suppressed [ 251.937310][T13701] netlink: 400 bytes leftover after parsing attributes in process `syz.1.3126'. [ 251.957896][T13695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.262338][ T28] audit: type=1400 audit(2000000003.630:2851): avc: denied { remove_name } for pid=12279 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.310273][T13715] loop5: detected capacity change from 0 to 2048 [ 252.318861][ T28] audit: type=1400 audit(2000000003.630:2852): avc: denied { rmdir } for pid=12279 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.382482][ T28] audit: type=1400 audit(2000000003.630:2853): avc: denied { unlink } for pid=12279 comm="syz-executor" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 252.425201][ T28] audit: type=1400 audit(2000000003.630:2854): avc: denied { unlink } for pid=12279 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 252.458335][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.497979][T13722] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 252.519649][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.595382][T13726] loop5: detected capacity change from 0 to 256 [ 252.616209][T13713] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.628297][ T4154] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.645807][T13726] vfat: Unknown parameter 'e' [ 252.676736][ T28] audit: type=1400 audit(2000000004.050:2855): avc: denied { setopt } for pid=13725 comm="syz.5.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.717967][ T4154] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.795161][ T4154] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.855577][ T4154] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.985381][ T4154] bridge_slave_1: left allmulticast mode [ 252.991179][ T4154] bridge_slave_1: left promiscuous mode [ 253.007677][ T4154] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.036942][ T4154] bridge_slave_0: left allmulticast mode [ 253.045833][ T4154] bridge_slave_0: left promiscuous mode [ 253.062411][ T4154] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.252443][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3140'. [ 253.279763][ T4154] bridge0 (unregistering): left allmulticast mode [ 253.406839][ T4154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.425662][ T4154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.439345][ T4154] bond0 (unregistering): Released all slaves [ 253.532747][ T4154] hsr_slave_0: left promiscuous mode [ 253.544125][ T4154] hsr_slave_1: left promiscuous mode [ 253.562602][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.594065][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.613580][ T4154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.632252][ T4154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.687657][ T4154] veth1_macvtap: left promiscuous mode [ 253.701327][ T4154] veth0_macvtap: left promiscuous mode [ 253.713309][ T4154] veth1_vlan: left promiscuous mode [ 253.726437][ T4154] veth0_vlan: left promiscuous mode [ 253.851291][ T4154] team0 (unregistering): Port device team_slave_1 removed [ 253.862060][ T4154] team0 (unregistering): Port device team_slave_0 removed [ 253.897353][ T4154] team0 (unregistering): Port device dummy0 removed [ 254.123595][T13817] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.130849][T13817] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.245796][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.258649][T13817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.298065][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3156'. [ 254.335008][ T2507] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.344780][ T2507] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.355148][ T2507] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.376939][ T2507] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.465167][T13757] chnl_net:caif_netlink_parms(): no params data found [ 254.480374][T13853] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 254.551944][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3160'. [ 254.604051][T13867] 9p: Bad value for 'rfdno' [ 254.621185][T13757] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.655330][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.662666][T13757] bridge_slave_0: entered allmulticast mode [ 254.669602][T13757] bridge_slave_0: entered promiscuous mode [ 254.685468][T13757] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.692600][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.700143][T13757] bridge_slave_1: entered allmulticast mode [ 254.707020][T13757] bridge_slave_1: entered promiscuous mode [ 254.725256][T13757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.741741][T13757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.790550][T13874] netlink: 'syz.3.3164': attribute type 3 has an invalid length. [ 254.807109][T13878] netlink: 'syz.0.3166': attribute type 27 has an invalid length. [ 254.827748][T13878] bridge1: left promiscuous mode [ 254.833247][T13878] geneve2: left promiscuous mode [ 254.860257][T13757] team0: Port device team_slave_0 added [ 254.868921][T13757] team0: Port device team_slave_1 added [ 254.896618][T13878] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.000741][T13878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.051414][T13890] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3168'. [ 255.055418][T13757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.068183][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.096978][T13757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.105388][T13890] block device autoloading is deprecated and will be removed. [ 255.117735][T13757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.125694][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.153121][T13757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.209394][T13757] hsr_slave_0: entered promiscuous mode [ 255.218694][T13757] hsr_slave_1: entered promiscuous mode [ 255.225096][T13757] debugfs: 'hsr0' already exists in 'hsr' [ 255.240983][T13757] Cannot create hsr debugfs directory [ 255.542701][T13908] xt_NFQUEUE: number of total queues is 0 [ 255.569047][T13757] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.634592][T13757] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.670302][T13905] netlink: 'syz.1.3171': attribute type 15 has an invalid length. [ 255.778339][T13757] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.802645][T13757] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 256.020675][T13757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.076548][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.146544][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.153792][ T4154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.184886][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.192427][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.236592][T13757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.408716][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 256.408735][ T28] audit: type=1400 audit(2000000007.780:2869): avc: denied { connect } for pid=13927 comm="syz.1.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.447093][T13757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.523372][T13941] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3178'. [ 256.542622][ T28] audit: type=1400 audit(2000000007.810:2870): avc: denied { write } for pid=13927 comm="syz.1.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.613417][ T28] audit: type=1400 audit(2000000007.980:2871): avc: denied { listen } for pid=13943 comm="syz.3.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.680478][ T28] audit: type=1400 audit(2000000007.990:2872): avc: denied { accept } for pid=13943 comm="syz.3.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.741033][ T28] audit: type=1400 audit(2000000008.020:2873): avc: denied { read } for pid=13927 comm="syz.1.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 256.775024][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3180'. [ 256.792926][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3180'. [ 257.089547][T13966] vlan2: entered allmulticast mode [ 257.107776][T13966] bond0: entered allmulticast mode [ 257.125554][T13968] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3182'. [ 257.136939][T13966] bond_slave_0: entered allmulticast mode [ 257.155444][T13966] bond_slave_1: entered allmulticast mode [ 257.230236][T13968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.255186][T13961] loop1: detected capacity change from 0 to 256 [ 257.255480][T13968] bond_slave_0: left allmulticast mode [ 257.316750][T13968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.338535][T13968] bond_slave_1: left allmulticast mode [ 257.358272][T13968] bond0 (unregistering): Released all slaves [ 257.382071][T13757] veth0_vlan: entered promiscuous mode [ 257.398509][T13757] veth1_vlan: entered promiscuous mode [ 257.416834][T13757] veth0_macvtap: entered promiscuous mode [ 257.424734][T13757] veth1_macvtap: entered promiscuous mode [ 257.463448][T13757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.494533][T13757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.523522][ T4154] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.527760][ T28] audit: type=1326 audit(2000000008.900:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.3.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee14bf79 code=0x7ffc0000 [ 257.556370][ T4154] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.566525][ T28] audit: type=1326 audit(2000000008.930:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.3.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee14bf79 code=0x7ffc0000 [ 257.591754][ T4154] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.600845][ T4154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.610382][ T28] audit: type=1326 audit(2000000008.940:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.3.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f83ee14bf79 code=0x7ffc0000 [ 257.635419][ T28] audit: type=1326 audit(2000000008.940:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.3.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee14bf79 code=0x7ffc0000 [ 257.669961][ T28] audit: type=1326 audit(2000000008.940:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13980 comm="syz.3.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83ee14bf79 code=0x7ffc0000 [ 257.720606][T13987] : renamed from vlan0 [ 257.785726][T13994] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3192'. [ 257.822290][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3190'. [ 257.835281][T13996] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 257.866737][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 257.953777][T14014] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 257.956588][T13992] xt_hashlimit: size too large, truncated to 1048576 [ 257.972113][T14013] netlink: 'syz.7.3196': attribute type 27 has an invalid length. [ 257.980573][T14014] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3198'. [ 258.003044][T14016] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.3199'. [ 258.025268][T14016] netlink: zone id is out of range [ 258.033554][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.040829][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.048760][T14016] netlink: zone id is out of range [ 258.097379][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.108720][T14016] netlink: set zone limit has 8 unknown bytes [ 258.128205][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.222596][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.254654][T14014] dummy0: entered promiscuous mode [ 258.260200][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.269006][T14014] bridge0: port 3(dummy0) entered blocking state [ 258.305990][T14014] bridge0: port 3(dummy0) entered disabled state [ 258.323692][T14014] dummy0: entered allmulticast mode [ 258.340252][T14014] bridge0: port 3(dummy0) entered blocking state [ 258.346772][T14014] bridge0: port 3(dummy0) entered forwarding state [ 258.373295][T14030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3202'. [ 258.388406][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3202'. [ 258.419144][T14020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.443786][T14020] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.453510][T14020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.483845][ T4147] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.493359][T14029] lo speed is unknown, defaulting to 1000 [ 258.500011][T14029] lo speed is unknown, defaulting to 1000 [ 258.509764][ T4147] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.527644][T14029] lo speed is unknown, defaulting to 1000 [ 258.544865][ T30] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.578867][ T30] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.657259][T14029] infiniband syz0: set down [ 258.662738][ T3386] lo speed is unknown, defaulting to 1000 [ 258.674757][T14029] infiniband syz0: added lo [ 258.699526][T14029] RDS/IB: syz0: added [ 258.703727][T14029] smc: adding ib device syz0 with port count 1 [ 258.721974][T14029] smc: ib device syz0 port 1 has no pnetid [ 258.728282][ T3386] lo speed is unknown, defaulting to 1000 [ 258.738685][T14029] lo speed is unknown, defaulting to 1000 [ 258.775766][T14046] usb usb1: usbfs: process 14046 (syz.7.3207) did not claim interface 0 before use [ 258.822280][T14029] lo speed is unknown, defaulting to 1000 [ 258.865781][T14051] loop7: detected capacity change from 0 to 1764 [ 258.912823][T14051] loop7: detected capacity change from 0 to 1024 [ 258.923297][T14051] EXT4-fs: Ignoring removed bh option [ 258.933918][T14051] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 258.971217][T14051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.003011][T14038] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3204'. [ 259.022105][T14029] lo speed is unknown, defaulting to 1000 [ 259.081103][T14029] lo speed is unknown, defaulting to 1000 [ 259.108594][T14061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=14061 comm=syz.1.3211 [ 259.108754][T14061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=14061 comm=syz.1.3211 [ 259.251022][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3208'. [ 259.365240][T14068] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.544990][T14068] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.662316][T13757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.691026][T14074] FAULT_INJECTION: forcing a failure. [ 259.691026][T14074] name failslab, interval 1, probability 0, space 0, times 0 [ 259.710265][T14029] lo speed is unknown, defaulting to 1000 [ 259.721315][T14068] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.729832][T14074] CPU: 0 UID: 0 PID: 14074 Comm: syz.0.3214 Tainted: G W syzkaller #0 PREEMPT(full) [ 259.730037][T14074] Tainted: [W]=WARN [ 259.730066][T14074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 259.730108][T14074] Call Trace: [ 259.730129][T14074] [ 259.730189][T14074] __dump_stack+0x1d/0x30 [ 259.730272][T14074] dump_stack_lvl+0x95/0xd0 [ 259.730365][T14074] dump_stack+0x15/0x1b [ 259.730429][T14074] should_fail_ex+0x263/0x280 [ 259.730510][T14074] should_failslab+0x8c/0xb0 [ 259.730662][T14074] kmem_cache_alloc_noprof+0x66/0x400 [ 259.730822][T14074] ? io_submit_one+0xcf/0x1350 [ 259.730974][T14074] io_submit_one+0xcf/0x1350 [ 259.731058][T14074] ? __pfx_aio_poll_queue_proc+0x10/0x10 [ 259.731152][T14074] __se_sys_io_submit+0xfb/0x280 [ 259.731241][T14074] __x64_sys_io_submit+0x43/0x50 [ 259.731349][T14074] x64_sys_call+0x19d5/0x3020 [ 259.731438][T14074] do_syscall_64+0x12c/0x370 [ 259.731529][T14074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.731633][T14074] RIP: 0033:0x7fd422e0bf79 [ 259.731751][T14074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.731828][T14074] RSP: 002b:00007fd421835028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 259.731979][T14074] RAX: ffffffffffffffda RBX: 00007fd423086090 RCX: 00007fd422e0bf79 [ 259.732022][T14074] RDX: 0000200000000440 RSI: 0000000000000002 RDI: 00007fd421836000 [ 259.732064][T14074] RBP: 00007fd421835090 R08: 0000000000000000 R09: 0000000000000000 [ 259.732106][T14074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.732141][T14074] R13: 00007fd423086128 R14: 00007fd423086090 R15: 00007fff5a2382b8 [ 259.732292][T14074] [ 259.948862][T14076] loop7: detected capacity change from 0 to 8192 [ 259.963747][T14076] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.964394][T14029] lo speed is unknown, defaulting to 1000 [ 260.025192][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.043724][T14076] FAT-fs (loop7): Filesystem has been set read-only [ 260.050522][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.059742][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.069075][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.078363][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.088546][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.097748][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.106888][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.117383][T14068] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.127936][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.138712][T14029] lo speed is unknown, defaulting to 1000 [ 260.161104][T14076] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 260.205359][ T4169] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.216669][T14078] Set syz1 is full, maxelem 65536 reached [ 260.245946][ T4169] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.254258][ T4169] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.276121][ T4169] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.290508][T14029] lo speed is unknown, defaulting to 1000 [ 260.395246][T14090] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14090 comm=syz.1.3218 [ 260.426469][T14090] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=14090 comm=syz.1.3218 [ 260.445939][T14098] netlink: 'syz.3.3221': attribute type 10 has an invalid length. [ 260.468945][T14098] dummy0: entered promiscuous mode [ 260.479629][T14098] bridge0: port 3(dummy0) entered blocking state [ 260.508800][T14098] bridge0: port 3(dummy0) entered disabled state [ 260.526012][T14098] dummy0: entered allmulticast mode [ 260.585825][T14106] loop0: detected capacity change from 0 to 512 [ 260.610540][T14106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.626568][T14106] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.121019][T14139] loop1: detected capacity change from 0 to 136 [ 261.137940][T14139] loop1: detected capacity change from 0 to 512 [ 261.700437][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 261.700460][ T28] audit: type=1400 audit(2000000269.103:2892): avc: denied { create } for pid=14147 comm="syz.5.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 261.730948][ T28] audit: type=1400 audit(2000000269.103:2893): avc: denied { ioctl } for pid=14147 comm="syz.5.3226" path="socket:[45199]" dev="sockfs" ino=45199 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 261.992664][T14186] usb usb5: usbfs: process 14186 (syz.5.3228) did not claim interface 0 before use [ 262.010886][T14193] loop1: detected capacity change from 0 to 764 [ 262.033256][T14193] iso9660: Unknown parameter 'A0)p&J4f(1lҏ |ĸA' [ 262.111276][T14200] lo speed is unknown, defaulting to 1000 [ 262.148223][T14206] tipc: Started in network mode [ 262.153233][T14206] tipc: Node identity ac14140f, cluster identity 4711 [ 262.160315][T14206] tipc: New replicast peer: 255.255.255.255 [ 262.176139][T14206] tipc: Enabled bearer , priority 10 [ 262.230033][T14212] __nla_validate_parse: 4 callbacks suppressed [ 262.230058][T14212] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3237'. [ 262.255082][T14202] loop5: detected capacity change from 0 to 8192 [ 262.267335][T14202] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.281779][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3237'. [ 262.292223][T14214] 9p: Unknown Cache mode or invalid value l [ 262.302555][ T28] audit: type=1400 audit(2000000269.677:2894): avc: denied { connect } for pid=14213 comm="syz.1.3238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 262.307467][T14214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3238'. [ 262.334608][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.347022][ T9500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.358224][T14202] FAT-fs (loop5): Filesystem has been set read-only [ 262.365454][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.382140][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.395477][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.406155][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.423056][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.432284][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.442112][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.463654][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.474935][T14219] loop0: detected capacity change from 0 to 1024 [ 262.488277][T14221] IPv6: A: Disabled Multicast RS [ 262.495026][T14202] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 262.513727][T14220] loop1: detected capacity change from 0 to 1024 [ 262.543865][T14220] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.553908][T14219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 262.580105][T14220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.629742][T14219] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.731638][ T28] audit: type=1400 audit(2000000270.110:2895): avc: denied { setattr } for pid=14218 comm="syz.1.3240" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.827880][T12570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.907959][T14219] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.3239: lblock 0 mapped to illegal pblock 0 (length 1) [ 262.942674][T14219] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 262.989446][T14219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 262.989446][T14219] [ 263.026959][ T28] audit: type=1400 audit(2000000270.433:2896): avc: denied { getopt } for pid=14217 comm="syz.0.3239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.103649][ T9500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 263.198127][ T3386] tipc: Node number set to 2886997007 [ 263.246248][ T28] audit: type=1400 audit(2000000270.644:2897): avc: denied { ioctl } for pid=14233 comm="syz.1.3243" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.334634][T14240] loop0: detected capacity change from 0 to 512 [ 263.352531][T14240] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 263.403723][ T28] audit: type=1326 audit(2000000270.805:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.5.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de63cbf79 code=0x7ffc0000 [ 263.449770][ T28] audit: type=1326 audit(2000000270.805:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.5.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0de63cbf79 code=0x7ffc0000 [ 263.479260][T14246] loop0: detected capacity change from 0 to 512 [ 263.485894][T14246] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 263.499884][ T28] audit: type=1326 audit(2000000270.805:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.5.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de63cbf79 code=0x7ffc0000 [ 263.534393][ T28] audit: type=1326 audit(2000000270.805:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14237 comm="syz.5.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0de63cbf79 code=0x7ffc0000 [ 263.559388][T14245] tipc: Started in network mode [ 263.564324][T14245] tipc: Node identity ac14140f, cluster identity 4711 [ 263.578497][T14238] loop5: detected capacity change from 0 to 512 [ 263.593237][T14245] tipc: New replicast peer: 255.255.255.255 [ 263.601322][T14245] tipc: Enabled bearer , priority 10 [ 263.620320][T14249] loop0: detected capacity change from 0 to 512 [ 263.659763][T14249] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.677483][T14249] EXT4-fs (loop0): 1 truncate cleaned up [ 263.689034][T14249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.712796][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 263.715618][T14238] EXT4-fs (loop5): 1 orphan inode deleted [ 263.721962][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3249'. [ 263.728709][T14249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 263.728732][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3249'. [ 263.731633][ T3386] IPVS: starting estimator thread 0... [ 263.742630][T14238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.751198][T11259] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.790912][T11259] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.800953][T11259] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.804025][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.811034][T11259] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.844456][T14259] 9p: Bad value for 'wfdno' [ 263.860857][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3251'. [ 263.871254][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 263.882165][ T9500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.891449][T14256] IPVS: using max 2256 ests per chain, 112800 per kthread [ 263.945136][T14266] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3254'. [ 263.955468][T14265] loop5: detected capacity change from 0 to 1764 [ 263.995441][T14265] loop5: detected capacity change from 0 to 1024 [ 264.008041][T14265] EXT4-fs: Ignoring removed bh option [ 264.022443][T14265] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 264.047255][T14265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.104267][T14269] loop0: detected capacity change from 0 to 8192 [ 264.126703][T14269] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.146719][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.164314][T14269] FAT-fs (loop0): Filesystem has been set read-only [ 264.171077][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.180177][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.189413][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.191381][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.198705][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.216535][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.225607][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.268027][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.285702][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.303861][T14269] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 264.325424][T14279] IPv6: A: Disabled Multicast RS [ 264.363177][T14282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 264.396540][T14285] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 264.426319][T14282] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.452249][T14285] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 264.485433][T14285] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3261: Corrupt directory, running e2fsck is recommended [ 264.501531][T12570] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 264.611725][T14285] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 264.695037][T14305] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 264.710176][T14305] bond1 (unregistering): Released all slaves [ 264.730572][T14285] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.3261: corrupted in-inode xattr: invalid ea_ino [ 264.737505][T12808] tipc: Node number set to 2886997007 [ 264.745136][T14285] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 264.749870][T14285] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3261: couldn't read orphan inode 15 (err -117) [ 264.759156][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 264.759180][ C1] EXT4-fs (loop5): initial error at time 2000000272: ext4_iget_extra_inode:5025: inode 15 [ 264.759223][ C1] EXT4-fs (loop5): last error at time 2000000272: ext4_iget_extra_inode:5025: inode 15 [ 264.798365][T14285] loop5: lost filesystem error report for type 5 error -117 [ 264.799067][T14285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.851348][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.020033][T14321] xt_hashlimit: size too large, truncated to 1048576 [ 265.034509][T14323] netlink: 'syz.3.3275': attribute type 10 has an invalid length. [ 265.116829][T14332] FAT-fs (loop7): Directory bread(block 64) failed [ 265.131436][T14332] FAT-fs (loop7): Directory bread(block 65) failed [ 265.144476][T14332] FAT-fs (loop7): Directory bread(block 66) failed [ 265.151542][T14332] FAT-fs (loop7): Directory bread(block 67) failed [ 265.158505][T14332] FAT-fs (loop7): Directory bread(block 68) failed [ 265.165543][T14332] FAT-fs (loop7): Directory bread(block 69) failed [ 265.172173][T14332] FAT-fs (loop7): Directory bread(block 70) failed [ 265.179391][T14332] FAT-fs (loop7): Directory bread(block 71) failed [ 265.187566][T14332] FAT-fs (loop7): Directory bread(block 72) failed [ 265.195156][T14332] FAT-fs (loop7): Directory bread(block 73) failed [ 265.441887][ T4164] bio_check_eod: 11846 callbacks suppressed [ 265.441908][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.441908][ T4164] loop7: rw=1, sector=1192, nr_sectors = 576 limit=256 [ 265.467338][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.467338][ T4164] loop7: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 265.484639][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.484639][ T4164] loop7: rw=1, sector=1960, nr_sectors = 2088 limit=256 [ 265.508064][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.508064][ T4164] loop7: rw=1, sector=4048, nr_sectors = 2088 limit=256 [ 265.533150][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.533150][ T4164] loop7: rw=1, sector=6136, nr_sectors = 2600 limit=256 [ 265.555306][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.555306][ T4164] loop7: rw=1, sector=8736, nr_sectors = 2056 limit=256 [ 265.572438][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.572438][ T4164] loop7: rw=1, sector=10792, nr_sectors = 2080 limit=256 [ 265.597509][T14357] netlink: 'syz.1.3289': attribute type 10 has an invalid length. [ 265.614332][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.614332][ T4164] loop7: rw=1, sector=12872, nr_sectors = 2048 limit=256 [ 265.632851][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.632851][ T4164] loop7: rw=1, sector=14920, nr_sectors = 2048 limit=256 [ 265.656269][ T4164] kworker/u8:12: attempt to access beyond end of device [ 265.656269][ T4164] loop7: rw=1, sector=16968, nr_sectors = 2056 limit=256 [ 265.826225][T14357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.837592][T14357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.019709][T14392] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3296: inode has both inline data and extents flags [ 266.037055][T14392] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.037300][T14392] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3296: couldn't read orphan inode 15 (err -117) [ 266.046511][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 266.046541][ C1] EXT4-fs (loop7): initial error at time 2000000273: ext4_orphan_get:1391: inode 15 [ 266.046569][ C1] EXT4-fs (loop7): last error at time 2000000273: ext4_orphan_get:1391: inode 15 [ 266.083833][T14392] loop7: lost filesystem error report for type 5 error -117 [ 266.085190][T14392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.151001][T13757] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.305316][T14422] dummy0: entered allmulticast mode [ 266.334558][T14416] tc_dump_action: action bad kind [ 266.391795][T14431] EXT4-fs: Ignoring removed oldalloc option [ 266.415501][T14431] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 266.446323][T14431] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.3302: iget: bogus i_mode (4) [ 266.459702][T14431] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.461203][T14431] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3302: couldn't read orphan inode 15 (err -117) [ 266.470399][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 266.470423][ C1] EXT4-fs (loop0): initial error at time 2000000273: ext4_orphan_get:1391: inode 15 [ 266.470467][ C1] EXT4-fs (loop0): last error at time 2000000273: ext4_orphan_get:1391: inode 15 [ 266.507587][T14431] loop0: lost filesystem error report for type 5 error -117 [ 266.509924][T14431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.568216][ T9500] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.600424][T14446] vlan0: entered promiscuous mode [ 266.632668][T14446] vlan0: entered allmulticast mode [ 266.654521][T14446] hsr_slave_1: entered allmulticast mode [ 266.678211][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 266.678228][ T28] audit: type=1400 audit(2000000274.109:2926): avc: denied { relabelfrom } for pid=14448 comm="syz.7.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 266.709421][T14463] EXT4-fs: Ignoring removed bh option [ 266.714193][ T28] audit: type=1400 audit(2000000274.119:2927): avc: denied { relabelto } for pid=14448 comm="syz.7.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 266.743280][T14463] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.753597][T14450] netlink: 'syz.7.3314': attribute type 63 has an invalid length. [ 266.771880][T14450] lo: entered promiscuous mode [ 266.786928][T14450] lo: entered allmulticast mode [ 266.795347][T14463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.819472][T14463] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.892735][T14464] ================================================================== [ 266.900930][T14464] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 266.908004][T14464] [ 266.910352][T14464] write to 0xffff888104645730 of 8 bytes by task 12798 on cpu 0: [ 266.914182][T14478] lo speed is unknown, defaulting to 1000 [ 266.918094][T14464] release_task+0x6ef/0xb60 [ 266.918130][T14464] wait_consider_task+0x1160/0x1670 [ 266.918166][T14464] __do_wait+0xf9/0x510 [ 266.918197][T14464] do_wait+0xb6/0x240 [ 266.918229][T14464] kernel_wait4+0x19f/0x210 [ 266.918261][T14464] __x64_sys_wait4+0x91/0x120 [ 266.918288][T14464] x64_sys_call+0x2aee/0x3020 [ 266.918314][T14464] do_syscall_64+0x12c/0x370 [ 266.918344][T14464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.966263][T14464] [ 266.968620][T14464] read to 0xffff888104645280 of 3264 bytes by task 14464 on cpu 1: [ 266.976541][T14464] memcpy_and_pad+0x48/0x80 [ 266.981084][T14464] arch_dup_task_struct+0x2c/0x40 [ 266.986144][T14464] dup_task_struct+0x6e/0x940 [ 266.990850][T14464] copy_process+0x37e/0x20c0 [ 266.995464][T14464] kernel_clone+0x16b/0x5b0 [ 266.999991][T14464] __x64_sys_clone+0x143/0x180 [ 267.004868][T14464] x64_sys_call+0x1222/0x3020 [ 267.009579][T14464] do_syscall_64+0x12c/0x370 [ 267.014197][T14464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.020196][T14464] [ 267.022534][T14464] Reported by Kernel Concurrency Sanitizer on: [ 267.028752][T14464] CPU: 1 UID: 0 PID: 14464 Comm: dhcpcd-run-hook Tainted: G W syzkaller #0 PREEMPT(full) SYZFAIL: failed to send rpc fd=3 want=496 sent=0 n=-1 (errno 32: Broken pipe) [ 267.040148][T14464] Tainted: [W]=WARN [ 267.043958][T14464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 267.054032][T14464] ================================================================== [ 267.077571][ T28] audit: type=1400 audit(2000000274.421:2928): avc: denied { write } for pid=3298 comm="syz-executor" path="pipe:[2497]" dev="pipefs" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 267.081191][T10910] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.102624][ T28] audit: type=1400 audit(2000000274.501:2929): avc: denied { recv } for pid=3428 comm="kworker/u8:7" saddr=10.128.0.163 src=35842 daddr=10.128.1.132 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 267.193729][T14486] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.211628][T14486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.461581][T11911] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.957726][ T4169] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.005501][ T4169] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.058795][ T4169] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.105273][ T4169] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.385336][ T4169] bridge_slave_1: left allmulticast mode [ 268.391158][ T4169] bridge_slave_1: left promiscuous mode [ 268.397098][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.405204][ T4169] bridge_slave_0: left allmulticast mode [ 268.410886][ T4169] bridge_slave_0: left promiscuous mode [ 268.416656][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.425308][ T4169] bridge_slave_1: left allmulticast mode [ 268.431015][ T4169] bridge_slave_1: left promiscuous mode [ 268.436773][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.444679][ T4169] bridge_slave_0: left allmulticast mode [ 268.450387][ T4169] bridge_slave_0: left promiscuous mode [ 268.456957][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.465511][ T4169] bridge_slave_1: left allmulticast mode [ 268.471338][ T4169] bridge_slave_1: left promiscuous mode [ 268.477038][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.485018][ T4169] bridge_slave_0: left allmulticast mode [ 268.490740][ T4169] bridge_slave_0: left promiscuous mode [ 268.496818][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.544199][ T1032] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 268.553027][ T1032] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 268.553331][ T4169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.571342][ T4169] bond0 (unregistering): Released all slaves [ 268.681805][ T4169] bond0 (unregistering): Released all slaves [ 268.733176][ T4169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.742708][ T4169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.752007][ T4169] bond0 (unregistering): Released all slaves [ 268.814704][ T4169] tipc: Disabling bearer [ 268.820171][ T4169] tipc: Left network mode [ 268.885931][ T4169] hsr_slave_0: left promiscuous mode [ 268.891804][ T4169] hsr_slave_1: left promiscuous mode [ 268.897641][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.907549][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.918553][ T4169] hsr_slave_0: left promiscuous mode [ 268.924359][ T4169] hsr_slave_1: left promiscuous mode [ 268.931845][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.939872][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.949411][ T4169] hsr_slave_0: left promiscuous mode [ 268.955126][ T4169] hsr_slave_1: left promiscuous mode [ 268.960967][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.968428][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.008194][ T4169] team0 (unregistering): Port device team_slave_1 removed [ 269.018402][ T4169] team0 (unregistering): Port device team_slave_0 removed [ 269.048041][ T3428] smc: removing ib device syz0 [ 269.054952][ T4169] pimreg (unregistering): left allmulticast mode [ 269.114195][ T4169] team0 (unregistering): Port device team_slave_1 removed [ 269.126409][ T4169] team0 (unregistering): Port device team_slave_0 removed [ 269.170753][ T4169] dummy0 (unregistering): left allmulticast mode [ 269.235613][ T4169] team0 (unregistering): Port device team_slave_1 removed [ 269.246628][ T4169] team0 (unregistering): Port device team_slave_0 removed [ 269.924461][ T4169] IPVS: stop unused estimator thread 0... [ 270.055494][ T4169] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.102029][ T4169] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.132231][ T4169] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.181592][ T4169] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.455655][ T4169] dummy0: left allmulticast mode [ 270.461340][ T4169] bridge0: port 3(dummy0) entered disabled state [ 270.468592][ T4169] bridge_slave_1: left allmulticast mode [ 270.474239][ T4169] bridge_slave_1: left promiscuous mode [ 270.480118][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.488130][ T4169] bridge_slave_0: left allmulticast mode [ 270.493786][ T4169] bridge_slave_0: left promiscuous mode [ 270.499721][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.508005][ T4169] dummy0: left allmulticast mode [ 270.513078][ T4169] bridge0: port 3(dummy0) entered disabled state [ 270.520467][ T4169] bridge_slave_1: left allmulticast mode [ 270.526140][ T4169] bridge_slave_1: left promiscuous mode [ 270.531988][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.539777][ T4169] bridge_slave_0: left allmulticast mode [ 270.545477][ T4169] bridge_slave_0: left promiscuous mode [ 270.551314][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.699779][ T4169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.709458][ T4169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.719157][ T4169] bond0 (unregistering): (slave veth0_to_hsr): Releasing backup interface [ 270.729389][ T4169] bond0 (unregistering): Released all slaves [ 270.779205][ T4169] tipc: Disabling bearer [ 270.784665][ T4169] tipc: Left network mode [ 270.792588][ T4169] hsr_slave_0: left promiscuous mode [ 270.798347][ T4169] hsr_slave_1: left promiscuous mode [ 270.804070][ T4169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.811890][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.819890][ T4169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.828491][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.838674][ T4169] hsr_slave_0: left promiscuous mode [ 270.846164][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.853956][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.866482][ T4169] veth1_macvtap: left promiscuous mode [ 270.872003][ T4169] veth0_macvtap: left promiscuous mode [ 270.878874][ T4169] veth1_vlan: left promiscuous mode [ 270.884193][ T4169] veth0_vlan: left promiscuous mode [ 270.970013][ T4169] team0 (unregistering): Port device team_slave_1 removed [ 270.980368][ T4169] team0 (unregistering): Port device team_slave_0 removed [ 271.035893][ T4169] team0 (unregistering): Port device team_slave_1 removed [ 271.045865][ T4169] team0 (unregistering): Port device team_slave_0 removed [ 271.527894][ T4169] IPVS: stop unused estimator thread 0... [ 274.826064][ T4164] bond1 (unregistering): (slave gretap1): Releasing active interface [ 274.881918][ T4164] bond0 (unregistering): Released all slaves [ 274.890457][ T4164] bond1 (unregistering): Released all slaves [ 274.942551][ T4164] tipc: Left network mode [ 274.950491][ T4164] hsr_slave_0: left promiscuous mode [ 274.956250][ T4164] batman_adv: batadv0: Removing interface: dummy0 [ 274.964159][ T4164] pimreg (unregistering): left allmulticast mode [ 275.390093][ T4164] IPVS: stop unused estimator thread 0...