last executing test programs: 5m40.543871255s ago: executing program 32 (id=847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xc6, &(0x7f0000000c00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @val={@val, {0x8100, 0x1, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbfb200a50f2dbc43efa8693d96852e4451b57d037ad3c04594282423424d00000000000000000000000000001000", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 4m31.260919493s ago: executing program 33 (id=1314): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0xffffffffffffff80, 0x20da, 0x8, 0xa, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x7, 0x1}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x7, 0x20e, 0x8, 0x400, 0x800, 0xfffffff6, 0x7, r2}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x4, 0x30}, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c, 0x0, r1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x16}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r3, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59cf27bd7000010000000800000014000180060001000f00000008000500"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) 4m0.352178193s ago: executing program 34 (id=1510): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f00000003c0)={[{@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@bsdgroups}]}, 0x1, 0x533, &(0x7f0000000880)="$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") ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000240)={0x4, 0x7, 0x0, 0xae7, 0x7ffe, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0xa, 0x43f, 0xd, 0x22000, 0x1, 0x91bd, '\x00', r2, r3, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000240), 0x0}, 0x20) openat$incfs(r0, 0x0, 0x0, 0x9c37611dc13d0d17) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) close(r5) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3m27.530092157s ago: executing program 35 (id=1699): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x1158, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x1128, 0x2, [@TCA_BASIC_EMATCHES={0x1124, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10c4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x8}, {0xe, 0x966, 0x2, 0x1, 0x8, 0x0, 0x1}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x400, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x3}, {0x5, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xe}, {0xc, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="f4", @TCF_META_TYPE_VAR="68ca60", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="83d2", @TCF_META_TYPE_VAR='^', @TCF_META_TYPE_VAR="8a6aa82754", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x10, 0x1, 0x5}, {0x7, 0x4, 0x4000, 0x6, 0x6, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x10, 0x0, 0xcc}, "4b0c640b205727467973b49514b050f7c01e09039326966fb6d60e887504e1996769b6fe65a3b63ba8e31da2b789eb0c1997f743b079cee0b27aed6f3bf714cf30dddab8bc05a0159b6e0d8242b195a02a47b23e869e00e810701129189cae6bd24dff44b297dcad430dcecb3927c89740b6c1842c183b797cfd5e26fc76f5ce6492a8dfe227e7379ff4067d73424576407a34b2f015ac662b2941a8ae1305ae6f280ce67489d90404bec66c015f64d2a6ed7b9061ebc1c4a4c5a764b712ba14c94c2c07c8b795869faeb35d2e4432d7a35ea4d36b4c866f96b6f2d50fa53c52e605ba71f39c6c59d9fffa29487edf499dd67536c22887e8f661793e96677fc4127adb6ab61eb9f1343f116e1bd421eea1189c4ea0793743a94b6a9192ea1db4f2eddcaadbc2a6870d55c4d5bca297adccdb2715ff717fcb04343f4e54289aa963dfa85c728af11cdd2e12ccc9a6c721fbf0cfc564e672bfc4fa7d465308e163e1ba3bb089c46000f49b0639a75f66e74837ca9eafc7e5e8fec267ab725bfbc16a7df6b24382862c01fb61ec2eba2eb37162d0197047aa08c0a94dba4cdb1efb0f677787961d5bd897e8578967c9ef0b72ad5b0ef7ad1792c71aa9c93a6e1f870ddf94e43dfd6df22eb6d883e3e26d2860c637a3d6b77c8a8db742c27eebd61713b03d0fcc2744db79afccddbeecf755a34239b6826b4aefda623be9f40069c1a3c7340302bf7c4a26e89f11c3c443f1c5d1728d9ae22ff840b9fc33d0d4911180e2a2c9e01c606c1f05f8a2bae2897d058ba1733160a8a4db4e9f8bb973e294c603c0546959c54bac04e73ac359b71b99b35e868193f79be99f8157647fbd132e60fbf01d8c2dec33798f91f6a400a182eabeced71f3416d602237c3e88f8cd51fe35304265038dcb1b641e345d68145861c1a72b116339a7ee6b9ce343895f914b1b8c1e105d4677ce2b906ce17c4942c1a5fe2597056c48a9116f261535c25972f20ea6d35b5a9f96e5e3f00206603dce64c0fd7977e9f08cdcd4fad8b1d2ba08a619cabeef1c7e9334b504c461179147632e25798e7005ba587bf0c49a667eb029ae3f5b6f4eaea0cf3c4859d30faf1e5795eec484210fcd4d56237ed90c3ef1d93b452f68cea6f4162b7802ac347024b60e16678cf62312db0747f7346f82bffd94109db982a4d578e70a98bd806b3b3a827df041bbad25437da2421dca96741d15a43a842bdafa0e9c2b866e5e2bcaaf9c6a54cfd7379d0a227c1459f38e5f9599917ea7426b9ad8df1ed535c5a9781435a1c13107c20b69b946cf06cbf401be33311d2d4068b9ba3542aa64854f61117f7290d02140f4147e984d455e037e722ec38597fa074fe2b9cf8dfd7df92411a2d68bbc591c0641583eecc470dd3481a74384a678e551780b8e298c22348b22166075c6afc5cc4e819022bf707e09cffa4b815226585c44bf45e0d00d14d9bf205b57ee3769576a09ab68e0e0ee430395935cb6b2d7e751303990a639d37595b0f3c2baf585e8b695164f19bfe5ae3483355a4205a6efef9af33e4dd8b2bc767f005a8d94e4dfbe6ce773596048a03f3c42fa3a67a44c360741e534e29c0802b7f7d332c5e5d72ede71bd98ef41ce9390b9cbc1efdc2f3fc50405915e7e30d3c6f9392382900a269153016afcc969cd7d8f660cdd0ca9452d12feeaa07f52873fc729b916dfe9101fb400bd92e54b522e0b9f7c049bd0860b2299efc748c14d494ef79c6efd2acb2141c85a4e7c2f545308d9198874812576b5a6011cd19edbadb8a6bd4d6750ee5c4e18881d6e4f174027bebb3d7df05cba630d6c01322407f49151ed9bcf6acc6bd57aa22a7f07e866f4b6b18ece4f3a5b0bb1c81eaf5203000e0a46a73fb3bc4b08ea626142798e606ee2de3889ba9dba597767ab0749dc5afcc4ca48c0ff6ae05f8ea5cb89dc6ab6db70a93b35b41c06c5bb82097ea0362e01c61b4a35f1a35a861af272d4754447e75fa1d9b9fb02a7e11ef20814f8dca9f745c2e401b83687bd3975141e7bc4e364b3bbc75708f1302a1082d53803ec4a6ed022b9035027e76f2fc881149d672c7a4c559411ee863ca5235fe85c95e7bc82db76b3a1a5f2031f7c8c7e26de5adec8f6390709d50aeaf6778d03c69065f61439e0db93de3a6c45bc72f51e90d20dcae6e6250622853106b29dd87f7fcf89d1f8dffb32926ff508a86b6f80a553ca7a294bf4eab2249cf8d2f89c4e90a9bef1b00fce940fa77947cf21a65231fa4785b4832bf8b8bf4a74940d97ec6490efd53592a305d73b2edd19e8e6b5d64327db4fea23a505beb0c12f9cbaa549fcc60dcaa713939fbdc76ea69c714c8235c98ab779f2318621ddea2d54c5e869263709a15527c16f9119f7fbded7b7497b1203394a68d4f1532ac50a1227d194fbc53ef148a0a61575d9a48370ca7677402e45a838c606395769cca412648917555effad113a6b40ccf8fa3d13a1b6f025a08743ca53e3e16bf708b1da0baef9a45418eb78ca122f665dec6073576d940ef45c2117ed85d90b4c6a305cf147a6cf993684fdc60f17413a31c4458323d1adda294dfc7bccb99d928ef76fb431cdefa2c21698491fb6d36564532074cca3e3b1970b388450ba865c2048ecf3442ddeb3ed4201ea7ce6140d63fdb27be604a5b7ad90720f9461919e3b491b1b0bbccbd579c8eaba8d7271932a63591bc18daff17cbe587662cefac97837c44cc3508343d4d05eb8a6edd22ac84d8e963f77c9941ae7dadee25e2aeb915fa7e52193a377d6ce820b683fd2b2b96bd59c033b4ad735e82d7d54c21c3b95268cef6aaca541f560f26eb8aa93dd84be17e6dace5e3cbea186ca366ee8ae17ec46289993991ce54a27cc0c196828317dc6f88773dd0808d4b2cfd20460906d6e36ab5b59df7cc57eda1a3dacc07b7c33b1718fafd34ae58b180fb49654e75e90ada1190b8e2fb5a0019d20bfbcbd0e1b7596928cabb798fb1ea11e2aa1c9ddf257e7053199f8eb78e6cc628a26cc19923d0b83173ba999d368080d01181bc000d531fab68d76af8d8ca5a104579a47a7b99bc05e8745ffc4bcd56cb10e69652200a8ac6b4ca1a18c8ded86094742999add167dbe9708f857fc5770663846bed5e47bfbd0669fcaac8bdfb61e8d07047a455cbc65bb7ec6c0f1271026ef93e155267ae5000157a1ddfbc01d128a8be13197d9719f7530f96f5324f5d9877e0bd884ff50000568de14c9473ac787e0aaf5c4fd7114a59d5630b2fbbe5f442e3244a5978d83381bfa507559e548de0414dd38ac239b872425fe45e15495168d208f983b89e40dd3f7f7c5834f818f4e25723164913eac167380f3e47f8cb6c46fe926249037e1c4a210c530d085878e2a5149c47b1426f61903666ca56ed791fc768485b253b1712d979a78204f3c49e00584f903a790b7c4ac08585e3f96e691b65beb68af00495c970ddc8c401772bd8697cc4b901de3acda10dda70c66678b858d22445b71844bfa42783e85739b437150cb80a088142f3cbc1f4148bcc8511f955019873a3446b17a7f9982ba19f73b70e80895f17e16fa545d8e17dc02c2a67d5b29f5e349015827fa11c7044fcc9a6fc47719951f50b9f3aba664b2183f52dbe591158c7b6cd83c1a3b9012fd9a08e0a8d3d85a6e0327ceca1c0283732aa1cca358c8dd7d85176dfd8ce8739a4c37767309e721cc757ec2fcf13830a63b6c9acbf72b5a92609a4c00fee8b4e74235e2ae976d40ea9855e098353016f5fc60fca41d5a91ec75f41ea31966ea54c5aee71334859d96fd45a64e0e74369ada8da69d0592d74657c64a29181afca501074dee77146699447a382c062e0af564146d9cfee588085c93a77268cdd980fac891103980040b58b3024f7a56a0349c19a34b810d1638a2bce25e2398e2046f0abb56afa1cd39f90386e730a7ec203cf7e31d535437930aa4e7da66d65a759d9fbdfb19c0fddca1fdaf98604a0ec225b1156a95ddb85fccdb98a9c9336cb79285ae974a4d93533c5d004c412a24f452c083c6a9d42ffc4cfee7ebdca68d65a5c27b3e43cdf9d6ecd83b62d713677e73d137c6740f50ffe03ec5fcc37818da9b006a0bdf9dc8b1c313960a5f4216e72be7cd6f31d0893a3b0eaec5e113342bd3350c1f40a57fb6ebbad572392ff40ae35de970f84258958ec3c9f6cf9dc35c0c0cf238dcb1a94ac74baac9b6cedf6b8e282bdd2558d809aa0aab08b28ebc3446add8e9b124dba20cc3ff4de13f5ed6f67f4e4364eaf232a2f22c239eb6a080392113a7f312c5dae4ab15409dba7e74bacbf52305b0ea2ad107e01327481aa9a6d3c32fad7038e36e1a818ee7cd3ee5fb2ac102568b4548d6e376ee1dd4e65234767d950a1df2e89c88fbdaf186fcbdd727d5c81f8582da04b7dc99cffc441b2fc3a88c5b9b5346f6a05c7603b8a94f0c231ea4332617fa2e14d24d29db633318e396aee0092fa1b8d3ea6c617691572c77e5fc216b19348aff2ed19b723fb1f00c90a0488b3f8c6109d8cbc765865fcca0d864e81d2304cd58b8615aacca414159d1f358190ecd1350bfbb2eff43ffc8a7d7e963364309e5144ba9b16bb621a171d6c34a6543715f8aa3e039c883b8954252f643421151962a6718b4cb932484de9382c90281ef7848403a98d5517b0ee0be1839ca591ca12ed42d5b9a60807b08b96d376c492fa50933e641323d7ebe1370c11436799577158de95cc04d38ae8c3bfb825b969efcd932f045bd08826bd7c1fea3215594a57ee61f72d48a6cc8927e8569ecbf7cde8b9f0d41bb1c801213e0fce0932e5deade7bc24c5d2e46efc91e37653103b8f8deac3397389e89e42e4e2b8c9869fb7c517db49fcd2d23dcdb0e3049b4be55928a4c70fcbf66927174d2397577888c8b49f4b57155cb2c2247de1b32e2f30fdd08ba8f75c22a3e12781f4502a919ee0cd94c833446dadfff32b2b7862ce8071d7c1fabebc853e2096ee10893d39f7e800e5084f46ef357eea162929bc3f8fc0b6c9ca048a8d576816e4f8bc422970fb3413e10d85b315e8700189acae21520674bf78afc3b05efa9a7e5dec61076f33a5012e674fd67832c97fd21e6f0d8855877626f29bb9643b7fcd09fe6748d389028fcd1a7e53e41a37f7fb41169fc3940bbbf84daf1484537beb5833554169083be9ec7565b64c354d5428e6c19779d786c6c62908a422971b1cb75c3aa79d99c6eccca077e8ad3ff62c458487e810583782c6e3b9c8b054bb2a42db6cc8fc30d6f231b6c40da95551a002ed5c8be7f2de7bff76d1ba5d74f40ec124249dc2224b056e46bd9f54221a926ff4e314ad2c2f745aef9c59e0656e52ed422a06172064c4eba1d2b7943ee990f2994d360018758d918e97bcec0f7c7064bafbec7c554c4cef74c12ea17d05262a8a4d3f0ab6073fc6c101c5bfa055fe97cd10eecfa35b3f4a9f5b25ca6607f6a30440982d57edd314baef8b6fcc67f8d4063f7416fafbf8f163abcdf1b214a7f99a167640580d16395a6f8604c216297b87f6b859d6814e81b1e3a71c34df02bedf07f83bb9ab7a5e0f993da23d7c59756c5e6aeeeb20656c922ddc3f0b5acac4ed0594876b3ce5f11880f00f6abc060677a9e1327846a989f42c5085497c9380d1a76486e4eac7c65d689c1eda93616e0c10325a95da8aa0c559c6194a06e7851434502d500d0e3ee1d0962da706fd4b398b82dc7243fabe57c27e97ae265167889e1f5f4fc52bc4a7983bdebb7c1d384a11c5fec4a7b0d4b6db4a7f008d6e338"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0xc041}, {{0x1, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x5, 0x7, 0x8}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x4f4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0xf8, 0x2}, {0x8000, 0xf, 0x1}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0xa}, {0x32a, 0x39, 0x4, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1, 0x1, 0x5}, {0x5, 0xff, 0x4, 0x5, 0x5, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x925d}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc68e}}]}]}}]}, 0x1158}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 3m16.986575085s ago: executing program 1 (id=1759): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c884) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x4, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xfffffffa, @local, 0xc28}]}, &(0x7f0000000200)=0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='system.advise\x00', &(0x7f0000000440)=""/44, 0x2c) 3m14.622971002s ago: executing program 1 (id=1767): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x44}, 0x48) socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r1}) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000200), 0x2, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000200), 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, r5, 0x1) request_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)='{-\x00', r5) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2980c}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r8 = open(&(0x7f0000000140)='./file0/file0\x00', 0x64942, 0x86) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7000, 0x0, 0x3) (async) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7000, 0x0, 0x3) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) (async) pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3m13.876520488s ago: executing program 1 (id=1771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)=@newtaction={0x0, 0x30, 0x302, 0xcb8, 0x25dfdbfd, {}, [{0x0, 0x1, [@m_skbedit={0x0, 0x19, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x0, 0x2, {0x2, 0x1, 0xb, 0x80, 0x8}}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x8001}]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x0, 0x1}}}}, @m_bpf={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}]}, {0x0, 0x6, "668d7ce4f3822294a8d2594a191a2beec84daa11faf0e86481080746617680c6c841cc8e4878ef41053f094162f89ac22844377a1bb16e6fbc5cbfd86dcd4afa695890c254b87bf861e90b89ba077cc2b1a0ef4979a7253b9f8a65e2c3c1dd3320cc603c"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1}}}}]}, {0x0, 0x1, [@m_simple={0x0, 0xf, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, '^+--#.\x93!--\\-\xb6+\xd9.)/-+-\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0xffff, 0xffffffff, 0x10000000, 0xa, 0xfffffffc}}, @TCA_DEF_DATA={0x0, 0x3, 'NOTRACK\x00'}]}, {0x0, 0x6, "b82a7fe63a6297f08eab69b57fb6063bcf201f9d22a69ab13f2e3c55e66ecd54991af411d0b5a240a8111b1c139ecf9ef346ccaf5eb7d1350a1cbc494c7255a8f5a13859b79876b844f0ebbdac02188cde7c22fbf2673b82c0ac722e130b943ddd38be523f43c3537e7e3eecbdf58829e5e43802e799fcef7e0ecaccfe2d2c15f3ad29c600635a0e972a9195022feb86021eb2c1003db78e4a6106dbff4a8209698d212769cfbe6f4fb975421c61ce0aade262faf4bbc1e146eaf9f56e43a3fef11d475df736b421751872caa4b1aa2d1bbbe213330117f8c75785f22b49e009c85e5b4991fc4e00db88b94c80f665f748210086"}, {}, {0x0, 0x8, {0x3, 0x2}}}}, @m_mpls={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x0, 0x5, 0xd3fe5}, @TCA_MPLS_PARMS={0x0, 0x2, {{0x2, 0x5, 0x2, 0xfffffffe, 0x1}, 0x2}}, @TCA_MPLS_TTL={0x0, 0x7, 0xff}, @TCA_MPLS_TC={0x0, 0x6, 0x1}]}, {0x0, 0x6, "4668e446b4ad0c5359904008036bb5c64642cd6b4a66dd25337e62f0055ca3c05997ff71a30b9d950cf9609c215600205196ab4d7ca71560af964865db85c301dbfa4cf5ad777d7a7e35430db673290a78ec95cf743b62f75338b8488f2c8c3b62462fd284ef327745fd4c829fa2bb79338b0251bac235d367b18248f1848c6c91e45341170c06cdbd86cb67eac1133364aebbc5ca0af4b013a6f9953fc85ebc2efd07bf2a5935cb2df3133b2b3857ddbd2993d5e048489f50408e042632202781f204d0ea129fdcc63e3d4a1822d10fec7a23d39b466db753f9fee645b2c1c1"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_ife={0x0, 0x18, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x0, 0x5, 0xe}]}, {0x0, 0x6, "6fbc1906312a3ee3d053a0850831239860dfa673e3db9d5caaa7cac70bdc0571c763953096be5e4b1e39224f4fd7eb2551378861c635d7d451651f2e8b91df8bdace093b96ad73ee09d81cd1f433b57037829d171ed59d5b5d443523c78577ea7e92abc037f78b6232218ff363f6bbb51d8a81bbdd5e146bbd"}, {}, {0x0, 0x8, {0x3, 0x3}}}}, @m_gact={0x0, 0xf, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x0, 0x2, {0x6, 0xfffffff9, 0x7, 0x1000, 0x800}}, @TCA_GACT_PROB={0x0, 0x3, {0x0, 0x1e36, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x0, 0x2, {0x80, 0x3, 0x5, 0x8, 0x3}}, @TCA_GACT_PARMS={0x0, 0x2, {0x5, 0x3, 0x20000000, 0x6, 0xfffffffe}}]}, {0x0, 0x6, "68a82e1a1d88fe7172881cd1e88f4584cf81d97adf3970b642057295a67694255d70b5d40eff68e1cb30c0e5130cd593cb11cea2d8ded936f0a3fa3e2091a24d8297d8ab091835cdfeba810ddfdd4ef36a4fa0b01c9b588bb384f15f6df1944be0e25aa9f79afc5817aabb1c1f946d055d5b0c9b330927901b140084b627563dbdff33114e6f0b7fe48c90f76aaa46072efe4b387f38707fb392360ef99f70d64487ec0b663e16642b55726f39dc85f19531bc2fe2958b7050d20df2a22d11ef2eaf9e"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3}}}}]}, {0x0, 0x1, [@m_ct={0x0, 0x8, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x0, 0x3, 0x4}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x0, 0x6, "a39c15e4f627de1711fba9871d087eca4614bccef94dbfd7f56a19903c7d71fe0c6593a9c970c9f9524343f7ac0d15057e669c94a64060d5fa03cbe4dbb17ea1696d01eb2e742530391a3c7fe092c20be2e00d79ba5f2f1a0cfccf5f7d6914cccc30e43883c73b"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x24008011) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) (async, rerun: 32) rt_tgsigqueueinfo(0x0, 0x0, 0x34, 0x0) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000065d9b3af02802c00018014000300fe800000aa14000400fe19b66dd951fc6ddf6c3603934984b2c38800000000000002000000000000010c00028005000100000000000800074000000001180006801400040020010000000000000000000000006a6d58fd7266f43320252a310943809e0a42871030ad55766f95b024b9d24fd111524d0fe04a6048a1e38b2eedb35dc6d8b38f00"/252, @ANYRES32=r0, @ANYRESHEX=r4], 0xac}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000200000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004002001000000"], 0xb4}}, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) connect$inet6(r3, 0x0, 0x0) shutdown(r3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000068000903000000008db5d2d07fee000000000a0000000000000004000400"], 0x1c}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0x28f43000) (async, rerun: 32) waitid(0x1, 0x0, &(0x7f00000003c0), 0x80000000, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0x3a0af83a) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000980)=""/172, &(0x7f0000000140)=0xac) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2c, 0x3, 0x0) 3m13.548299365s ago: executing program 1 (id=1774): socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mmap(&(0x7f00003c1000/0x4000)=nil, 0x4000, 0x100000c, 0x13, r0, 0xa49d3000) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000000003000000060001"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x10000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) lseek(r4, 0x7, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xded3, 0x3180, 0x3, 0x60024e}, &(0x7f0000000340), &(0x7f0000000040)) 3m11.588189311s ago: executing program 1 (id=1785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3101, 0x8a04}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x50}}, 0x400c040) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) pselect6(0x40, &(0x7f0000000980)={0x0, 0x0, 0x7fffffff, 0x400000000000000, 0x800, 0x1, 0x0, 0x200000000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) 3m10.150947281s ago: executing program 1 (id=1798): r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001880)={{r3, &(0x7f00000001c0)='\x00\x00\x00\xec\xff\x00\x11\xee\x00', 0x244800, &(0x7f0000000240)={@align=0xfffffffffffffff8, {0x30a8, 0x7, 0x200, 0x6}}, 0xe7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000040)=0x5}, 0x3, &(0x7f0000001800)=[{0x1, 0x2, &(0x7f0000000740)='/dev/snd/timer\x00', &(0x7f0000000780)="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", 0x1000, 0x32}, {0x1, 0xf40, &(0x7f00000005c0)='\x00', &(0x7f0000000640)="8112972c8a3d05bc1bdc825b58d2808a18267a954dd5e308a5052231a13f89e750974640b9fc15dd8b40fb4ff22541879c67eda7bb4ae8386f008325b1ea574b4500dbe92a9e7fed006e61242d4b65294fd0e241dd34d3d222f4b32824881146e386cdcf69d099b992e9fffeb906ea92c0faf3dfcdc9e9ebc07ea9350c18fe4b6de17a8636398963e24ec94e605893fef42cbd08aab261ec3da4513f53bebb05624e484a95a5aad6157a7798de81b31d4dc71e873e7f43396d6e50def7da4f27c40a5aa1e72600e7759eb6a60d8dcc2eb4edb192794458f46cb9d56af4ab79d6", 0xe0, 0x1a}, {0x3, 0x9, &(0x7f0000001780)='tls', &(0x7f00000017c0)="72a8220247bb6a86ee4f73ea4f95e8409882bbfd9fc8620ec2d204ed68816696a5", 0x21, 0x2}]}) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000001900)={r1, 0x1, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x1e, 0x1, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) sendto$inet6(r5, &(0x7f0000000280), 0x0, 0x4000800, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f00000002c0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, &(0x7f00000000c0)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000019c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r7, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x3, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3m10.095054084s ago: executing program 36 (id=1798): r0 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001880)={{r3, &(0x7f00000001c0)='\x00\x00\x00\xec\xff\x00\x11\xee\x00', 0x244800, &(0x7f0000000240)={@align=0xfffffffffffffff8, {0x30a8, 0x7, 0x200, 0x6}}, 0xe7, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000040)=0x5}, 0x3, &(0x7f0000001800)=[{0x1, 0x2, &(0x7f0000000740)='/dev/snd/timer\x00', &(0x7f0000000780)="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", 0x1000, 0x32}, {0x1, 0xf40, &(0x7f00000005c0)='\x00', &(0x7f0000000640)="8112972c8a3d05bc1bdc825b58d2808a18267a954dd5e308a5052231a13f89e750974640b9fc15dd8b40fb4ff22541879c67eda7bb4ae8386f008325b1ea574b4500dbe92a9e7fed006e61242d4b65294fd0e241dd34d3d222f4b32824881146e386cdcf69d099b992e9fffeb906ea92c0faf3dfcdc9e9ebc07ea9350c18fe4b6de17a8636398963e24ec94e605893fef42cbd08aab261ec3da4513f53bebb05624e484a95a5aad6157a7798de81b31d4dc71e873e7f43396d6e50def7da4f27c40a5aa1e72600e7759eb6a60d8dcc2eb4edb192794458f46cb9d56af4ab79d6", 0xe0, 0x1a}, {0x3, 0x9, &(0x7f0000001780)='tls', &(0x7f00000017c0)="72a8220247bb6a86ee4f73ea4f95e8409882bbfd9fc8620ec2d204ed68816696a5", 0x21, 0x2}]}) ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000001900)={r1, 0x1, 0x1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map, 0x1e, 0x1, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) sendto$inet6(r5, &(0x7f0000000280), 0x0, 0x4000800, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f00000002c0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, &(0x7f00000000c0)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001940), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000019c0)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYRESOCT=r7, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x3, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3m6.492370112s ago: executing program 6 (id=1826): r0 = perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51040, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000011140100000000000000020008004a0000000000080001000000000008004b0013000000e4ff030001000000f2ebeb391bba60da2681d0ea3eede4543d733cdbf3d87fce1695240ac76c27421a93da691f69dfadee0b7a6f6a6f438f53bb0b56257eae051c59f2e91673aa8730015498b8bed036c8f62f70c30e5f3196f153d00c4ff6f3cc40fa208210b01560b40943e6"], 0x30}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02037f02210000000000000000000000030006000000000002000000ac14142e00000000000000000200010000000000100000007fffffff030005002b00000002000000ac1414aa000000000000000017000800"], 0x108}, 0x1, 0x7}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x16, "b7f38e1e3d30d3f9c6c64c7bd0cd9e75735fff"}) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, "06"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x15, 0x3, 0x0, 0x0, "484d7af47e69130ad0a8fb90d724e1f4f5ff54e86de6848dd6b4d4a8168e433455cef05ab487371a158f2e56bf702b8362cbf45814fe70d9f5b26910e1e82056"}}}}, &(0x7f0000000000)={0x0, 0x4, [0x6a4, 0x2b5, 0x162, 0x38b]}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xa8a) 3m6.469989653s ago: executing program 6 (id=1827): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r8) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'veth0_to_batadv\x00', @random="c73877277400"}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xe, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) (async) close(r8) (async) socket$inet6(0xa, 0x400000000001, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'veth0_to_batadv\x00', @random="c73877277400"}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) 3m5.773793746s ago: executing program 6 (id=1832): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xa040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200003bb9000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x40000, 0xffffffffffffff42, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3m5.683528381s ago: executing program 6 (id=1834): r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x1) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000200)={0xa, 0x4e1e, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0}, 0x40) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESDEC, @ANYRES8=0x0], 0x4, 0x7cc, &(0x7f0000002200)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) r2 = syz_clone(0x88020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000ebffffff0080000085000000750000009500000000000000"], 0x0, 0x7}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe9f3}, r2, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) ioprio_set$pid(0x1, r2, 0x2007) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0xa}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d6c8}, @TCA_FLOW_XOR={0x8, 0x7, 0x129}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff00000000000000010500000010000000000000000000000402"], 0x0, 0x4e}, 0x11) (async) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x4) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/config\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x8}}, './bus\x00'}) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x4, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x2, 0x11, 0x7, 0x9}, {0xc, 0x6, 0x8, 0x384}, {0x6, 0x0, 0x0, 0x66a}]}) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) open(&(0x7f0000000540)='./bus\x00', 0x0, 0x0) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 3m5.476436952s ago: executing program 6 (id=1838): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000140)={0x6, 'pimreg\x00', {0x2}, 0x22}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000540)={0x0, 'bond_slave_0\x00', {0x2}, 0x8009}) 3m4.836804803s ago: executing program 6 (id=1843): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$qrtr(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_emit_ethernet(0xc2, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @cipso={0x86, 0x4f, 0x0, [{0x0, 0x10, "b4f6db7ef939984b6ca70f000000"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xf, "ccf0294e2a3bdb4aa40b249e8e"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 3m4.807737435s ago: executing program 37 (id=1843): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$qrtr(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_emit_ethernet(0xc2, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @cipso={0x86, 0x4f, 0x0, [{0x0, 0x10, "b4f6db7ef939984b6ca70f000000"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xf, "ccf0294e2a3bdb4aa40b249e8e"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 2m55.589791598s ago: executing program 9 (id=1902): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x3}, 0x3003, 0x0, 0x0, 0x2, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000300)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sctp\x00') pread64(r8, &(0x7f0000000600)=""/4097, 0x1001, 0x110) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x109800, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r9, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x1, 0x62d, &(0x7f0000000c40)="$eJzs3c9rHNcdAPDvzEqyZauVXUqpTUsFPdhQvJZcU7c92e6hPhhqqA8h5GBhSY7w+geWDLZjsAw5JJBACLmG4Ev+gZBr0DXkFgKJbzkHnBCc5JAEb5jZWWuz2rU3kla78Xw+MDNv3szue98dvZ03MzuaAEprKhulEfsi4lwSMdmybCIaC6eK9R5+fft8NiRRr///qySSIq+5/qNiujsbJY3XfHwy4neV9eUu3bx1cbZWb7gTcXj50tXDSzdvHVq8NHth/sL85Zkj/zx6bPpfMx9uTZy7i+mp0//70+svv/iPhU9qh5I4HmdHX5qLtji2ylTj040sxNb8kYg4liU6fC6wnSrF3+NoRPwhJqOSzzVMxuJrA60c0Ff1SmP/VB+rA6WTxKBrAAxGsx/QPLbvx3HwMHtwIhvf6BD/SHH0vjM/Ntr1MGk5MspyI/ZsQfkrEfHj7f1vZ0N0OQ8xsgXldC3/bkT8sdP2T/L49+SRZvGnkba8LktPF+c2svr9ZxN1SFrSvf393dlEaT/3S+Jv3Q5Z/MeLaZZ/ssv7P+0Uz1TbfNnaHwCDsXqi2JFnHZFY2/9lPcNm/yfa+z/19/NrQ+37ro3ovv9Lt+Ddny7v/4102v839/c783142tYPS2Ll2zOd33K0PePzV0+92a38qZb+XzZk5Tf7gj3YdNfwwd2I/W3xv5J/9Mnj7Z906P9mq5zrsYz/fvrlqW7LNhn/ptXvRRzoePyz1ivNUm3XJ5NoXp88OnN4YbE2P90Ydyzjg49eeLdb+YOOP9v+u7rE/6Ttn+Vd7bGM987cu9RI7Vi3bOKp8adfjCVn89RYPl5rXmPJ6WKVxuTG7PLytSNPrktznXw604j/4F87t/8u8ecHH+PNr8weXH3u4sNuyza5/R/Ve1yxmyz+uQ1u/zd6LOO756//uduy9fGvnZMY32hQAAAAAAAAUFJpfg02SauP02laLS68/T52pbUrS8t/W7hy/fJcxMH895CjafNK92RjPsnmZ4rfwzbnj7TN/z0i9kbEW5XxfL56/kptbtDBAwAAAAAAAAAAAAAAAAAAwJDYXdz//6h4Htg3lTStVgddK2Db9PMBc8Bw0/6hvPL2vz3PWwOGjP0/lFfH9u9LAUpBU4fy0v6hvLR/KC/tH8pL+4fy6t7+1y252++6AAAAAABbZu9fVu+PRMTKv8fzITNWLBsdaM2AftPGobwqg64AMDCPL/C7/R9Kp6f+//fFPwfsf3WAAUg6Zeadg/qTG/9qx1cCAAAAAAAAAAAAAH1wYN/q/cT9/1BKbvuD8trY/f+Vjb8UGBqd/vW/x4FAOTjGh5Lr4STAzm4L3P8PAAAAAAAAAAAAANtmIh+StFr8DHgi0rRajfhNROyJ0WRhsTY/HRG/jYjPKqM7svmZQVcaAAAAAAAAAAAAAAAAAAAAnjFLN29dnK3V5q+1Jn5Yl/NsJ5pPPB2W+rQmIul7EWm05YxHxDDE3p/ESEtOErGSbfmteOdk838/MQyfT5EY8BcTAAAAAAAAAAAAAAAAAACUUMu9x53tf2ebawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA22/t+f/9Sww6RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg1+mnAAAA//+EYjvS") r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 2m55.576064688s ago: executing program 8 (id=1903): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x24, 0x1d, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x3800000) (async) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0x3800000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r2, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x409000) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x9) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, 0x0) 2m55.389495137s ago: executing program 8 (id=1905): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12d1e83c190200000000000000", @ANYRES32=r0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffffffff10000000180001801400020067656e65766531000000008bda3d4f0e6d2f95000100000081d646b9dd533ec6e582359fc01913540a425feb859e4d72e675d62b48"], 0x34}}, 0x4044) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x233, &(0x7f00000004c0)={0x0, 0x53c4, 0x10100, 0xfffffffe, 0x21ab}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r5], 0x38}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a0083130000"], 0x20}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = getgid() setresgid(0x0, 0x0, r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000400000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x20000000, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000001c0), 0x4) 2m54.958167019s ago: executing program 8 (id=1906): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r5, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) 2m54.084671492s ago: executing program 8 (id=1907): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsold}, {@resuid}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 2m53.280250951s ago: executing program 9 (id=1908): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x9, 0x80805, 0xffffffff) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000640)={0x0, 0x16, 0x5, 0x8, 0x180}, 0x14) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x22, 0x0, 0xbd38, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa0e, 0x3, 0x0, 0x0, 0xfffffffffff7bbfe, 0x3, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000001, 0x8}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, 0xffffffffffffffff, 0x0) 2m52.865605451s ago: executing program 8 (id=1910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffd) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x200000000000009d, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xc0b2, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0xfffffdd3}], 0x1}, 0x4048081) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}}, 0x2000800) 2m52.28846653s ago: executing program 8 (id=1916): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) (async) r2 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x87, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0xffffffff}, 0x70bd2c, 0x34fd, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket$inet_sctp(0x2, 0x5, 0x84) 2m52.205874354s ago: executing program 38 (id=1916): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) (async) r2 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x87, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0xffffffff}, 0x70bd2c, 0x34fd, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) socket$inet_sctp(0x2, 0x5, 0x84) 2m51.840728752s ago: executing program 9 (id=1923): bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x8b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41dee000000003a49490834eb1600000200230a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x7, 0x2, [0x3, 0xf3]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x2}, 0xc) 2m51.67775067s ago: executing program 9 (id=1924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000380)={0x48, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2a, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xfac, '\x00', @long="322e981dd4e9e4dccdb2eceabeb57bc8"}}, @random={0x4, 0x7, "7e7f1500fab906"}]}]}, 0x48}}, 0x4000000) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) getdents64(r2, &(0x7f0000000180)=""/53, 0x35) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000c00)={'tunl0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4212, r5, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1dc, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x42}}, @filter_kind_options=@f_basic={{0xa}, {0x190, 0x2, [@TCA_BASIC_EMATCHES={0x128, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff7f}}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x9e1c, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xef6}, {0xb25, 0x9, 0xfff8, 0x1, 0x9, 0x2, 0xa74b546439a9262b}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0xfff9}, {0x2, 0x5}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x19e, 0x8, 0x8}, {0x0, 0x5, 0x4}}}, @TCF_EM_IPT={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}]}}, @TCF_EM_META={0x9c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x9}, {0x8, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="fafb4d029b", @TCF_META_TYPE_VAR='[h', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e16039fe4d55"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2c, 0xef, 0x1}, {0x7ff, 0x1, 0x2}}}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="9a9b21bf3e9a", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7cf, 0x8, 0x1}, {0xfff, 0x0, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3}, {0x4, 0xfa, 0x2}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="38473777ea2684d0aa", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x27, 0x2}, {0x59, 0x9, 0x2}}}]}}]}]}, @TCA_BASIC_ACT={0x64, 0x3, [@m_sample={0x60, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x21, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) 2m50.86751679s ago: executing program 9 (id=1928): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/protocols\x00') r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x1a52, 0x5}, &(0x7f0000000140)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setresuid(0x0, r3, 0x0) write(r1, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/161, 0xa1}], 0x1, 0x8003d1, 0x8000003) 2m50.24949301s ago: executing program 9 (id=1931): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x7fffffe, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, 0xff000000, 0x0, 0xb, 0x5, {@mac=@random="23c530f1f332", {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0xc, 0x7, 0x9, 0x1, 0x5, 'ip6gretap0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x44c}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @loopback, @local, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FITRIM(r4, 0xc0185879, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xffffffffffffffa3, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0x5}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r7, 0x3}, &(0x7f00000004c0)=0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) clock_settime(0x7ffffffff000, 0x0) r8 = socket(0xa, 0x801, 0x0) getsockopt(r8, 0x0, 0x12, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r9 = socket$nl_rdma(0x10, 0x3, 0x14) accept$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 2m50.176873754s ago: executing program 39 (id=1931): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x7fffffe, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, 0xff000000, 0x0, 0xb, 0x5, {@mac=@random="23c530f1f332", {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0xc, 0x7, 0x9, 0x1, 0x5, 'ip6gretap0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x0, 0x44c}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@broadcast, @loopback, @local, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FITRIM(r4, 0xc0185879, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xffffffffffffffa3, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x0, 0x0, 0x0, 0x5}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r7, 0x3}, &(0x7f00000004c0)=0x8) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) clock_settime(0x7ffffffff000, 0x0) r8 = socket(0xa, 0x801, 0x0) getsockopt(r8, 0x0, 0x12, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) r9 = socket$nl_rdma(0x10, 0x3, 0x14) accept$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 1m56.014934496s ago: executing program 7 (id=2279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000119500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ffffff1fb50a00000000000005000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1m55.880392773s ago: executing program 7 (id=2280): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000004c0)={[{@resuid}, {@inlinecrypt}, {@dioread_lock}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}, {@minixdf}]}, 0x1, 0x46b, &(0x7f0000000b00)="$eJzs3M1vVFUbAPDn3s4AL/AyFfEDBK2isfGjpQWVhS40mrjQxEQXuKxtIchADa2JEKLVGFwaEvfGpYl/gStXRl2ZuNW9ISFKTEA3jrkz99LOMFOmMO1A5/dLLpwz98w958k953LmnBkCGFgj2R9JxPaI+DUiKo1sc4GRxl9XL5+b/vvyuekkarU3/0jq5a5cPjddFC3ety3PjKYR6adJXkmz+TNnT0xVq7On8/z4wsn3xufPnH36+MmpY7PHZk9NHj586ODEc89OPtOTOLM2Xdnz4dze3a++feH16SMX3vnxm6y99+5rnF8eRze2d1FmJAv8z1pd67nHVlPZHeDf2lKcSanfraFbQxGR3a5yffxXYiiWbl4lXvmkr40D1lT2zN7c+fRiDdjAkuh3C4D+KP6hzz7/Fsc6TT1uC5debHwAyuK+mh+NM6VI8zLlNax/JCKOLP7zZXZEyzpErc26AQDArfoum/88df38r7430ijywra8bCUihiPirojYGRF3R8SuiLgnL3tfRNy/yvpbt4aun3+mF282tm5k87/n872t5vlfMfuL4aE89/96/OXk6PHq7IGI2BERo1HenOUn2l28uMTLv3zeqf7l87/syOov5oL5RS6WWhboZqYWpno1Kb30ccSeUrv4k2s7AVlf2B0Re1Z36R1F4vgTX+/tVOjG8a+gB/tMta8iHm/c/8Voib+QrLw/Ob4lqrMHxotecb2ffj7/Rqf6byn+Hsju/9bm/t9SovJXsny/dn71dZz/7bOOnylLN9n/NyVv1fdgN+WvfTC1sHB6ImJT8lo93/T65NJ7i3xRPot/dP9S/BFL439n/p4s/gciIuvE+yLiwYh4KL93D0fEIxGxf4X4f3jp0Xc7nbsd7v9M2+fftf4/3Hz/V58YOvH9t53q7+75d6ieGs1fqT//bqBzc7bkJW62NwMAAMCdJ61/lz1Jx66l03RsrPF9+V2xNa3OzS88eXTu/VMzje+8D0c5LVa6KsvWQyeSxfyKjfxkvlZcnD+Yrxt/MfS/en5seq460+fYYdBt6zD+M78P9bt1wJq70T6a5wBsXK3jP+1TO4D15/faMLiMfxhc3Y7/Q2vcDmD9tRv/H7XkrQHCxmT+D4PL+IfBZfzD4DL+YSDdyu/61ypRWuHX++uWKK/4nwhInI30tmiGRJtEqQeju88PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75LwAA//+MOu7f") (async, rerun: 32) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x60, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x40, 0x7800, 0x7, 0x937b, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}}) (async) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="29bd72000000000000eaff000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x20, &(0x7f00000010c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=r4, @ANYRESOCT=r4], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x48044) (async) socket$netlink(0x10, 0x3, 0x1) 1m55.860382354s ago: executing program 7 (id=2281): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x9, 0x80805, 0xffffffff) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000640)={0x0, 0x16, 0x5, 0x8, 0x180}, 0x14) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x22, 0x0, 0xbd38, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa0e, 0x3, 0x0, 0x0, 0xfffffffffff7bbfe, 0x3, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x80000001, 0x8}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, 0xffffffffffffffff, 0x0) 1m55.048465654s ago: executing program 7 (id=2286): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() get_robust_list(r2, &(0x7f0000000800)=&(0x7f0000000680)={&(0x7f00000004c0), 0x0, &(0x7f0000000640)={&(0x7f0000000600)}}, &(0x7f0000000840)=0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/226, 0xe2}], 0x4, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x102, &(0x7f0000000480)={0x77359400}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x1800, 0x0) preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000002080)=""/4080, 0xff0}], 0x1, 0x806, 0x3) recvfrom(0xffffffffffffffff, &(0x7f0000000500)=""/238, 0xee, 0x2, &(0x7f0000000240)=@nl=@unspec, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x24040054) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000006c0)={'nr0\x00', {0x2, 0x0, @dev}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m54.774165128s ago: executing program 7 (id=2291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x41, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x8, 0x400, 0x9, 0xf94c}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="030429bd7000ffdbdf250100000006000a000200000005000700030000000c00090000edfd84ba69526a00b47da35adb00000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8804}, 0x48000) 1m53.961791378s ago: executing program 7 (id=2299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x3000000, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x7f, 0x2, 0x21, @private0, @mcast1, 0x7800, 0x40, 0x9}}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtfilter={0x4a8, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xd}, {0xffff, 0x9}, {0x0, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x474, 0x2, [@TCA_FW_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x7e1, 0x0, 0x91, 0x7, 0xc2b4, 0x6, 0x3, 0x6, 0x8, 0x2, 0x1b, 0x5, 0x7, 0x5, 0xb, 0x80, 0x6, 0x7, 0x67, 0x0, 0x4, 0x8, 0x5eec, 0x6, 0x3, 0x7fff, 0x1, 0x0, 0x7fff, 0x7, 0x1, 0x758c, 0x2, 0x423f48fc, 0x5, 0xd, 0x28f, 0x0, 0x4, 0x4e, 0x7, 0x79d2618, 0x0, 0x73, 0x8, 0x1, 0x3, 0x101, 0x2, 0x4a37, 0x9, 0x0, 0x8, 0x4, 0x2, 0x80000000, 0x3, 0xb7ac, 0xfffffffb, 0x10, 0x1, 0x3, 0x6, 0x5, 0x7c1, 0x8000, 0x5, 0x4, 0x3, 0x102, 0x40, 0x8000, 0x6, 0xe9, 0x7ff, 0x2, 0x1, 0x1, 0x0, 0x40, 0x7, 0xf, 0xbb46, 0x80000001, 0xc4, 0x7, 0x7, 0x4, 0x7ff, 0x2, 0x1, 0x3, 0x2, 0x1, 0x5, 0x7, 0x8, 0x9, 0xfffffff8, 0x2, 0x1, 0x428, 0xb, 0x80000001, 0xfffffffe, 0x8, 0x0, 0xb, 0x9, 0x10001, 0x40, 0x4, 0x365, 0x8, 0x50, 0x35, 0xfffffffc, 0x8, 0x8, 0x10000, 0x74, 0x6, 0x3, 0x7, 0x4, 0x486, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x3ff, 0x1, 0x3, 0xe1d, 0x9, 0x47b1000, 0x7, 0x4, 0x4, 0x5, 0xffffffff, 0xf, 0x9, 0x1, 0x5, 0x10000, 0xd7, 0x200, 0x7, 0x6, 0x24, 0xc63, 0x7, 0x8, 0x2bee, 0x6, 0x100, 0x3, 0x7, 0xfffffc01, 0x5, 0xffffffff, 0x8, 0x5, 0x4, 0x1, 0x0, 0x4b, 0x0, 0x5, 0x7, 0x2e8, 0x4b4, 0xa2, 0x7, 0x6, 0x6, 0x0, 0x9, 0x8, 0x4ca53f2, 0x0, 0x5, 0x7, 0x8, 0x271, 0xe, 0x1, 0x1, 0x9, 0x4, 0x2, 0x836, 0x0, 0x200, 0x8, 0x4, 0x1ebc, 0x5, 0x1, 0xad, 0x1, 0xed0c6cb, 0x2, 0xb, 0xa, 0x2, 0x7, 0x9b8a, 0x4, 0x3, 0x2cb, 0xffff, 0xfffffff7, 0x8, 0x8f9, 0x4, 0x7, 0x2, 0x1, 0x3ff, 0x10000, 0x0, 0x8, 0x9, 0xfd4, 0x5, 0x7, 0x1, 0x1, 0x2, 0x5, 0x8e, 0x0, 0x8, 0x401, 0x2, 0x5, 0x6, 0x5, 0xfffffffc, 0x9c84, 0x0, 0x3, 0x9, 0x877, 0x2, 0x6, 0x1, 0x7, 0x1b7, 0x3, 0x7fffffff, 0x7ff, 0x5, 0x1]}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_POLICE={0x38, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 1m53.765879007s ago: executing program 40 (id=2299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x3000000, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x7f, 0x2, 0x21, @private0, @mcast1, 0x7800, 0x40, 0x9}}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=@newtfilter={0x4a8, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xd}, {0xffff, 0x9}, {0x0, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x474, 0x2, [@TCA_FW_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x7e1, 0x0, 0x91, 0x7, 0xc2b4, 0x6, 0x3, 0x6, 0x8, 0x2, 0x1b, 0x5, 0x7, 0x5, 0xb, 0x80, 0x6, 0x7, 0x67, 0x0, 0x4, 0x8, 0x5eec, 0x6, 0x3, 0x7fff, 0x1, 0x0, 0x7fff, 0x7, 0x1, 0x758c, 0x2, 0x423f48fc, 0x5, 0xd, 0x28f, 0x0, 0x4, 0x4e, 0x7, 0x79d2618, 0x0, 0x73, 0x8, 0x1, 0x3, 0x101, 0x2, 0x4a37, 0x9, 0x0, 0x8, 0x4, 0x2, 0x80000000, 0x3, 0xb7ac, 0xfffffffb, 0x10, 0x1, 0x3, 0x6, 0x5, 0x7c1, 0x8000, 0x5, 0x4, 0x3, 0x102, 0x40, 0x8000, 0x6, 0xe9, 0x7ff, 0x2, 0x1, 0x1, 0x0, 0x40, 0x7, 0xf, 0xbb46, 0x80000001, 0xc4, 0x7, 0x7, 0x4, 0x7ff, 0x2, 0x1, 0x3, 0x2, 0x1, 0x5, 0x7, 0x8, 0x9, 0xfffffff8, 0x2, 0x1, 0x428, 0xb, 0x80000001, 0xfffffffe, 0x8, 0x0, 0xb, 0x9, 0x10001, 0x40, 0x4, 0x365, 0x8, 0x50, 0x35, 0xfffffffc, 0x8, 0x8, 0x10000, 0x74, 0x6, 0x3, 0x7, 0x4, 0x486, 0x0, 0x1, 0x7fffffff, 0xffffffff, 0x3ff, 0x1, 0x3, 0xe1d, 0x9, 0x47b1000, 0x7, 0x4, 0x4, 0x5, 0xffffffff, 0xf, 0x9, 0x1, 0x5, 0x10000, 0xd7, 0x200, 0x7, 0x6, 0x24, 0xc63, 0x7, 0x8, 0x2bee, 0x6, 0x100, 0x3, 0x7, 0xfffffc01, 0x5, 0xffffffff, 0x8, 0x5, 0x4, 0x1, 0x0, 0x4b, 0x0, 0x5, 0x7, 0x2e8, 0x4b4, 0xa2, 0x7, 0x6, 0x6, 0x0, 0x9, 0x8, 0x4ca53f2, 0x0, 0x5, 0x7, 0x8, 0x271, 0xe, 0x1, 0x1, 0x9, 0x4, 0x2, 0x836, 0x0, 0x200, 0x8, 0x4, 0x1ebc, 0x5, 0x1, 0xad, 0x1, 0xed0c6cb, 0x2, 0xb, 0xa, 0x2, 0x7, 0x9b8a, 0x4, 0x3, 0x2cb, 0xffff, 0xfffffff7, 0x8, 0x8f9, 0x4, 0x7, 0x2, 0x1, 0x3ff, 0x10000, 0x0, 0x8, 0x9, 0xfd4, 0x5, 0x7, 0x1, 0x1, 0x2, 0x5, 0x8e, 0x0, 0x8, 0x401, 0x2, 0x5, 0x6, 0x5, 0xfffffffc, 0x9c84, 0x0, 0x3, 0x9, 0x877, 0x2, 0x6, 0x1, 0x7, 0x1b7, 0x3, 0x7fffffff, 0x7ff, 0x5, 0x1]}, @TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_POLICE={0x38, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) 778.537812ms ago: executing program 0 (id=3275): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x4, 0xfffbfffd, 0x2, 0x0, "0c41920887e8d2b791f805000000000000006b", 0x4, 0x203}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8d) 706.207936ms ago: executing program 0 (id=3280): lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 667.569977ms ago: executing program 0 (id=3282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 616.89848ms ago: executing program 0 (id=3285): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00\a'], 0x30}}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 578.592602ms ago: executing program 0 (id=3289): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x189642, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100342, 0x0) 504.515416ms ago: executing program 2 (id=3292): lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x1) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 482.788537ms ago: executing program 0 (id=3294): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819", 0x3d}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb60400"/257, 0x101}, {&(0x7f00000016c0)="c6dfdb26a49ec48957e875c14417cfa6a918590b27ece25631c4a48edeb8f6647ea31457872170ffe3409c6185690be77ccbb763023ea76084b05795b7e98d4c490b6c4801840c0e36bc3ceefcbf07e0cc39604a5acf43dd3d1394604f5e43b03feb66df33946b1b2b742e143e9983512adb8f6d9c", 0x75}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f0000000d00)="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", 0x145}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf", 0x62}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 458.266938ms ago: executing program 2 (id=3295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x4048043) 423.33944ms ago: executing program 4 (id=3297): rt_sigprocmask(0x2, &(0x7f0000000380)={[0xfffff7feffff7dff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000180)={[0x8]}, 0x8) 408.73172ms ago: executing program 2 (id=3299): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332566aaee7b1d58b9a64411f6bb174e", 0x39}], 0x1) 350.715353ms ago: executing program 4 (id=3301): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 305.457915ms ago: executing program 2 (id=3305): lsetxattr$security_capability(0x0, &(0x7f0000000040), 0x0, 0x0, 0x1) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 305.317955ms ago: executing program 4 (id=3306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) ptrace$setsig(0x4203, 0x0, 0x79c, &(0x7f0000000540)={0x2d, 0x2, 0x3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x10000a, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 248.718638ms ago: executing program 5 (id=3308): bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000140)=""/36, &(0x7f0000000080)=0x24) 248.578918ms ago: executing program 3 (id=3309): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 248.304828ms ago: executing program 2 (id=3310): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x4048043) 192.514811ms ago: executing program 4 (id=3311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x101, 0x4000, 0x0, 0xffffffff}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 192.416831ms ago: executing program 5 (id=3312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10b000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 192.322661ms ago: executing program 3 (id=3313): socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x8002, 0xfffffffffffffffe, 0x8000000000000002}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 185.119881ms ago: executing program 3 (id=3314): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) writev(r0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2) 177.481512ms ago: executing program 4 (id=3315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r0, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[], 0x0) 165.074282ms ago: executing program 5 (id=3316): r0 = socket$inet6(0xa, 0x3, 0xff) utime(0x0, &(0x7f00000000c0)={0x10000, 0x7ffffffffffffffe}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x659f, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 164.528952ms ago: executing program 2 (id=3317): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x404c004) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffe) mbind(&(0x7f00002b9000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 120.048404ms ago: executing program 3 (id=3318): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) 119.628884ms ago: executing program 4 (id=3319): setpgid(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x93765, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) read(r0, &(0x7f00000002c0)=""/87, 0x57) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) 74.771437ms ago: executing program 5 (id=3320): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="458f8f0bcf5462a0985e2189fce217b7eb55964813430f58b688ce", 0x1b}], 0x1, 0x0, 0x0, 0x2c}, 0x8800) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 74.529637ms ago: executing program 5 (id=3321): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 74.402037ms ago: executing program 3 (id=3322): socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x8002, 0xfffffffffffffffe, 0x8000000000000002}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 95.44µs ago: executing program 5 (id=3323): mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x4030, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f00000005c0)=ANY=[], 0x1, 0x65c, &(0x7f0000002280)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiXVr5pq5r3tGmYuxpBkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnz07Ut6nbauD2mqy+O9CtZ8T+Vy7qUTrr0neHsd+JfN3UlfXZF5fihrP3/e+f/H3y7WMiXPyGh16FImmGdpSxJY56/3H/ycDDYeTbnRL4CVJghaN3teqHvdex113ihbxpra9W7G63QtLySwu2w73aME7iFvh+YFee2qTUaq8atbPub3fWm3Xbzife/X69W18z7S9mWvft+JXQ2vHbb664nMfHsOOa++fTnaYhrd4zZfTzYWZ2WZBxUmyWoPi2oXq3Xa7V6vbZ2r3HvfrVaHJlQPUYjEXN/0eJrZn4Hb+ANFeL6/3dLaqusrja1JTP2x1FTgXx1JszP5PX/3bvuif0erv95lb80nH1ZSf2/lj67Nqn+T8jFyCQLjJtjTZj+ej/P9VL7eqKHGmigHT2bz3qvzy/Dt/uzLhUlT6F8eerI1rpcmWyKUUNrWlNVH2hDLYUyaslTW65CbStUX646yT4J5MpOWrEVOboto5oaamhVRq4q2pavTXW1rqZs/TuKol09Trb76gk5Kg+qzRJUPyFoUv3/xSdp1lPrvyXq/zdafvyaJQY4d1F2/n9K199ONgAAAAAA4G2wkr++W8l791clRWp5bbd63mkBAAAAAIA5St75vxI/LMatq7ImnP9HZ58bAAAAAACYDyv5jp0laTn5UL81/CbULB8CWDiDFAEAAAAAwBtK3v+/VpKi5Npr12Wd6vwfAAAAAAB8Dfz+0DX2i/k1dqP8bf2CpLC3ZP3ln0sKFq1Xva3vWnt2PMfey2JGPgHQb122LmYX6k0eSpKSZ457xbqaBmUXwbTSC/tKX+5Ou9a/FRxLoLSQ//liWgJrxeyZPtWNNOZG1u+j/YKSOWkvyy2v7VYcv/2gJtu+WOi7W/1fP338Gyk4GOfu48FO5cOPB4+SXF7Fk17txXl8ciSdwrRcXijbFlfHjviCWnmXf+h2lq2k32o+/gXZe4XDHc02/t/qZhpzczl9XN7P90Ay/nI8/lol2WXD0cej+uxPw9HXjo983I6YkEU5yeJWGnNr5Vb6kOeXZfG9BaleOb4PSvFLcLgt6oezmL4trH+NbIspWcTbYjXO4q/xioavhCNZrJ4ui5E9AgDnZXdYhZKLmI9eY/943X2do9z06v6jo728+CxKv3C4IBWz9yZO7KWs+Ii+kqxbJSUH1uLlg6Ps3o38iF7N6kpZE47o1TeobnFffx7eAylLe6Su/CeKoge1pN8/HvSbVtXP4wU+n9hv2K4vxCO8+2Lvl8kF8GMf7Xy087ReX12rvlet3qtrMRlG9kDtAQCMMf0eO1MjrPcOzqof/ePdtHWk4n3r4CMFFX2ojzXQI93JbyFwffxalw99DOHO6FlrHHtBOh5b052JZ3VJLU1jf7Zd+mEalPxeVL7I0Uo9XO/qW90HAACctZuNrDGhDs9S/+8k592SVi4fOu8+OGc/VsuP3yF4Us2tndk2AADgf40bfGkt939nBYHX+6DWaNTs/oZrAt/5iQm85rprvG7fDZwNu7vuml7g933Hb5teoCWv6YYm3Oz1/KBvWn5gen7obZmW13ZNduv30O3Y3b7nhL22a4eucfxu33b6pumFjult/rjthRtukCwc9lzHa3mO3ff8rgn9zcBxK8aErnso0Gu63b7X8uJm1/QCr2MH2+anfnuz45qmGzqB1+v76Qrzvrxuyw86yWorik59o0MAAL6Jnr/cf/JwMNh5NqmRnNFPiRk2SuNWmPfFO84AAHw1jFbpicpnkhAAAAAAAAAAAAAAAAAAAAAAABgx/St9p2wsjvuyoHQw5VcXZ1qPpXkndppG4fUX/9sJMRcOpuSb/3DMq3MYqdJGcf5rvnCar43OofGD3XSLToyJZ46dtXSwL4rz/+8QN55+MWFWFEXRyYsvHd2GpZMGeLRRlPSs9Aa74HyORwDOzn8DAAD//+I0QI0=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 0s ago: executing program 3 (id=3324): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) madvise(&(0x7f0000164000/0x4000)=nil, 0x4000, 0x64) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ce with an up link [ 442.568732][T13671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.585196][T13671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.672555][T13671] team0: Port device team_slave_0 added [ 443.176508][T13798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.253873][T13671] team0: Port device team_slave_1 added [ 443.425114][T13671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.447011][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.498415][T13671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.530491][T13671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.548067][T13835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=13835 comm=syz.2.2326 [ 443.563903][T13834] loop4: detected capacity change from 0 to 512 [ 443.570754][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.598970][T13671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.610180][T13834] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 443.621267][T13835] Cannot find set identified by id 3 to match [ 443.630025][T13834] EXT4-fs (loop4): 1 orphan inode deleted [ 443.638130][T13834] EXT4-fs (loop4): 1 truncate cleaned up [ 443.645886][T13817] __nla_validate_parse: 1 callbacks suppressed [ 443.645905][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 443.649469][T13834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.705079][T13834] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.2328: path /89/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 443.729463][T13834] EXT4-fs (loop4): Remounting filesystem read-only [ 443.734757][T13671] hsr_slave_0: entered promiscuous mode [ 443.747435][T13671] hsr_slave_1: entered promiscuous mode [ 443.754031][T13671] debugfs: 'hsr0' already exists in 'hsr' [ 443.760286][T13671] Cannot create hsr debugfs directory [ 443.783581][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.884383][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 443.940437][T13856] netlink: 'syz.3.2333': attribute type 16 has an invalid length. [ 443.948841][T13856] netlink: 'syz.3.2333': attribute type 17 has an invalid length. [ 444.062664][T13856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.185439][T13864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 444.200357][T13858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2334'. [ 444.635758][T13866] 8021q: adding VLAN 0 to HW filter on device bond22 [ 444.662715][T13866] bond21: (slave bond22): Enslaving as an active interface with an up link [ 444.794786][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2337'. [ 444.828132][T13671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 444.841625][T13883] 9p: Bad value for 'rfdno' [ 444.886895][T13671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 445.048821][T13885] 8021q: adding VLAN 0 to HW filter on device bond24 [ 445.064083][T13885] bond23: (slave bond24): Enslaving as an active interface with an up link [ 445.099656][T13671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 445.157274][T13671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 445.506655][T13671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.599416][T13671] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.645017][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.654380][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.703380][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 445.703399][ T28] audit: type=1326 audit(2847509581.021:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 445.722094][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.741418][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.751144][T13959] loop2: detected capacity change from 0 to 512 [ 445.946307][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2347'. [ 446.090022][T13671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.119707][ T28] audit: type=1326 audit(2847509581.031:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.163633][ T28] audit: type=1326 audit(2847509581.031:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.187965][ T28] audit: type=1326 audit(2847509581.031:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.215883][ T28] audit: type=1326 audit(2847509581.031:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.240686][ T28] audit: type=1326 audit(2847509581.031:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.271174][T13961] bond25 (unregistering): Released all slaves [ 446.278793][ T28] audit: type=1326 audit(2847509581.031:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.327852][ T28] audit: type=1326 audit(2847509581.031:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.399904][ T28] audit: type=1326 audit(2847509581.031:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.430132][T13956] loop4: detected capacity change from 0 to 1024 [ 446.487324][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 446.488008][ T28] audit: type=1326 audit(2847509581.031:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.4.2346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 446.608504][T13956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.674223][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2349'. [ 446.734250][T13956] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.776571][T14002] bond6 (unregistering): Released all slaves [ 446.795229][T14006] netlink: 'syz.2.2350': attribute type 16 has an invalid length. [ 446.805853][T13955] EXT4-fs (loop4): shut down requested (0) [ 446.815179][T14006] netlink: 'syz.2.2350': attribute type 17 has an invalid length. [ 446.865934][T14007] FAULT_INJECTION: forcing a failure. [ 446.865934][T14007] name failslab, interval 1, probability 0, space 0, times 0 [ 446.910372][T14007] CPU: 0 UID: 0 PID: 14007 Comm: syz.3.2349 Tainted: G W syzkaller #0 PREEMPT(full) [ 446.910488][T14007] Tainted: [W]=WARN [ 446.910497][T14007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 446.910575][T14007] Call Trace: [ 446.910583][T14007] [ 446.910592][T14007] __dump_stack+0x1d/0x30 [ 446.910627][T14007] dump_stack_lvl+0x95/0xd0 [ 446.910683][T14007] dump_stack+0x15/0x1b [ 446.910737][T14007] should_fail_ex+0x263/0x280 [ 446.910777][T14007] should_failslab+0x8c/0xb0 [ 446.910869][T14007] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 446.910897][T14007] ? __d_alloc+0x37/0x340 [ 446.910949][T14007] __d_alloc+0x37/0x340 [ 446.910985][T14007] ? radix_tree_iter_tag_clear+0x105/0x180 [ 446.911089][T14007] d_alloc_pseudo+0x1e/0x80 [ 446.911119][T14007] alloc_file_pseudo+0x91/0x190 [ 446.911156][T14007] anon_inode_getfile+0xa0/0x120 [ 446.911246][T14007] bpf_link_prime+0xfc/0x1d0 [ 446.911281][T14007] bpf_xdp_link_attach+0x216/0x5e0 [ 446.911399][T14007] link_create+0x4d2/0x690 [ 446.911432][T14007] __sys_bpf+0x35d/0x7e0 [ 446.911468][T14007] __x64_sys_bpf+0x41/0x50 [ 446.911536][T14007] x64_sys_call+0x10cb/0x3020 [ 446.911572][T14007] do_syscall_64+0x12c/0x370 [ 446.911601][T14007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.911623][T14007] RIP: 0033:0x7f49299fc799 [ 446.911639][T14007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.911732][T14007] RSP: 002b:00007f492840d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.911753][T14007] RAX: ffffffffffffffda RBX: 00007f4929c76180 RCX: 00007f49299fc799 [ 446.911768][T14007] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 000000000000001c [ 446.911781][T14007] RBP: 00007f492840d090 R08: 0000000000000000 R09: 0000000000000000 [ 446.911798][T14007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.911813][T14007] R13: 00007f4929c76218 R14: 00007f4929c76180 R15: 00007fff82d26968 [ 446.911837][T14007] [ 447.193647][T14006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.335256][T13671] veth0_vlan: entered promiscuous mode [ 447.357968][T13671] veth1_vlan: entered promiscuous mode [ 447.417817][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 447.450084][T13671] veth0_macvtap: entered promiscuous mode [ 447.478781][T13671] veth1_macvtap: entered promiscuous mode [ 447.525576][T13671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.566450][T13671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.607174][ T7170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.626432][ T7170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.635996][ T7170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.648131][ T7170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.912055][T14048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2355'. [ 447.946611][T14055] loop2: detected capacity change from 0 to 1024 [ 448.579895][T14091] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2359'. [ 448.859906][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2361'. [ 449.038229][T14100] bond1 (unregistering): Released all slaves [ 449.078427][T14104] FAULT_INJECTION: forcing a failure. [ 449.078427][T14104] name failslab, interval 1, probability 0, space 0, times 0 [ 449.102458][T14108] sctp: [Deprecated]: syz.3.2363 (pid 14108) Use of int in maxseg socket option. [ 449.102458][T14108] Use struct sctp_assoc_value instead [ 449.139667][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.5.2361 Tainted: G W syzkaller #0 PREEMPT(full) [ 449.139710][T14104] Tainted: [W]=WARN [ 449.139718][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.139733][T14104] Call Trace: [ 449.139742][T14104] [ 449.139751][T14104] __dump_stack+0x1d/0x30 [ 449.139782][T14104] dump_stack_lvl+0x95/0xd0 [ 449.139893][T14104] dump_stack+0x15/0x1b [ 449.139935][T14104] should_fail_ex+0x263/0x280 [ 449.139974][T14104] should_failslab+0x8c/0xb0 [ 449.139997][T14104] kmem_cache_alloc_noprof+0x66/0x400 [ 449.140069][T14104] ? alloc_empty_file+0x76/0x200 [ 449.140103][T14104] alloc_empty_file+0x76/0x200 [ 449.140131][T14104] alloc_file_pseudo+0xf6/0x190 [ 449.140201][T14104] anon_inode_getfile+0xa0/0x120 [ 449.140239][T14104] bpf_link_prime+0xfc/0x1d0 [ 449.140286][T14104] bpf_xdp_link_attach+0x216/0x5e0 [ 449.140327][T14104] link_create+0x4d2/0x690 [ 449.140353][T14104] __sys_bpf+0x35d/0x7e0 [ 449.140416][T14104] __x64_sys_bpf+0x41/0x50 [ 449.140459][T14104] x64_sys_call+0x10cb/0x3020 [ 449.140488][T14104] do_syscall_64+0x12c/0x370 [ 449.140514][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.140561][T14104] RIP: 0033:0x7f411dfcc799 [ 449.140655][T14104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.140676][T14104] RSP: 002b:00007f411c9e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.140697][T14104] RAX: ffffffffffffffda RBX: 00007f411e246180 RCX: 00007f411dfcc799 [ 449.140712][T14104] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 000000000000001c [ 449.140726][T14104] RBP: 00007f411c9e5090 R08: 0000000000000000 R09: 0000000000000000 [ 449.140740][T14104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.140804][T14104] R13: 00007f411e246218 R14: 00007f411e246180 R15: 00007fff3c8052f8 [ 449.140826][T14104] [ 449.144733][T14106] syzkaller0: entered promiscuous mode [ 449.372653][T14108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2363'. [ 449.379655][T14106] syzkaller0: entered allmulticast mode [ 449.606128][T14130] netlink: 'syz.0.2366': attribute type 16 has an invalid length. [ 449.659697][T14130] netlink: 'syz.0.2366': attribute type 17 has an invalid length. [ 449.790157][T14111] Set syz1 is full, maxelem 10763 reached [ 449.820190][T14130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.578248][T14174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'. [ 450.627303][T14174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 450.777179][T14174] bond7: (slave bond8): Enslaving as an active interface with an up link [ 450.942170][T14185] loop2: detected capacity change from 0 to 4096 [ 450.954334][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 450.954360][ T28] audit: type=1400 audit(2847509586.201:2457): avc: denied { append } for pid=14184 comm="syz.2.2375" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 450.999614][T14181] FAULT_INJECTION: forcing a failure. [ 450.999614][T14181] name failslab, interval 1, probability 0, space 0, times 0 [ 451.094299][T14181] CPU: 0 UID: 0 PID: 14181 Comm: syz.3.2374 Tainted: G W syzkaller #0 PREEMPT(full) [ 451.094343][T14181] Tainted: [W]=WARN [ 451.094369][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.094384][T14181] Call Trace: [ 451.094392][T14181] [ 451.094401][T14181] __dump_stack+0x1d/0x30 [ 451.094484][T14181] dump_stack_lvl+0x95/0xd0 [ 451.094510][T14181] dump_stack+0x15/0x1b [ 451.094609][T14181] should_fail_ex+0x263/0x280 [ 451.094638][T14181] should_failslab+0x8c/0xb0 [ 451.094659][T14181] kmem_cache_alloc_noprof+0x66/0x400 [ 451.094681][T14181] ? security_file_alloc+0x32/0xf0 [ 451.094710][T14181] security_file_alloc+0x32/0xf0 [ 451.094793][T14181] init_file+0x5b/0x1b0 [ 451.094825][T14181] alloc_empty_file+0x8b/0x200 [ 451.094930][T14181] alloc_file_pseudo+0xf6/0x190 [ 451.094969][T14181] anon_inode_getfile+0xa0/0x120 [ 451.095012][T14181] bpf_link_prime+0xfc/0x1d0 [ 451.095083][T14181] bpf_xdp_link_attach+0x216/0x5e0 [ 451.095130][T14181] link_create+0x4d2/0x690 [ 451.095155][T14181] __sys_bpf+0x35d/0x7e0 [ 451.095189][T14181] __x64_sys_bpf+0x41/0x50 [ 451.095261][T14181] x64_sys_call+0x10cb/0x3020 [ 451.095316][T14181] do_syscall_64+0x12c/0x370 [ 451.095349][T14181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.095376][T14181] RIP: 0033:0x7f49299fc799 [ 451.095392][T14181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.095412][T14181] RSP: 002b:00007f492842e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.095501][T14181] RAX: ffffffffffffffda RBX: 00007f4929c76090 RCX: 00007f49299fc799 [ 451.095520][T14181] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 000000000000001c [ 451.095537][T14181] RBP: 00007f492842e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.095553][T14181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.095570][T14181] R13: 00007f4929c76128 R14: 00007f4929c76090 R15: 00007fff82d26968 [ 451.095595][T14181] [ 451.682713][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 451.871755][T14220] loop4: detected capacity change from 0 to 2048 [ 452.296663][T14243] netlink: 'syz.3.2387': attribute type 16 has an invalid length. [ 452.310835][T14237] loop2: detected capacity change from 0 to 8192 [ 452.334235][T14243] netlink: 'syz.3.2387': attribute type 17 has an invalid length. [ 452.652986][T14243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.153069][T14259] 9p: Bad value for 'wfdno' [ 453.219581][T14261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2389'. [ 453.358983][T14265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.462532][T14265] bond0: (slave bond2): Enslaving as an active interface with an up link [ 453.585262][T14261] FAULT_INJECTION: forcing a failure. [ 453.585262][T14261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.668595][T14261] CPU: 0 UID: 0 PID: 14261 Comm: syz.4.2389 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.668640][T14261] Tainted: [W]=WARN [ 453.668649][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.668667][T14261] Call Trace: [ 453.668753][T14261] [ 453.668764][T14261] __dump_stack+0x1d/0x30 [ 453.668792][T14261] dump_stack_lvl+0x95/0xd0 [ 453.668816][T14261] dump_stack+0x15/0x1b [ 453.668839][T14261] should_fail_ex+0x263/0x280 [ 453.668925][T14261] should_fail+0xb/0x20 [ 453.668958][T14261] should_fail_usercopy+0x1a/0x20 [ 453.669003][T14261] _copy_to_user+0x20/0xa0 [ 453.669118][T14261] simple_read_from_buffer+0xb5/0x130 [ 453.669186][T14261] proc_fail_nth_read+0x10e/0x150 [ 453.669309][T14261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.669428][T14261] vfs_read+0x1ab/0x7f0 [ 453.669465][T14261] ? __rcu_read_unlock+0x4e/0x70 [ 453.669494][T14261] ? __fget_files+0x184/0x1c0 [ 453.669525][T14261] ? mutex_lock+0x57/0x90 [ 453.669569][T14261] ksys_read+0xdc/0x1a0 [ 453.669629][T14261] __x64_sys_read+0x40/0x50 [ 453.669700][T14261] x64_sys_call+0x2886/0x3020 [ 453.669730][T14261] do_syscall_64+0x12c/0x370 [ 453.669812][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.669841][T14261] RIP: 0033:0x7f703ed7cfce [ 453.669864][T14261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.669987][T14261] RSP: 002b:00007f703d816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.670012][T14261] RAX: ffffffffffffffda RBX: 00007f703d8176c0 RCX: 00007f703ed7cfce [ 453.670031][T14261] RDX: 000000000000000f RSI: 00007f703d8170a0 RDI: 0000000000000008 [ 453.670108][T14261] RBP: 00007f703d817090 R08: 0000000000000000 R09: 0000000000000000 [ 453.670199][T14261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.670219][T14261] R13: 00007f703f036038 R14: 00007f703f035fa0 R15: 00007ffebee31fa8 [ 453.670243][T14261] [ 454.282083][T14280] loop2: detected capacity change from 0 to 128 [ 454.290613][T14280] /dev/loop2: Can't open blockdev [ 454.307174][T14280] loop2: detected capacity change from 0 to 512 [ 454.335047][T14280] EXT4-fs: Ignoring removed nobh option [ 454.363903][ T28] audit: type=1400 audit(2847509589.701:2458): avc: denied { view } for pid=14282 comm="syz.5.2395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 454.669701][T14290] loop3: detected capacity change from 1024 to 0 [ 455.340046][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2401'. [ 455.811185][T14301] loop5: detected capacity change from 0 to 164 [ 455.818073][T14301] iso9660: Unknown parameter ', priority 0 [ 468.657196][T14612] syzkaller0: entered promiscuous mode [ 468.663684][T14612] syzkaller0: entered allmulticast mode [ 468.680240][T14612] tipc: Resetting bearer [ 468.931768][T14614] loop5: detected capacity change from 0 to 1024 [ 469.081688][T14601] tipc: Resetting bearer [ 469.116897][T14601] tipc: Disabling bearer [ 469.154101][T14615] tipc: Enabled bearer , priority 0 [ 469.324112][T14614] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.366470][T14615] syzkaller0: entered promiscuous mode [ 469.373038][T14615] syzkaller0: entered allmulticast mode [ 469.392347][T14615] tipc: Resetting bearer [ 469.501793][T14617] netlink: 'syz.3.2473': attribute type 16 has an invalid length. [ 469.517823][ T7102] tipc: Resetting bearer [ 469.526693][T14614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 469.536933][T14617] netlink: 'syz.3.2473': attribute type 17 has an invalid length. [ 469.545970][T14610] tipc: Resetting bearer [ 469.568429][T14610] tipc: Disabling bearer [ 469.597299][T14614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.438419][T14617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.610655][T13671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.630540][T14623] delete_channel: no stack [ 470.636407][T14623] delete_channel: no stack [ 470.857756][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 470.872680][T14643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.904227][T14623] loop4: detected capacity change from 0 to 1024 [ 470.929872][T14643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.971072][T14623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.991358][T14643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55828 sclass=netlink_route_socket pid=14643 comm=syz.5.2482 [ 471.094021][T14648] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 471.111979][T14648] syzkaller0: linktype set to 769 [ 471.132269][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2483'. [ 471.226828][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.298101][T14654] netlink: 'syz.4.2484': attribute type 16 has an invalid length. [ 471.317249][T14651] 8021q: adding VLAN 0 to HW filter on device bond27 [ 471.334628][T14654] netlink: 'syz.4.2484': attribute type 17 has an invalid length. [ 471.346540][T14651] bond26: (slave bond27): Enslaving as an active interface with an up link [ 471.402531][T14639] netlink: 'syz.3.2480': attribute type 1 has an invalid length. [ 471.449305][T14654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.509323][T14660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2485'. [ 471.614485][T14639] 8021q: adding VLAN 0 to HW filter on device bond11 [ 471.705376][T14664] tipc: Enabling of bearer rejected, failed to enable media [ 471.796333][T14671] loop0: detected capacity change from 0 to 512 [ 471.950315][T14674] tipc: Started in network mode [ 471.957658][T14674] tipc: Node identity 3eb8c8303a13, cluster identity 4711 [ 471.966961][T14674] tipc: Enabled bearer , priority 0 [ 472.170064][T14674] syzkaller0: entered promiscuous mode [ 472.177049][T14674] syzkaller0: entered allmulticast mode [ 472.196516][T14674] tipc: Resetting bearer [ 473.461282][T14671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.630005][T14665] tipc: Resetting bearer [ 474.205445][T14671] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.247631][T14665] tipc: Disabling bearer [ 474.263470][T11786] tipc: Node number set to 78366768 [ 474.320425][T14671] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 474.340594][T14671] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 474.357584][T14671] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 474.383035][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'. [ 474.523134][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2495'. [ 474.572156][T14695] 8021q: adding VLAN 0 to HW filter on device bond29 [ 474.590572][T14695] bond28: (slave bond29): Enslaving as an active interface with an up link [ 474.840241][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.021322][T14707] tipc: Enabling of bearer rejected, failed to enable media [ 475.280874][T11527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.019151][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 476.019170][ T28] audit: type=1400 audit(2847509611.351:2474): avc: denied { bind } for pid=14717 comm="syz.2.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.108148][T14723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2500'. [ 476.162941][ T28] audit: type=1400 audit(2847509611.351:2475): avc: denied { node_bind } for pid=14717 comm="syz.2.2501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 476.224662][ T28] audit: type=1326 audit(2847509611.391:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.264656][T14731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=14731 comm=syz.3.2504 [ 476.292292][ T28] audit: type=1326 audit(2847509611.391:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.334874][T14736] xt_recent: Unsupported userspace flags (000000b1) [ 476.343238][T14720] hsr0: entered promiscuous mode [ 476.358689][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 476.436153][ T28] audit: type=1326 audit(2847509611.391:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.482326][ T28] audit: type=1326 audit(2847509611.391:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.559848][ T28] audit: type=1326 audit(2847509611.391:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.688802][ T28] audit: type=1326 audit(2847509611.391:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.716862][ T28] audit: type=1326 audit(2847509611.391:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.754740][ T28] audit: type=1326 audit(2847509611.391:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14719 comm="syz.5.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 476.891124][T14743] bond1 (unregistering): Released all slaves [ 476.905840][T14746] netlink: 'syz.5.2508': attribute type 2 has an invalid length. [ 477.007335][T14752] tipc: Enabled bearer , priority 0 [ 477.227343][T14752] syzkaller0: entered promiscuous mode [ 477.233892][T14752] syzkaller0: entered allmulticast mode [ 477.253324][T14752] tipc: Resetting bearer [ 477.446658][T14744] tipc: Resetting bearer [ 477.511176][T14744] tipc: Disabling bearer [ 477.684270][T14758] loop0: detected capacity change from 0 to 1024 [ 477.720514][T14756] loop5: detected capacity change from 0 to 512 [ 477.744040][T14758] EXT4-fs: inline encryption not supported [ 477.785781][T14758] EXT4-fs: Ignoring removed bh option [ 477.796202][T14756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.852607][T14756] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.880911][T14758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.964637][T14767] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.2511: corrupted inode contents [ 477.979792][T14758] netlink: 'syz.0.2512': attribute type 39 has an invalid length. [ 478.016166][T14767] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.2511: mark_inode_dirty error [ 478.054764][T14767] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.2511: corrupted inode contents [ 478.095408][T14767] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2511: mark_inode_dirty error [ 478.144516][T14758] hsr_slave_1 (unregistering): left promiscuous mode [ 478.159584][T14767] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.2511: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 478.159584][T14767] [ 478.252004][T11527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.293790][T13671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.754916][T14769] loop0: detected capacity change from 0 to 8192 [ 478.888108][T14782] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2519'. [ 479.042351][T14779] loop2: detected capacity change from 0 to 512 [ 479.068250][T14779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2518'. [ 479.686094][T14797] loop2: detected capacity change from 0 to 128 [ 480.322706][T14821] netlink: 'syz.4.2530': attribute type 16 has an invalid length. [ 480.365934][T14821] netlink: 'syz.4.2530': attribute type 17 has an invalid length. [ 481.155609][T14821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.207768][T14832] tipc: Enabled bearer , priority 0 [ 481.373798][T14847] loop4: detected capacity change from 0 to 1024 [ 481.383326][T14847] EXT4-fs: Ignoring removed orlov option [ 481.393806][T14849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2540'. [ 481.443938][T14847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.508148][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.110383][T14828] tipc: Disabling bearer [ 482.403686][T14881] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 482.451177][T14884] netlink: 'syz.5.2549': attribute type 16 has an invalid length. [ 482.483254][T14884] netlink: 'syz.5.2549': attribute type 17 has an invalid length. [ 482.642254][T14896] loop2: detected capacity change from 0 to 1024 [ 482.653018][T14884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.745714][T14896] EXT4-fs: inline encryption not supported [ 482.785004][T14896] EXT4-fs: Ignoring removed nobh option [ 482.821325][T14896] EXT4-fs: Ignoring removed bh option [ 483.888577][T14908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2553'. [ 483.957851][T14910] loop4: detected capacity change from 0 to 164 [ 484.033118][T14909] tipc: Enabled bearer , priority 0 [ 484.103802][T14910] Unable to read rock-ridge attributes [ 485.858349][T14906] tipc: Disabling bearer [ 485.878110][ T3491] tipc: Node number set to 1775211235 [ 486.037332][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2563'. [ 486.051940][T14941] geneve2: entered promiscuous mode [ 486.139625][T14939] 8021q: adding VLAN 0 to HW filter on device bond7 [ 486.149327][T14947] netlink: 'syz.3.2565': attribute type 16 has an invalid length. [ 486.191736][T14939] bond6: (slave bond7): Enslaving as an active interface with an up link [ 486.327232][T14947] netlink: 'syz.3.2565': attribute type 17 has an invalid length. [ 486.469318][T14947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.205142][T14967] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2571'. [ 487.223441][T14968] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2572'. [ 487.233445][T14964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 487.264882][T14964] wireguard0: entered promiscuous mode [ 487.276266][T14964] wireguard0: entered allmulticast mode [ 487.310238][T14975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2575'. [ 487.350715][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 487.350731][ T28] audit: type=1326 audit(2847509622.691:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 487.436636][ T28] audit: type=1326 audit(2847509622.731:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.358803][T14985] loop2: detected capacity change from 0 to 164 [ 488.381874][ T28] audit: type=1326 audit(2847509622.731:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.408452][ T28] audit: type=1326 audit(2847509622.731:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.433765][ T28] audit: type=1326 audit(2847509622.731:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.457096][T14985] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 488.552796][ T28] audit: type=1326 audit(2847509622.731:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.799117][ T28] audit: type=1326 audit(2847509622.731:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.891614][ T28] audit: type=1326 audit(2847509622.731:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.949210][T14989] syzkaller0: entered promiscuous mode [ 488.954801][T14989] syzkaller0: entered allmulticast mode [ 488.963341][ T28] audit: type=1326 audit(2847509622.731:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 488.989400][ T28] audit: type=1326 audit(2847509622.731:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14963 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 489.262948][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'. [ 489.303168][T15009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'. [ 489.410246][T15011] tipc: Enabled bearer , priority 0 [ 489.622566][T15011] syzkaller0: entered promiscuous mode [ 489.630138][T15011] syzkaller0: entered allmulticast mode [ 489.648289][T15011] tipc: Resetting bearer [ 489.810861][T15013] loop2: detected capacity change from 0 to 1024 [ 490.123509][ T7170] tipc: Resetting bearer [ 490.238260][T15017] netlink: 'syz.0.2583': attribute type 16 has an invalid length. [ 490.249131][T15015] loop4: detected capacity change from 0 to 256 [ 490.256711][T14996] tipc: Resetting bearer [ 490.282557][T14996] tipc: Disabling bearer [ 490.459897][T15017] netlink: 'syz.0.2583': attribute type 17 has an invalid length. [ 491.289628][T15017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.340592][T15026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15026 comm=syz.4.2582 [ 491.479574][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.597011][T15032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2586'. [ 491.686734][T15032] 8021q: adding VLAN 0 to HW filter on device bond31 [ 491.703261][T15032] bond30: (slave bond31): Enslaving as an active interface with an up link [ 491.729397][T15039] loop2: detected capacity change from 0 to 512 [ 493.112019][T15045] syzkaller0: entered promiscuous mode [ 493.118532][T15045] syzkaller0: entered allmulticast mode [ 493.159531][T15050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.231353][T15050] wireguard0: entered promiscuous mode [ 493.237342][T15050] wireguard0: entered allmulticast mode [ 493.251831][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 493.251849][ T28] audit: type=1326 audit(2847509628.591:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.340463][T15062] loop4: detected capacity change from 0 to 164 [ 493.346976][ T28] audit: type=1326 audit(2847509628.591:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.372329][ T28] audit: type=1326 audit(2847509628.591:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.396999][ T28] audit: type=1326 audit(2847509628.591:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.421625][ T28] audit: type=1326 audit(2847509628.621:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.448565][ T28] audit: type=1326 audit(2847509628.621:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.476701][ T28] audit: type=1326 audit(2847509628.621:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.518722][ T28] audit: type=1326 audit(2847509628.621:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.542850][T15067] netlink: 'syz.5.2599': attribute type 16 has an invalid length. [ 493.555314][ T28] audit: type=1326 audit(2847509628.621:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.558048][T15067] netlink: 'syz.5.2599': attribute type 17 has an invalid length. [ 493.581575][ T28] audit: type=1326 audit(2847509628.621:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15049 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x7ffc0000 [ 493.600633][T15056] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 493.743836][T15067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.003317][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.085470][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'. [ 494.102336][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.988783][T15089] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2605'. [ 494.999165][T15089] netlink: zone id is out of range [ 495.004796][T15089] netlink: zone id is out of range [ 495.012403][T15089] netlink: zone id is out of range [ 495.127135][T15089] netlink: set zone limit has 8 unknown bytes [ 495.193177][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.430838][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2610'. [ 495.534901][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.564395][T15120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15120 comm=syz.2.2612 [ 495.578544][T15078] chnl_net:caif_netlink_parms(): no params data found [ 495.583268][T15120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2612'. [ 495.872604][T15115] syzkaller0: entered promiscuous mode [ 495.879038][T15115] syzkaller0: entered allmulticast mode [ 496.046673][T15129] syzkaller1: entered promiscuous mode [ 496.052775][T15129] syzkaller1: entered allmulticast mode [ 496.113282][T15078] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.130871][T15078] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.147336][T15078] bridge_slave_0: entered allmulticast mode [ 496.166072][T15078] bridge_slave_0: entered promiscuous mode [ 496.227298][ T58] bridge_slave_1: left allmulticast mode [ 496.235079][ T58] bridge_slave_1: left promiscuous mode [ 496.241510][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.311060][T15152] netlink: 'syz.4.2617': attribute type 16 has an invalid length. [ 496.321911][ T58] bridge_slave_0: left allmulticast mode [ 496.327890][ T58] bridge_slave_0: left promiscuous mode [ 496.334541][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.347167][ T58] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 496.369529][T15152] netlink: 'syz.4.2617': attribute type 17 has an invalid length. [ 497.421282][ T58] batman_adv: batadv0: Removing interface: ip6gretap1 [ 497.542069][ T58] bond5 (unregistering): (slave bridge1): Releasing active interface [ 497.583678][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.594143][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.610974][ T58] bond0 (unregistering): Released all slaves [ 497.619062][ T58] bond1 (unregistering): Released all slaves [ 497.636134][ T58] bond2 (unregistering): (slave bond3): Releasing backup interface [ 497.646178][ T58] bond2 (unregistering): Released all slaves [ 497.656184][ T58] bond3 (unregistering): Released all slaves [ 497.666224][ T58] bond4 (unregistering): Released all slaves [ 497.676082][ T58] bond5 (unregistering): Released all slaves [ 497.685811][ T58] bond6 (unregistering): (slave bond7): Releasing backup interface [ 497.701518][ T58] bond6 (unregistering): Released all slaves [ 497.721018][ T58] bond7 (unregistering): Released all slaves [ 497.739889][T15078] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.747529][T15078] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.758406][T15078] bridge_slave_1: entered allmulticast mode [ 497.761319][T15189] netlink: 'syz.5.2627': attribute type 1 has an invalid length. [ 497.774337][T15078] bridge_slave_1: entered promiscuous mode [ 497.781864][T15189] loop5: detected capacity change from 0 to 128 [ 497.809085][T15152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.827409][ T58] tipc: Left network mode [ 497.848659][T15078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.870628][T15078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.910678][T15078] team0: Port device team_slave_0 added [ 497.918486][T15078] team0: Port device team_slave_1 added [ 497.958534][ T58] hsr_slave_0: left promiscuous mode [ 497.966328][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.997700][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.013251][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.062684][ T58] veth1_macvtap: left promiscuous mode [ 498.068471][ T58] veth0_macvtap: left promiscuous mode [ 498.208862][ T58] team0 (unregistering): Port device team_slave_1 removed [ 498.223849][ T58] team0 (unregistering): Port device team_slave_0 removed [ 498.381844][T15218] loop4: detected capacity change from 0 to 1024 [ 498.457534][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 498.457562][ T28] audit: type=1400 audit(2847509633.791:2565): avc: denied { watch watch_reads } for pid=15216 comm="syz.4.2635" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 498.563530][T15208] tipc: Enabled bearer , priority 0 [ 498.605022][T15212] syzkaller0: entered promiscuous mode [ 498.610705][T15212] syzkaller0: entered allmulticast mode [ 498.617576][T15212] tipc: Resetting bearer [ 498.699409][T15192] tipc: Resetting bearer [ 498.749287][T15192] tipc: Disabling bearer [ 498.775778][T15078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.789519][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.828726][T15078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.842589][T15078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.868688][T15227] loop2: detected capacity change from 0 to 164 [ 498.877015][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.910862][T15078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.968859][T15231] siw: device registration error -23 [ 498.998442][T15078] hsr_slave_0: entered promiscuous mode [ 499.007100][T15078] hsr_slave_1: entered promiscuous mode [ 499.025383][T15078] debugfs: 'hsr0' already exists in 'hsr' [ 499.039960][T15078] Cannot create hsr debugfs directory [ 499.095285][T15246] netlink: 'syz.4.2641': attribute type 16 has an invalid length. [ 499.676953][T15246] netlink: 'syz.4.2641': attribute type 17 has an invalid length. [ 499.754906][T15246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 500.030890][T15257] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.054015][T15257] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.067113][T15263] tmpfs: Bad value for 'mpol' [ 500.132391][T15257] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.146208][T15257] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.160597][T15254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.184095][T15271] loop4: detected capacity change from 0 to 512 [ 500.209886][T15271] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 500.233792][T15257] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.250726][T15271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 500.259650][T15257] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.271799][T15271] System zones: 1-12 [ 500.276649][T15271] EXT4-fs (loop4): orphan cleanup on readonly fs [ 500.284679][T15271] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2644: bg 0: block 361: padding at end of block bitmap is not set [ 500.300415][T15271] loop4: lost filesystem error report for type 5 error -117 [ 500.309508][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 500.324246][ C0] EXT4-fs (loop4): initial error at time 2847509635: ext4_validate_block_bitmap:441 [ 500.329861][T15271] EXT4-fs (loop4): Remounting filesystem read-only [ 500.336145][ C0] EXT4-fs (loop4): last error at time 2847509635: ext4_validate_block_bitmap:441 [ 500.360892][T15271] EXT4-fs (loop4): 1 truncate cleaned up [ 500.367614][T15271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 500.392681][T15257] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.404233][T15257] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.404573][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 500.462901][T15078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.487154][T15078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.540150][T15078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.667320][T15078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 501.496749][T15301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2649'. [ 501.517514][T15301] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2649'. [ 501.550023][ T7087] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.558776][ T7087] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.568617][T15301] GUP no longer grows the stack in syz.4.2649 (15301): 200000006000-200000009000 (200000004000) [ 501.579774][T15301] CPU: 0 UID: 0 PID: 15301 Comm: syz.4.2649 Tainted: G W syzkaller #0 PREEMPT(full) [ 501.579832][T15301] Tainted: [W]=WARN [ 501.579842][T15301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.579860][T15301] Call Trace: [ 501.579870][T15301] [ 501.579881][T15301] __dump_stack+0x1d/0x30 [ 501.579953][T15301] dump_stack_lvl+0x95/0xd0 [ 501.579977][T15301] dump_stack+0x15/0x1b [ 501.580016][T15301] fixup_user_fault+0x4fb/0x550 [ 501.580063][T15301] fault_in_user_writeable+0x5c/0xc0 [ 501.580103][T15301] futex_lock_pi+0x60b/0x7e0 [ 501.580204][T15301] ? __pfx_futex_wake_mark+0x10/0x10 [ 501.580316][T15301] do_futex+0x21f/0x380 [ 501.580352][T15301] __se_sys_futex+0x2f6/0x370 [ 501.580392][T15301] ? xfd_validate_state+0x45/0xf0 [ 501.580498][T15301] __x64_sys_futex+0x78/0x90 [ 501.580529][T15301] x64_sys_call+0x24ab/0x3020 [ 501.580574][T15301] do_syscall_64+0x12c/0x370 [ 501.580608][T15301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.580644][T15301] RIP: 0033:0x7f703edbc799 [ 501.580661][T15301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.580680][T15301] RSP: 002b:00007f703d3b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 501.580700][T15301] RAX: ffffffffffffffda RBX: 00007f703f036270 RCX: 00007f703edbc799 [ 501.580720][T15301] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 501.580738][T15301] RBP: 00007f703ee52c99 R08: 0000000000000000 R09: 0000000000000082 [ 501.580756][T15301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.580834][T15301] R13: 00007f703f036308 R14: 00007f703f036270 R15: 00007ffebee31fa8 [ 501.580861][T15301] [ 501.886664][ T7087] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.897688][ T7087] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.907051][ T7087] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.923844][ T7087] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.984367][ T7087] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.998100][ T7087] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.102344][T15326] netlink: 'syz.5.2655': attribute type 16 has an invalid length. [ 502.134433][T15326] netlink: 'syz.5.2655': attribute type 17 has an invalid length. [ 502.147588][T15078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.305331][T15326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 502.383197][T15078] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.415107][T15358] loop4: detected capacity change from 0 to 512 [ 502.440236][T15358] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 502.460852][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.468978][ T7087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.525135][T15367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2661'. [ 502.530337][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.542683][ T7087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.945960][T15078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.964551][T15397] tipc: Enabled bearer , priority 0 [ 502.999258][T15397] syzkaller0: entered promiscuous mode [ 503.005603][T15397] syzkaller0: entered allmulticast mode [ 503.012104][T15397] tipc: Resetting bearer [ 503.027365][ T28] audit: type=1400 audit(2847509638.361:2566): avc: denied { append } for pid=15400 comm="syz.3.2665" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 503.079648][ T28] audit: type=1400 audit(2847509638.361:2567): avc: denied { setattr } for pid=15400 comm="syz.3.2665" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 503.138270][ T28] audit: type=1400 audit(2847509638.371:2568): avc: denied { setattr } for pid=15400 comm="syz.3.2665" path="socket:[44473]" dev="sockfs" ino=44473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 503.233543][T15078] veth0_vlan: entered promiscuous mode [ 503.259689][T15078] veth1_vlan: entered promiscuous mode [ 503.286433][T15078] veth0_macvtap: entered promiscuous mode [ 503.295994][T15078] veth1_macvtap: entered promiscuous mode [ 503.312313][T15078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.334600][T15078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.350377][ T7089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.359460][ T7089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.372114][T15421] loop4: detected capacity change from 0 to 512 [ 503.391413][ T7089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.411622][ T7089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.440051][T15421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.509953][T15384] tipc: Resetting bearer [ 503.527611][T15384] tipc: Disabling bearer [ 503.530863][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2673'. [ 503.558419][T15421] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.2671: iget: checksum invalid [ 503.621669][T15437] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2674'. [ 503.670266][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.782766][T15446] netlink: 'syz.0.2677': attribute type 16 has an invalid length. [ 503.791184][T15446] netlink: 'syz.0.2677': attribute type 17 has an invalid length. [ 503.822380][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 503.965268][T15446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 504.050114][T15463] loop2: detected capacity change from 0 to 256 [ 504.093833][T15463] loop2: detected capacity change from 0 to 256 [ 504.103716][T15468] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2685'. [ 504.126951][T15471] xt_hashlimit: size too large, truncated to 1048576 [ 504.174801][T15468] openvswitch: netlink: Message has 8 unknown bytes. [ 504.187762][T15476] loop5: detected capacity change from 0 to 512 [ 504.220608][T15476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 504.250782][T15479] IPv6: sit3: Disabled Multicast RS [ 504.298476][T15476] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2684: bg 0: block 393: padding at end of block bitmap is not set [ 504.331692][T15476] loop5: lost filesystem error report for type 5 error -117 [ 504.331908][T15476] EXT4-fs (loop5): Remounting filesystem read-only [ 504.349510][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 504.355991][ C0] EXT4-fs (loop5): initial error at time 2847509639: ext4_validate_block_bitmap:441 [ 504.365918][ C0] EXT4-fs (loop5): last error at time 2847509639: ext4_validate_block_bitmap:441 [ 504.380704][T15487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=15487 comm=syz.2.2686 [ 504.395931][T15476] EXT4-fs (loop5): 2 truncates cleaned up [ 504.402793][T15476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.582761][T15488] tipc: Enabled bearer , priority 0 [ 504.683806][ T28] audit: type=1326 audit(2847509639.891:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 504.740286][T15488] syzkaller0: entered promiscuous mode [ 504.746618][T15488] syzkaller0: entered allmulticast mode [ 504.761022][T15488] tipc: Resetting bearer [ 504.774915][ T28] audit: type=1326 audit(2847509639.891:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 504.779138][ T58] tipc: Resetting bearer [ 504.798975][ T28] audit: type=1326 audit(2847509639.891:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 504.911771][ T28] audit: type=1326 audit(2847509639.891:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 504.940074][ T28] audit: type=1326 audit(2847509639.891:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 505.027596][T15497] loop0: detected capacity change from 0 to 8192 [ 505.040621][T15497] vfat: Unknown parameter '€' [ 505.048848][ T28] audit: type=1326 audit(2847509639.891:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 505.119594][ T28] audit: type=1326 audit(2847509639.891:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 505.162653][ T28] audit: type=1326 audit(2847509639.891:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 505.191230][ T28] audit: type=1326 audit(2847509639.891:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 505.216243][ T28] audit: type=1326 audit(2847509639.891:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15491 comm="syz.2.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd38b97c799 code=0x7ffc0000 [ 505.266080][T15480] tipc: Resetting bearer [ 505.290324][T15480] tipc: Disabling bearer [ 505.308005][T13671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.110638][T15509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.154729][T15509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.195244][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2693'. [ 506.207638][T15513] netlink: 'syz.0.2695': attribute type 4 has an invalid length. [ 506.261880][ T7089] Bluetooth: hci0: Frame reassembly failed (-84) [ 506.317199][T15524] loop0: detected capacity change from 0 to 1024 [ 506.334691][T15524] EXT4-fs: Ignoring removed bh option [ 506.395527][T15524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.485711][T15078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.637619][T15530] loop0: detected capacity change from 0 to 512 [ 506.698973][T15530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.757409][T15537] netlink: 'syz.3.2700': attribute type 16 has an invalid length. [ 506.776515][T15530] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.787278][T15537] netlink: 'syz.3.2700': attribute type 17 has an invalid length. [ 506.797613][T15530] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.927649][T15537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.389685][T15547] loop0: detected capacity change from 0 to 512 [ 507.429800][T15547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 507.440429][T15547] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 507.600867][T15551] tipc: Enabled bearer , priority 0 [ 507.683669][T15553] loop5: detected capacity change from 0 to 8192 [ 507.748667][T15551] syzkaller0: entered promiscuous mode [ 507.757287][T15551] syzkaller0: entered allmulticast mode [ 507.779067][T15551] tipc: Resetting bearer [ 507.791546][ T58] tipc: Resetting bearer [ 508.454972][ T8894] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 508.494385][T15549] tipc: Resetting bearer [ 508.517757][T15549] tipc: Disabling bearer [ 508.668175][T15569] ip6gre1: entered promiscuous mode [ 508.690275][T15569] ip6gre1: entered allmulticast mode [ 508.724451][T15570] loop4: detected capacity change from 0 to 512 [ 508.782745][T15570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.894403][T15574] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2711'. [ 508.909809][T15570] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.989311][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.023836][T15580] netlink: 'syz.0.2715': attribute type 16 has an invalid length. [ 509.095053][T15580] netlink: 'syz.0.2715': attribute type 17 has an invalid length. [ 509.200246][T15580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 509.231280][T15591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 509.241193][T15591] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2713'. [ 509.258346][T15578] hsr0: entered promiscuous mode [ 509.264364][T15589] loop2: detected capacity change from 0 to 512 [ 509.266117][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2714'. [ 511.338796][T15623] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.378985][T15626] tmpfs: Bad value for 'mpol' [ 511.413071][T15623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.464615][T15606] loop2: detected capacity change from 0 to 128 [ 511.752727][T15623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.805120][T15623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.029296][ T40] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.045216][ T40] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.077267][ T40] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.094952][T15650] loop2: detected capacity change from 0 to 1024 [ 512.109127][ T40] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.120739][T15650] EXT4-fs: inline encryption not supported [ 512.142439][T15650] EXT4-fs: Ignoring removed bh option [ 512.185599][T15650] netlink: 'syz.2.2733': attribute type 39 has an invalid length. [ 512.336566][T15654] tipc: Enabled bearer , priority 0 [ 512.360861][T15654] syzkaller0: entered promiscuous mode [ 512.378874][T15654] syzkaller0: entered allmulticast mode [ 512.457161][T15655] tipc: Enabled bearer , priority 0 [ 512.594615][T15655] syzkaller0: entered promiscuous mode [ 512.602117][T15655] syzkaller0: entered allmulticast mode [ 512.617957][T15655] tipc: Resetting bearer [ 512.634278][T15659] tipc: Resetting bearer [ 512.667076][T15653] tipc: Resetting bearer [ 512.722688][T15653] tipc: Disabling bearer [ 513.040054][T15651] tipc: Resetting bearer [ 513.085505][T15651] tipc: Disabling bearer [ 513.152591][T15666] netlink: 'syz.5.2738': attribute type 16 has an invalid length. [ 513.177277][T15666] netlink: 'syz.5.2738': attribute type 17 has an invalid length. [ 513.219739][T15666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.476882][T15679] netlink: 'syz.2.2741': attribute type 32 has an invalid length. [ 513.496655][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 513.550392][T15679] bond32: option coupled_control: invalid value (64) [ 513.614816][T15679] bond32 (unregistering): Released all slaves [ 514.391589][T15683] chnl_net:caif_netlink_parms(): no params data found [ 514.494934][T15683] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.502285][T15683] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.510037][T15683] bridge_slave_0: entered allmulticast mode [ 514.516798][T15683] bridge_slave_0: entered promiscuous mode [ 514.524606][T15683] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.532220][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.539971][T15683] bridge_slave_1: entered allmulticast mode [ 514.547056][T15683] bridge_slave_1: entered promiscuous mode [ 514.566942][T15683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.577902][T15683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.600513][T15683] team0: Port device team_slave_0 added [ 514.607586][T15683] team0: Port device team_slave_1 added [ 514.625756][T15683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.633245][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.660400][T15683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.673482][T15683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.681451][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.717195][T15683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.763238][T15683] hsr_slave_0: entered promiscuous mode [ 514.773632][T15683] hsr_slave_1: entered promiscuous mode [ 514.788633][T15683] debugfs: 'hsr0' already exists in 'hsr' [ 514.834711][T15683] Cannot create hsr debugfs directory [ 514.904471][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 514.904518][ T28] audit: type=1400 audit(2847509650.241:2748): avc: denied { connect } for pid=15711 comm="syz.0.2747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 515.012237][T15683] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.149721][T15683] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.211853][T15683] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.223444][T15683] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.300356][T15683] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.436674][T15683] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.476524][T15683] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.487490][T15683] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.503391][T15734] loop4: detected capacity change from 0 to 512 [ 515.526056][T15734] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 515.568955][T15735] loop0: detected capacity change from 0 to 1024 [ 515.581491][T15735] EXT4-fs: inline encryption not supported [ 515.595781][T15735] EXT4-fs: Ignoring removed bh option [ 515.633287][T15734] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 515.659484][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 515.666607][ C0] EXT4-fs (loop4): initial error at time 2847509650: ext4_mb_generate_buddy:1315 [ 515.676091][ C0] EXT4-fs (loop4): last error at time 2847509650: ext4_mb_generate_buddy:1315 [ 515.728029][T15735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.753375][T15734] EXT4-fs (loop4): 1 truncate cleaned up [ 515.780642][T15734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.805497][T15683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.873730][T15683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.937647][T15078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.962605][T15683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.984604][T15734] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 515.994210][T15683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.003149][T15734] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.4.2753: path /172/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 516.092858][T15683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.107805][T15683] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.197614][T15683] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.208879][T15683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.249362][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.256513][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.351991][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.369718][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.377355][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.543575][T15749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2755'. [ 516.981428][T15766] tipc: Enabled bearer , priority 0 [ 517.124074][T15683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.509972][T15758] tipc: Disabling bearer [ 517.697171][T15683] veth0_vlan: entered promiscuous mode [ 517.716329][T15683] veth1_vlan: entered promiscuous mode [ 517.757284][T15683] veth0_macvtap: entered promiscuous mode [ 517.775702][T15683] veth1_macvtap: entered promiscuous mode [ 517.804624][T15683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.826563][T15683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.852707][ T1605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.882436][ T1605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.910835][ T1605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.942039][ T1605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.498065][ T28] audit: type=1326 audit(2847509653.831:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15797 comm="syz.4.2762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f703edbc799 code=0x0 [ 518.688425][T15803] loop4: detected capacity change from 0 to 2048 [ 518.750104][ T4429] loop4: p1 p2 p3 [ 518.756277][ T4429] loop4: p2 size 458752 extends beyond EOD, truncated [ 518.768890][ T4429] loop4: p3 start 3036741376 is beyond EOD, truncated [ 518.780759][T15803] loop4: p1 p2 p3 [ 518.798681][T15803] loop4: p2 size 458752 extends beyond EOD, truncated [ 518.811686][T15803] loop4: p3 start 3036741376 is beyond EOD, truncated [ 518.969696][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 518.979202][ T4429] udevd[4429]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 519.174725][T15817] netlink: 'syz.5.2765': attribute type 66 has an invalid length. [ 519.306013][T15825] loop4: detected capacity change from 0 to 512 [ 519.314695][T15825] EXT4-fs: Ignoring removed oldalloc option [ 519.325594][T15825] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 519.448693][T15827] tipc: Started in network mode [ 519.456977][T15827] tipc: Node identity 0a4e95e2a9e3, cluster identity 4711 [ 519.468041][T15827] tipc: Enabled bearer , priority 0 [ 519.745171][T15827] syzkaller0: entered promiscuous mode [ 519.751778][T15827] syzkaller0: entered allmulticast mode [ 519.769504][T15827] tipc: Resetting bearer [ 519.813058][ T1605] tipc: Resetting bearer [ 520.010909][T15821] tipc: Resetting bearer [ 520.047460][T15821] tipc: Disabling bearer [ 520.386603][T15825] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2766: iget: bad i_size value: 38620345925642 [ 520.400467][T15825] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 520.407324][T15825] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2766: couldn't read orphan inode 15 (err -117) [ 520.417050][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 520.417080][ C1] EXT4-fs (loop4): initial error at time 2847509655: ext4_orphan_get:1391: inode 15 [ 520.417119][ C1] EXT4-fs (loop4): last error at time 2847509655: ext4_orphan_get:1391: inode 15 [ 520.456147][T15825] loop4: lost filesystem error report for type 5 error -117 [ 520.460722][T15825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.565322][T15907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 522.096808][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.273504][T15929] tipc: Enabling of bearer rejected, failed to enable media [ 523.298839][T16018] netlink: 'syz.3.2779': attribute type 21 has an invalid length. [ 523.432520][T16016] syzkaller0: entered promiscuous mode [ 523.439950][T16016] syzkaller0: entered allmulticast mode [ 523.486316][T16018] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2779'. [ 523.595976][T16024] loop0: detected capacity change from 0 to 256 [ 523.657624][T16024] FAT-fs (loop0): Directory bread(block 64) failed [ 523.664418][T16024] FAT-fs (loop0): Directory bread(block 65) failed [ 523.671386][T16024] FAT-fs (loop0): Directory bread(block 66) failed [ 523.678632][T16024] FAT-fs (loop0): Directory bread(block 67) failed [ 523.685423][T16024] FAT-fs (loop0): Directory bread(block 68) failed [ 523.692296][T16024] FAT-fs (loop0): Directory bread(block 69) failed [ 523.699657][T16024] FAT-fs (loop0): Directory bread(block 70) failed [ 523.706340][T16024] FAT-fs (loop0): Directory bread(block 71) failed [ 523.713405][T16024] FAT-fs (loop0): Directory bread(block 72) failed [ 523.721199][T16024] FAT-fs (loop0): Directory bread(block 73) failed [ 524.357690][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 524.418955][T16036] ip6tnl1: entered allmulticast mode [ 524.619095][T16042] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2785'. [ 524.669935][T16043] tipc: Enabled bearer , priority 0 [ 524.812025][T16043] syzkaller0: entered promiscuous mode [ 524.817920][T16043] syzkaller0: entered allmulticast mode [ 524.833185][T16043] tipc: Resetting bearer [ 524.856070][T15872] tipc: Resetting bearer [ 524.890078][T16045] loop2: detected capacity change from 0 to 1024 [ 524.914172][T16045] EXT4-fs: inline encryption not supported [ 524.948289][T16045] EXT4-fs: Ignoring removed bh option [ 524.975151][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2787'. [ 525.019779][T16047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2787'. [ 525.178581][T16054] loop2: detected capacity change from 0 to 256 [ 525.229237][T16054] loop2: detected capacity change from 0 to 256 [ 525.317441][T16039] tipc: Resetting bearer [ 525.351585][T16039] tipc: Disabling bearer [ 525.438555][T16064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.539964][ T28] audit: type=1400 audit(2847509660.871:2750): avc: denied { read } for pid=16073 comm="syz.3.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 525.589216][T16075] loop0: detected capacity change from 0 to 1024 [ 525.633551][T16071] tipc: Started in network mode [ 525.639838][T16071] tipc: Node identity c6d8514912f4, cluster identity 4711 [ 525.647836][T16071] tipc: Enabled bearer , priority 0 [ 525.691854][T16075] EXT4-fs: inline encryption not supported [ 525.698743][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2792'. [ 525.725534][T16064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.802762][T16064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.830755][T16075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.905655][T16064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.990115][ T5122] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.009346][ T5122] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.033816][ T5122] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.044021][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.056105][ T5122] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.202747][T16066] tipc: Disabling bearer [ 526.527525][T16094] netlink: 'syz.5.2801': attribute type 1 has an invalid length. [ 526.574582][T16094] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 526.599228][T16094] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 527.042352][T15078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.310143][T16109] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 527.320918][T16109] loop0: detected capacity change from 0 to 512 [ 527.344210][T16109] EXT4-fs: Mount option(s) incompatible with ext2 [ 527.363114][T16114] tipc: Enabled bearer , priority 0 [ 527.551186][T16114] syzkaller0: entered promiscuous mode [ 527.557404][T16114] syzkaller0: entered allmulticast mode [ 527.571938][T16114] tipc: Resetting bearer [ 527.591180][ T28] audit: type=1400 audit(2847509662.931:2751): avc: denied { nlmsg_write } for pid=16107 comm="syz.0.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 527.720144][T16124] syzkaller0: entered promiscuous mode [ 527.736116][T16124] syzkaller0: entered allmulticast mode [ 527.784316][ T28] audit: type=1400 audit(2847509663.121:2752): avc: denied { write } for pid=16131 comm="syz.5.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 527.934344][T15872] tipc: Resetting bearer [ 527.997218][T16108] tipc: Resetting bearer [ 528.017765][T16108] tipc: Disabling bearer [ 528.067326][T16148] loop5: detected capacity change from 0 to 1024 [ 528.088455][T16148] EXT4-fs: inline encryption not supported [ 528.097949][T16148] EXT4-fs: Ignoring removed bh option [ 528.153980][T16148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.177659][T16151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2818'. [ 528.210949][T13671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.358083][T16170] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.2822'. [ 528.368257][T16170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2822'. [ 529.477537][T16199] loop2: detected capacity change from 0 to 1024 [ 529.498972][T16199] EXT4-fs: inline encryption not supported [ 529.516195][T16199] EXT4-fs: Ignoring removed nobh option [ 529.522195][T16199] EXT4-fs: Ignoring removed bh option [ 529.949624][ T28] audit: type=1400 audit(2847509665.051:2753): avc: denied { execheap } for pid=16206 comm="syz.5.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 530.391780][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 530.817076][ T28] audit: type=1400 audit(2847509666.141:2754): avc: denied { read write } for pid=11607 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.906593][ T28] audit: type=1400 audit(2847509666.141:2755): avc: denied { open } for pid=11607 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.949985][T16235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.972455][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2839'. [ 531.012039][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2839'. [ 531.044507][ T28] audit: type=1400 audit(2847509666.191:2756): avc: denied { ioctl } for pid=13671 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 531.106678][T16243] futex_wake_op: syz.0.2840 tries to shift op by -3; fix this program [ 531.144410][ T3366] Process accounting resumed [ 531.149319][T16235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.198713][ T28] audit: type=1400 audit(2847509666.191:2757): avc: denied { name_bind } for pid=16231 comm="syz.3.2838" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 531.274051][ T28] audit: type=1400 audit(2847509666.191:2758): avc: denied { node_bind } for pid=16231 comm="syz.3.2838" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 531.311042][T16247] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2843'. [ 531.353921][ T28] audit: type=1400 audit(2847509666.221:2759): avc: denied { open } for pid=16234 comm="syz.5.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 531.422798][ T28] audit: type=1400 audit(2847509666.221:2760): avc: denied { perfmon } for pid=16234 comm="syz.5.2839" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.510329][ T28] audit: type=1400 audit(2847509666.221:2761): avc: denied { kernel } for pid=16234 comm="syz.5.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 531.560044][ T28] audit: type=1400 audit(2847509666.221:2762): avc: denied { bpf } for pid=16234 comm="syz.5.2839" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 531.598906][ T28] audit: type=1400 audit(2847509666.221:2763): avc: denied { prog_load } for pid=16234 comm="syz.5.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 531.687356][T16253] syzkaller0: entered promiscuous mode [ 531.693860][T16253] syzkaller0: entered allmulticast mode [ 531.710600][T16259] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2849'. [ 531.772670][T16263] syzkaller0: entered promiscuous mode [ 531.778613][T16263] syzkaller0: entered allmulticast mode [ 531.844659][T16269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16269 comm=syz.3.2853 [ 532.149206][T16286] tipc: Enabled bearer , priority 0 [ 532.498478][T16286] syzkaller0: entered promiscuous mode [ 532.506712][T16286] syzkaller0: entered allmulticast mode [ 532.538718][T16286] tipc: Resetting bearer [ 532.688544][T16298] loop4: detected capacity change from 0 to 1024 [ 532.714306][T16298] EXT4-fs: inline encryption not supported [ 532.721435][T16298] EXT4-fs: Ignoring removed bh option [ 532.740338][T16279] tipc: Resetting bearer [ 532.748184][T16298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.771150][T16279] tipc: Disabling bearer [ 532.781892][T16302] netlink: 'syz.5.2862': attribute type 10 has an invalid length. [ 532.811144][T16302] team0: Port device dummy0 added [ 532.860489][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.879209][T16307] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2863'. [ 532.929597][T16313] syzkaller0: entered promiscuous mode [ 532.935362][T16313] syzkaller0: entered allmulticast mode [ 533.870763][T16345] loop4: detected capacity change from 0 to 1024 [ 533.878013][T16345] EXT4-fs: inline encryption not supported [ 533.886393][T16345] EXT4-fs: Ignoring removed bh option [ 534.065444][T16345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.084137][T16352] tipc: Enabled bearer , priority 0 [ 534.181975][T11042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.194017][T16358] loop2: detected capacity change from 0 to 128 [ 534.271855][T16352] syzkaller0: entered promiscuous mode [ 534.278251][T16365] netlink: 'syz.3.2880': attribute type 21 has an invalid length. [ 534.278403][T16352] syzkaller0: entered allmulticast mode [ 534.312736][T16352] tipc: Resetting bearer [ 534.331683][ T7080] tipc: Resetting bearer [ 534.353495][T16370] loop5: detected capacity change from 0 to 512 [ 534.360996][T16370] EXT4-fs: inline encryption not supported [ 534.367205][T16370] EXT4-fs: Ignoring removed i_version option [ 534.379409][T16370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e001e09c, mo2=0002] [ 534.398279][T16370] System zones: 1-12 [ 534.411584][T16365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2880'. [ 534.427756][T16370] EXT4-fs (loop5): 1 orphan inode deleted [ 534.438383][T16370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.538712][T16373] syzkaller0: entered promiscuous mode [ 534.544734][T16373] syzkaller0: entered allmulticast mode [ 534.562306][ T7080] syzkaller0: tun_net_xmit 48 [ 534.583999][T16373] syzkaller0: create flow: hash 3793005000 index 1 [ 534.616648][T16373] syzkaller0: delete flow: hash 3793005000 index 1 [ 534.624907][T16383] coredump: 99(syz.2.2879): Core dump to core aborted: cannot preserve file permissions [ 534.628774][T16370] EXT4-fs error (device loop5): ext4_add_entry:2415: inode #2: comm syz.5.2884: Directory hole found for htree leaf block 0 [ 534.705006][T16343] tipc: Resetting bearer [ 534.720459][T16343] tipc: Disabling bearer [ 534.730797][T16370] EXT4-fs error (device loop5): ext4_add_entry:2415: inode #2: comm syz.5.2884: Directory hole found for htree leaf block 0 [ 535.421330][T16400] loop0: detected capacity change from 0 to 4096 [ 535.455994][T13671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.468689][T16400] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #2: comm syz.0.2891: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 535.521838][T16400] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 535.522633][T16400] EXT4-fs (loop0): get root inode failed [ 535.532201][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 535.532245][ C1] EXT4-fs (loop0): initial error at time 2847509670: ext4_ext_check_inode:521: inode 2 [ 535.532286][ C1] EXT4-fs (loop0): last error at time 2847509670: ext4_ext_check_inode:521: inode 2 [ 535.592587][T16400] EXT4-fs (loop0): mount failed [ 535.763319][T16418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2898'. [ 535.809567][T16420] loop4: detected capacity change from 0 to 1764 [ 535.838497][T16420] iso9660: Unknown parameter '' [ 535.882326][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 535.882342][ T28] audit: type=1400 audit(2847509671.159:2867): avc: denied { read } for pid=16426 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 535.920513][T16427] hub 8-0:1.0: USB hub found [ 535.925570][T16427] hub 8-0:1.0: 8 ports detected [ 535.939747][T16425] netlink: 'syz.2.2897': attribute type 36 has an invalid length. [ 535.995466][T16420] loop4: detected capacity change from 0 to 1764 [ 536.015011][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2901'. [ 536.015011][T16425] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 536.024231][ T28] audit: type=1326 audit(2847509671.234:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16431 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f411df8cfce code=0x7ffc0000 [ 536.062680][T16425] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 536.065739][ T28] audit: type=1326 audit(2847509671.318:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 536.078354][T16420] iso9660: Unknown parameter '' [ 536.100308][ T28] audit: type=1326 audit(2847509671.318:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 536.129615][T16427] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 536.170261][T16442] tipc: Enabled bearer , priority 0 [ 536.278261][T16429] syzkaller0: entered promiscuous mode [ 536.284271][T16429] syzkaller0: entered allmulticast mode [ 536.287359][T16420] loop4: detected capacity change from 0 to 1764 [ 536.296151][T16429] tipc: Resetting bearer [ 536.305106][ T28] audit: type=1326 audit(2847509671.402:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16431 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 536.319106][T16427] macvlan1: entered allmulticast mode [ 536.336207][ T28] audit: type=1400 audit(2847509671.440:2872): avc: denied { write } for pid=16415 comm="syz.2.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 536.357224][ T28] audit: type=1326 audit(2847509671.477:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f411df6db19 code=0x7ffc0000 [ 536.381363][T16420] iso9660: Unknown parameter '' [ 536.382999][T16427] veth1_vlan: entered allmulticast mode [ 536.419643][T16427] team0: Port device macvlan1 added [ 536.443970][ T28] audit: type=1326 audit(2847509671.477:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 536.473424][T16420] loop4: detected capacity change from 0 to 1764 [ 536.483095][T16420] iso9660: Unknown parameter '' [ 536.502140][ T28] audit: type=1326 audit(2847509671.496:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 536.528682][ T7078] tipc: Resetting bearer [ 536.540125][ T28] audit: type=1326 audit(2847509671.533:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16412 comm="syz.5.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f411dfcc799 code=0x7ffc0000 [ 536.570283][T16413] loop5: detected capacity change from 0 to 512 [ 536.604897][T16420] loop4: detected capacity change from 0 to 1764 [ 536.614845][T16420] iso9660: Unknown parameter '' [ 536.650090][T16413] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 536.670834][T16413] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 536.685844][T16413] EXT4-fs (loop5): 1 truncate cleaned up [ 536.704659][T16413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.718570][T16423] tipc: Resetting bearer [ 536.732311][T16423] tipc: Disabling bearer [ 536.803223][T16460] loop4: detected capacity change from 0 to 512 [ 536.805732][T16432] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.2896: Logical block already allocated [ 536.831783][T16432] EXT4-fs (loop5): Remounting filesystem read-only [ 537.602045][T13671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.681746][T16475] loop2: detected capacity change from 0 to 512 [ 537.882462][T16483] loop0: detected capacity change from 0 to 512 [ 537.906143][T16483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 537.933883][T16483] EXT4-fs (loop0): 1 truncate cleaned up [ 537.969586][T16483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.052456][T16489] netlink: 'syz.3.2916': attribute type 3 has an invalid length. [ 538.132821][T16495] SELinux: Context system_u:object_r:crond_unit_file_t:s0 is not valid (left unmapped). [ 538.747312][T16519] netlink: 'syz.2.2922': attribute type 10 has an invalid length. [ 538.769857][T16519] team0: Port device netdevsim1 added [ 538.826692][T16523] EXT4-fs: inline encryption not supported [ 538.967676][T16523] EXT4-fs: Ignoring removed bh option [ 538.992224][T15078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.147780][T16535] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2928'. [ 539.307361][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2928'. [ 539.402620][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2928'. [ 539.453212][T16545] netlink: 'syz.2.2930': attribute type 21 has an invalid length. [ 539.481017][T16546] netlink: 'syz.5.2928': attribute type 13 has an invalid length. [ 539.535252][T16535] tipc: MTU too low for tipc bearer [ 539.575550][T16545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2930'. [ 539.685028][T16550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16550 comm=syz.2.2931 [ 539.760889][T16557] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.818788][T16557] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.910550][T16557] ªªªªªª: renamed from dummy0 (while UP) [ 539.996125][T15078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.213597][T16590] tipc: Enabled bearer , priority 0 [ 541.243941][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 541.243981][ T28] audit: type=1400 audit(2847509676.107:2964): avc: denied { create } for pid=16586 comm="syz.3.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 541.617265][T16590] syzkaller0: entered promiscuous mode [ 541.624821][T16590] syzkaller0: entered allmulticast mode [ 541.649688][T16590] tipc: Resetting bearer [ 541.793793][T16588] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 541.804654][ T28] audit: type=1400 audit(2847509676.117:2965): avc: denied { ioctl } for pid=16586 comm="syz.3.2941" path="socket:[47836]" dev="sockfs" ino=47836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 541.856416][T16596] set_capacity_and_notify: 4 callbacks suppressed [ 541.856491][T16596] loop4: detected capacity change from 0 to 128 [ 541.871454][T16586] tipc: Resetting bearer [ 541.910571][T16586] tipc: Disabling bearer [ 541.942645][ T28] audit: type=1400 audit(2847509676.117:2966): avc: denied { bind } for pid=16586 comm="syz.3.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 542.078492][T16596] EXT4-fs: Ignoring removed nobh option [ 542.184574][T16596] ext2: Unknown parameter 'subj_role' [ 542.215898][ T28] audit: type=1400 audit(2847509676.126:2967): avc: denied { connect } for pid=16586 comm="syz.3.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 542.411845][ T28] audit: type=1400 audit(2847509676.126:2968): avc: denied { write } for pid=16586 comm="syz.3.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 542.598116][ T28] audit: type=1400 audit(2847509676.921:2969): avc: denied { accept } for pid=16597 comm="syz.2.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.756006][ T28] audit: type=1400 audit(2847509676.930:2970): avc: denied { getopt } for pid=16598 comm="syz.5.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 542.779921][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2946'. [ 543.004691][T16608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2946'. [ 543.030371][ T28] audit: type=1400 audit(2847509677.061:2971): avc: denied { nlmsg_write } for pid=16597 comm="syz.2.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 543.558468][ T28] audit: type=1400 audit(2847509677.941:2972): avc: denied { write } for pid=16615 comm="syz.5.2949" name="ipv6_route" dev="proc" ino=4026533576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 543.579411][T16617] loop5: detected capacity change from 0 to 4096 [ 543.583533][ T28] audit: type=1400 audit(2847509678.259:2973): avc: denied { create } for pid=16620 comm="syz.0.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 543.613656][T16617] EXT4-fs: Ignoring removed bh option [ 543.674422][T16617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.726631][T16617] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.863507][T16617] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.966656][T16617] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.072029][T16656] loop4: detected capacity change from 0 to 128 [ 544.165178][T16617] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.267754][ T7078] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.294252][T15872] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.323581][ T7078] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.369087][ T7078] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.408748][T16686] program syz.4.2974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.419217][T13671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.491004][T16692] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 544.513068][T16694] loop4: detected capacity change from 0 to 128 [ 544.708956][T16706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.267663][T16724] syz_tun: entered promiscuous mode [ 545.283112][T16724] macvtap1: entered promiscuous mode [ 545.291440][T16724] syz_tun: left promiscuous mode [ 545.335749][T16726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.349258][T16726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.435070][T16733] loop0: detected capacity change from 0 to 128 [ 545.624360][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.631945][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.889118][T16777] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 545.889201][T16777] syzkaller0: group set to 0 [ 545.919602][T16780] loop0: detected capacity change from 0 to 128 [ 545.935766][T16777] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 545.935790][T16777] syzkaller0: owner set to 0 [ 546.075964][T16789] loop2: detected capacity change from 0 to 764 [ 546.085957][T16789] rock: directory entry would overflow storage [ 546.085966][T16789] rock: sig=0x4654, size=5, remaining=4 [ 546.144320][T16795] loop4: detected capacity change from 0 to 164 [ 546.490619][T16831] loop5: detected capacity change from 0 to 256 [ 546.502356][T16831] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 546.520964][T16831] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 546.529740][T16831] FAT-fs (loop5): Filesystem has been set read-only [ 546.747265][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 546.747359][ T28] audit: type=1400 audit(2847509681.317:3000): avc: denied { mounton } for pid=16861 comm="syz.2.3054" path="/proc/205/task" dev="proc" ino=49446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 546.778287][ T28] audit: type=1400 audit(2847509681.355:3001): avc: denied { mount } for pid=16861 comm="syz.2.3054" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 546.806020][T16865] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 546.860939][ T28] audit: type=1400 audit(2847509681.411:3002): avc: denied { setopt } for pid=16867 comm="syz.3.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 547.270064][T16896] loop2: detected capacity change from 0 to 2048 [ 547.332968][T16896] loop2: p1 p2 p3 [ 547.347768][ T28] audit: type=1400 audit(2847509681.879:3003): avc: denied { write } for pid=16895 comm="syz.2.3066" name="loop2p1" dev="devtmpfs" ino=2153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 547.418769][ T28] audit: type=1400 audit(2847509681.879:3004): avc: denied { open } for pid=16895 comm="syz.2.3066" path="/dev/loop2p1" dev="devtmpfs" ino=2153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 547.480931][ T28] audit: type=1400 audit(2847509682.000:3005): avc: denied { write } for pid=16899 comm="syz.2.3068" laddr=fe80::12 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.557463][T16904] vlan0: entered allmulticast mode [ 547.669330][T16910] 8021q: VLANs not supported on ip6_vti0 [ 547.812966][T16924] program syz.2.3080 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.960981][ T28] audit: type=1400 audit(2847509682.449:3006): avc: denied { ioctl } for pid=16938 comm="syz.5.3087" path="pid:[4026532577]" dev="nsfs" ino=4026532577 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 547.968128][T16942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3089'. [ 548.029540][T16942] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.036990][T16942] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.065075][T16942] bridge0: entered allmulticast mode [ 548.111796][ T28] audit: type=1400 audit(2847509682.589:3007): avc: denied { bind } for pid=16949 comm="syz.5.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 548.182050][ T28] audit: type=1400 audit(2847509682.589:3008): avc: denied { name_bind } for pid=16949 comm="syz.5.3092" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 548.211756][ T28] audit: type=1400 audit(2847509682.589:3009): avc: denied { node_bind } for pid=16949 comm="syz.5.3092" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 548.462425][T16994] sctp: [Deprecated]: syz.5.3114 (pid 16994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.462425][T16994] Use struct sctp_sack_info instead [ 548.841538][T17041] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 548.966745][T17050] loop0: detected capacity change from 0 to 128 [ 549.898229][T17107] loop2: detected capacity change from 0 to 128 [ 550.042802][T17115] loop0: detected capacity change from 0 to 512 [ 550.718991][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3191'. [ 550.771243][T17173] tmpfs: Unsupported parameter 'huge' [ 550.787789][T17175] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 551.172183][T17183] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 551.183953][T17183] bond4 (unregistering): Released all slaves [ 551.334569][T17191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 552.091934][T17264] loop5: detected capacity change from 0 to 128 [ 552.149634][T17268] program syz.5.3240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.321417][T17293] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 552.347787][T17297] program syz.3.3253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.383934][T17300] program syz.0.3256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.423227][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 552.423340][ T28] audit: type=1400 audit(2847509686.630:3026): avc: denied { write } for pid=17304 comm="syz.0.3258" path="socket:[51294]" dev="sockfs" ino=51294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 552.457572][ T28] audit: type=1400 audit(2847509686.649:3027): avc: denied { setopt } for pid=17304 comm="syz.0.3258" lport=37931 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 552.620857][T17324] program syz.2.3267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.692880][T17331] syzkaller1: entered promiscuous mode [ 552.698959][T17331] syzkaller1: entered allmulticast mode [ 552.769433][ T28] audit: type=1400 audit(2847509686.948:3028): avc: denied { write } for pid=17344 comm="syz.3.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 552.832591][T17351] program syz.0.3280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.983408][T17374] netlink: 'syz.3.3290': attribute type 4 has an invalid length. [ 553.007058][T17378] program syz.2.3292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.130828][T17394] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3299'. [ 553.221848][T17406] program syz.2.3305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.389195][T17431] loop2: detected capacity change from 0 to 512 [ 553.491941][T17446] loop5: detected capacity change from 0 to 164 [ 553.508314][T17445] ================================================================== [ 553.517101][T17445] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 553.525942][T17445] [ 553.528303][T17445] write to 0xffff8881159785e8 of 8 bytes by task 17431 on cpu 1: [ 553.536324][T17445] shmem_file_splice_read+0x470/0x600 [ 553.542281][T17445] splice_direct_to_actor+0x26e/0x670 [ 553.547788][T17445] do_splice_direct+0x119/0x1a0 [ 553.552775][T17445] do_sendfile+0x382/0x650 [ 553.557461][T17445] __x64_sys_sendfile64+0x105/0x150 [ 553.562967][T17445] x64_sys_call+0x2dc4/0x3020 [ 553.568401][T17445] do_syscall_64+0x12c/0x370 [ 553.573641][T17445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.579656][T17445] [ 553.582027][T17445] write to 0xffff8881159785e8 of 8 bytes by task 17445 on cpu 0: [ 553.590078][T17445] shmem_file_splice_read+0x470/0x600 [ 553.595782][T17445] splice_direct_to_actor+0x26e/0x670 [ 553.601277][T17445] do_splice_direct+0x119/0x1a0 [ 553.606246][T17445] do_sendfile+0x382/0x650 [ 553.610897][T17445] __x64_sys_sendfile64+0x105/0x150 [ 553.616126][T17445] x64_sys_call+0x2dc4/0x3020 [ 553.621008][T17445] do_syscall_64+0x12c/0x370 [ 553.625987][T17445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.632661][T17445] [ 553.635087][T17445] value changed: 0x0000000000000a1e -> 0x0000000000000a1f [ 553.642386][T17445] [ 553.644727][T17445] Reported by Kernel Concurrency Sanitizer on: [ 553.651156][T17445] CPU: 0 UID: 0 PID: 17445 Comm: syz.2.3317 Tainted: G W syzkaller #0 PREEMPT(full) [ 553.662704][T17445] Tainted: [W]=WARN [ 553.666791][T17445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.677305][T17445] ==================================================================