last executing test programs: 17.088039837s ago: executing program 2 (id=64): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x40020000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000002, 0xd, 0xb, 0x9, 0x1}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x3f7, 0x20, 0x70bd28, 0x25dfdbfd, {0x5, 0x5, './mnt', './mnt'}, ["", ""]}, 0x24}}, 0x4880) 16.52422795s ago: executing program 2 (id=78): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x9, 0x18, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00), 0x1, &(0x7f0000000040)=ANY=[], 0x116}}, {{0x0, 0x0, &(0x7f0000000280), 0x1}}], 0x2, 0x20040017) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040500000000002800128008000100677265001c0002800800060000061a0f00b74b0000d652d33300000000000000000000004e3990c1eb6e68c17ef39cc95644eccd0e15b10cb00c6f7f1a718001b9ca8032afeb50c23f3d1364846aa3f83d57e71a66b2a078"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000480)={0xa, 0x1, 0x80000, @mcast1, 0xf}, 0x1c, 0x0}, 0x40048d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) r8 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0x10f1a8) 15.810268962s ago: executing program 2 (id=89): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) 15.778496254s ago: executing program 2 (id=92): r0 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@acl}, {@nolazytime}, {@orlov}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000b00)="$eJzs3c+PG1cdAPDvzP5y07SbQA9QAQlQCFUUO+u0UdVLywWEqkqIigPikC67zmqJHYe1t3SXldj+DSCBxAn+BA5IHBA9ceDGEYkDQpQDUoEVKIvEwWjGsxt310tM7LWb9ecjTebHm5nve3Zm3vOzd14AU+tyROxGxHxEvBkRi8X2pJji1e6U7Xd/b2dlf29nJYlO542/J3l6ti16jsk8WZyzFBFf+3LEt5LjcVtb23eW6/XaRrFeaTfuVVpb29fWG8trtbXa3Wr15tLN6y/deLE6srJeavz8/S+tv/b1X/3yk+/9bvf572XZOl+k9ZZjlLpFnzuMk5mNiNdOI9gEzBTz+Qnng0eTRsRHIuIz+fW/GDP5/04A4CzrdBajs9i7DgCcdWneB5ak5YhI06IRUO724T0T59J6s9W+eru5eXe121d2IebS2+v12vWLC3/4Tr7zXJKtL+VpeXq+Xj2yfiMiLkbEDxeeyNfLK8366mSaPAAw9Z7srf8j4l8LaVouD3Ron2/1AIDHRmnSGQAAxk79DwDTR/0PANNngPq/+LJ/99TzAgCMh8//ADB91P8AMH3U/wAwVb76+uvZ1Nkvnn+9+tbW5p3mW9dWa6075cbmSnmluXGvvNZsruXP7Gk87Hz1ZvPe0gux+XalXWu1K62t7VuN5ubd9q38ud63anNjKRUA8L9cvPTu75OI2H35iXyKnrEc1NVwtqUj3At4vMwMc7AGAjzWjPYF02ugKjxvJPz21PMCTEbfh3mX+i5+0I//jyB+ZwQfKlc+Pnj/vzGe4WzRsw/T69H6/18ZeT6A8dP/D9Or00mOjvk/f5gEAJxJQ/yEr/P9UTVCgIl62GDeI/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6Y8xHx7UjScj4WeJr9m5bLEU9FxIWYS26v12vXI+LpuBQRcwvZ+tKkMw0ADCn9a1KM/3Vl8bnzR1Pnk38v5POI+O5P3vjR28vt9sZStv0fh9sXDoYPqz44bohxBQGAwf15kJ3y+rtazHs+yN/f21k5mE4xj8e8/8XDwUdX9vd28qmbMhudTqcTUcrbEuf+mcRscUwpIp6NiJkRxN99JyI+1q/8Sd43cqEY+bQ3fhSxnxpr/PQD8dM8rTvPXr6PjiAvMG3eze4/r/a7/tK4nM/7X/+l/A41vPz+V4o4uPft98SfLSLN9ImfXfOXB43xwm++cmxjZ7Gb9k7Es7P94ieH8ZMT4j83YPw/fuJTP3jlhLTOTyOuRP/4vbEq7ca9Smtr+9p6Y3mttla7W63eXLp5/aUbL1YreR915aCn+ri/vXz16ZPylpX/3AnxS33LP3947OcGLP/P/vPmNz/9YHXhaPwvfLb/+/9M3/hdz0fE5weMv3zuFycO353FXz2h/A97/68OGP+9v2yvDrgrADAGra3tO8v1em1jqIXsU+goznNsIcviYDsfNBeHC/qnyBeOvyxZ22dU5coaY4PsPDd0cdJfj/JdHnxh9rCtONozfyM749hKUbyGIy/FUAv3xxVrQjckYGweXPSTzgkAAAAAAAAAAAAAAHCScfzp0qTLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNn13wAAAP//dn2/bw==") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x3, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr(0x0, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x440) 15.610986124s ago: executing program 2 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x0) fadvise64(r3, 0x18002, 0x1c105, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x7, 0xb, 0x7, 0x9, 0x0, 0x0, 0x80, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x24, 0x3, 0x101, 0x4, 0x4, 0xe5, 0xe460, 0x0, 0x4ac, 0x0, 0x4}, r6, 0x10, 0xffffffffffffffff, 0x8) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r2}, 0x38) 15.550257237s ago: executing program 4 (id=101): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000680)="ff37", 0x2, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r1}) timer_create(0xfffffffffffffffc, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001a0029022dbd7000000000000a00000064f39397c79e0d1ab0d57d59a25742c85532517ecf2216f71b0e9c735551f6e64d3cc56d8581954e4488b3cf22f3b7b2f2f2ca3879fd7766e16e2ef14e40e3a6376f7f723f5d2530f2ce1c3fc89f6d9831465314b51bb72a9613fda15c8803241b605b426359aea20e46eb27096edc16"], 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x60099, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x39, 0x9, 0x70bd2b, 0x0, {0x7}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x00'}]}]}, 0x24}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000100)) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, 0x0) getrlimit(0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@acl}, {@nodelalloc}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x50, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0xa, 0x3, 0xff) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="5e8e465d7c082cd917c8bd9cc0883726162b647c4eb8a9e7d7", 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 15.222646416s ago: executing program 2 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "75ee1a594da87ca75ed8e76a3468"}}]}, 0x30}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003380), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2506"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4000800) 15.204011738s ago: executing program 4 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 15.180001899s ago: executing program 4 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000000000002c1000009398658665be0ffed7fcf7bf48a5"], 0x14}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$TCSBRKP(r5, 0x5425, 0x0) poll(&(0x7f0000000080)=[{r5, 0x4}], 0x1, 0x35aa) shutdown(r3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x808, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f00000008c0)={0x2, &(0x7f0000000880)=[{0x1, 0xb7, &(0x7f0000000780)="3f0f13d137ef326b45986dc6df9f725fc51c53b7052d48e73702e88049c6a75432714260c9350a3a6ee7476e4ffe0be0faf3102ac8a4cbc7bdbc9c47b07e6665075282cb9dc0d4e3736300a825bd18640a610557beb587566ad1724f0062306f690b12dca43c29e1241e6867fa7aa64b7c108f45faefa01d38a211719b65fc7874f5c0036eccd2fd782c611373d40c16b8e809ff52d1c9a2efe3e3c64d072114c6f6161b3a0aeaa28fa91c7b7ee9d9ffbd3b90820b0dfb"}, {0x8, 0x31, &(0x7f0000000840)="9504fb7cbbdd10e7b95cc45e0cf0365edfddc6e5ef567818dbf486d7f04baf2dc95c8edb63f2f4ca174068e65ff3de9933"}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000002b0000000000000000000000863a0094a720971ffca1720000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d292900"/247], 0x148}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000680)={0x7, &(0x7f0000000180)=[{0x9b, 0x2, 0xe, 0x7}, {0x8, 0x5, 0xc0, 0xe95}, {0x8, 0x8, 0x4, 0x8}, {0x4, 0x8, 0x4, 0x4}, {0xff, 0xb, 0x4, 0x80}, {0x7, 0x8b, 0x2e, 0x80000001}, {0xb362, 0xc0, 0xb, 0x1}]}) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000001c0)) 14.724593616s ago: executing program 4 (id=112): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000"/423], 0x610) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001b80)={'#! ', './file0', [], 0xa, "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"}, 0x14d) cachestat(r1, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000040)={{0x0, @broadcast, 0x4e22, 0x2, 'wlc\x00', 0xd, 0x10000, 0x3b}, {@broadcast, 0x4e22, 0x2000, 0x81, 0x8f, 0xd616}}, 0x44) socket$packet(0x11, 0x2, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2040800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2800000}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x811) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x110, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcd, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x2, 0xec, 0x3, 0xd, 0x0, 0x8001, 0x7, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x600, 0x8000, 0x7]}}, {{0xfffffffffffffe3c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x1, 0x7, 0x9, 0x4}}, {0xc, 0x2, [0x1, 0x1000, 0x69c4, 0xfff6]}}, {{0x1c, 0x1, {0x7, 0x79, 0x8, 0x8, 0x0, 0x41, 0xf}}, {0x4}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) 14.459146051s ago: executing program 4 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x0) fadvise64(r1, 0x18002, 0x1c105, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) ptrace(0x10, r2) 14.119447181s ago: executing program 4 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000000)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @local, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@generic={0x8847}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x5) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)={0x10000000}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000080)) 11.228880951s ago: executing program 0 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$batadv(0x0, r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8000, 0x36c0, {{0x7, 0x4, 0x2, 0x2, 0x1c, 0x65, 0x0, 0x2, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x8, 0xe4, 0x0, 0xc, [0x9]}]}}}}}) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="88010000100013072abd7000fedbdf246401010200000000000000000000000020010000000000000000000000000001000000004e2101020a0000000c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000000000000000000000900000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000200000000000000000000002ebd7000003500000200040050000000000000004c0014"], 0x188}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 11.200088783s ago: executing program 0 (id=154): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=@ethtool_coalesce={0xf, 0x0, 0xd, 0x8, 0xd8e8, 0x3, 0x0, 0xc0000001, 0x3, 0x32, 0x7fff, 0x7, 0x3, 0xe, 0x5b, 0x4, 0xd88, 0x14cf, 0x80000000, 0x1, 0x4001ff, 0xfffffff9, 0xa}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"88a7949f48150cb7f1aae42e7e0ce546", 0x0, 0x0, {0x6, 0x5}, {0x73, 0xcbfb}, 0x7, [0x500, 0x813, 0x7, 0x2, 0x7, 0x9, 0x5, 0x8, 0x9, 0x7, 0xa, 0xbb2, 0x5, 0x2]}) mmap(&(0x7f0000249000/0x1000)=nil, 0x1000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@oldalloc}, {@init_itable_val}, {@nobh}, {@jqfmt_vfsv1}, {@prjquota}, {@debug}, {@prjquota}, {@errors_remount}, {@auto_da_alloc}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0xe3, 0x47c, &(0x7f0000000280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @multicast, 'geneve0\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000380)) 10.862071492s ago: executing program 0 (id=156): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x9, 0x18, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00), 0x1, &(0x7f0000000040)=ANY=[], 0x116}}, {{0x0, 0x0, &(0x7f0000000280), 0x1}}], 0x2, 0x20040017) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040500000000002800128008000100677265001c0002800800060000061a0f00b74b0000d652d33300000000000000000000004e3990c1eb6e68c17ef39cc95644eccd0e15b10cb00c6f7f1a718001b9ca8032afeb50c23f3d1364846aa3f83d57e71a66b2a078"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000480)={0xa, 0x1, 0x80000, @mcast1, 0xf}, 0x1c, 0x0}, 0x40048d0) 10.242534708s ago: executing program 0 (id=163): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) epoll_create1(0x0) (fail_nth: 7) 9.987511583s ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x0) fadvise64(r1, 0x18002, 0x1c105, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) ptrace(0x10, r2) 9.688888721s ago: executing program 0 (id=174): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000480)={0xa, 0x1, 0x80000, @mcast1, 0xf}, 0x1c, 0x0}, 0x40048d0) 9.289554855s ago: executing program 3 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x18, 0xb, 0x6, 0x41, @loopback, @mcast1, 0x1, 0x7, 0x80000001, 0x1}}) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x3c, 0x6, 0x84b0c61707540cfc, @dev={0xfe, 0x80, '\x00', 0x29}, @rand_addr=' \x01\x00', 0x80, 0x1, 0x0, 0x8}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x12, 0x60d, 0x180, 0x202, 0x250, 0x2e8, 0x2e8, 0x250, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x1b}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'wlan1\x00', 'pim6reg1\x00', {}, {}, 0x3a, 0x9, 0x5}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0xff, 0x2, 0x1, [0xfff7, 0xfffe, 0xed, 0xff01, 0x4, 0x9, 0x5, 0x10, 0x3, 0x7, 0xffff, 0x9e, 0xfff, 0x3, 0x4, 0x5], 0x6}}, @common=@unspec=@limit={{0x48}, {0x5, 0x6, 0xfffffffffffffffd, 0x7be, 0xa674, 0x0, 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@setlink={0xb8, 0x13, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x1044, 0x48d15}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_VF_PORTS={0x80, 0x18, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x11, 0x2, ']+(-.@[-,)$.\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb7}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d8e369cf5a9844a8332666a9d47d707b"}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e9c3c00a9255ade8caab7450fedbcea5"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3dc97fb83942e6669964496b2171b6ef"}]}]}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) 9.268307606s ago: executing program 3 (id=181): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) read(r0, 0x0, 0x2) 9.166212292s ago: executing program 3 (id=183): syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0) 9.157439382s ago: executing program 3 (id=184): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_secret(0x80000) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 9.118711475s ago: executing program 3 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$eJzs3c9vW0kdAPCvnThxstlNdukBEOyW3YWCVnUSdzda7QHKCSFUCdEjSG1I3CiKHUf5UZpQifTMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TB6D0/p25qN1aT2FH8+UhPb+aN4+936nrGnsSeAIbW1YjYj4ixiLgbEdPZ9Vx2xM3mkdzu2cHDpcODh0u5aDRu/zOXtifXou1nEm9k91mMiB98J+LHuZfjbu3urS1Wq5XNrD67XduY3drdu75aW1yprFTWy+WF+YW5T298Uj6zvr5XG8tKX376h/1v/DRJayq70t6Ps9TseuEoTmI0Ir53HsEGYCTrz9igE+G15CPinYh4P33+T8dI+mgCAJdZozEdjen2euGoBABcTvl0DSyXL2VrAVORz5dKzTW8KzE5nr0Y2Flfbq6VzUQhf2+1WpnL1gpnopBL6vNp+Xm9fKx+IyLejohfjE+k9dJSvbo8iBc8AEA6z7fP//8Zb87/AMAlVxx0AgBA35n/AWD4mP8BYPiY/wFg+DTn/4lBpwEA9JH3/wAwfMz/ADBUvn/rVnI0DrPvv16+v7uzVr9/fbmytVaq7SyVluqbG6WVen0l/c6e2kn3V63XN+Y/jp0HM9/c2Nqe3drdu1Or76xv30m/1/tOpfntgvt96BkA0M3b7z35cy6ZkT+bSI9o28uhMNDMgPOWH3QCwMCMDDoBYGBO3u3LfmBwWZ3iPb7lAbgkOmzR+4Jipw8INRqNxvmlBJyza1+w/g/Dqm39318Bw5Cx/g/Dy+o+DK9GI9frTv/R6w0BgIvNGj/Q5ff/72Tn32a/HPjR8vFbPD7PrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBia+3/W8r2Ap+KfL5UingzImaikLu3Wq3MRcRbEfGn8cJ4Up8fcM4AwGnl/5bL9v+6Nv3h1AtN775xVByLiJ/86vYvHyxub2/+MWIs96/x1vXtx9n1cv+zBwBO1pqn03PbG/lnBw+XWkc/8/n7tyOiGFeSuIcHY3F4FH80RtNzMQoRMfnvXFZvyrWtXZzG/qOI+Hyn/udiKl0Dae58ejx+EvvNvsbPvxA/n7Y1z8m/xefOIBcYNk+S8edmp+dfPq6m587P/2I6Qp1eNv4ld7V0mI6Bz+O3xr+RLuPf1V5jfPz77zZLEy+3PYr44mhEK/Zh2/jTip/rEv/DHuP/5Uvvvt+trfHriGvROX57rNnt2sbs1u7e9dXa4kplpbJeLi/ML8x9euOT8my6Rj3bfTb4x2cfvdWtLen/ZJf4xRP6/9Ue+/+b/9394VdeEf/rH3SKn48rr4ifzIlf6zH+4uTvit3akvjLXfp/0uP/UY/xn/51r7Vt+M96/BEA4Bxt7e6tLVarlU2FoS1k/xX2L0Q+yQvbV6c66Ay7Fb7Vr1hj0bnp5x80H8hjTY3Ga8XqNmKcxaobcBEcPekj4r+DTgYAAAAAAAAAAAAAAOioH59YGnQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLz+HwAA///TQsBX") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x0) fadvise64(r1, 0x18002, 0x1c105, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ptrace(0x10, r2) 8.762304165s ago: executing program 3 (id=186): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000380)) 3.561898191s ago: executing program 1 (id=206): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) signalfd4(r2, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3ff", 0xff76}, {&(0x7f0000000840)='G', 0x42}, {&(0x7f0000000240)="d336bd75243cb9a6418e", 0xa}], 0x1000000000000041) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x82, 0x2}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 3.425700729s ago: executing program 1 (id=207): r0 = syz_open_dev$usbfs(0x0, 0x75, 0x109301) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 3.366528202s ago: executing program 1 (id=208): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_secret(0x80000) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3.280190287s ago: executing program 1 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002cbd7000000000002c1000009398658665be0ffed7fcf7bf48a5"], 0x14}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$TCSBRKP(r5, 0x5425, 0x0) poll(&(0x7f0000000080)=[{r5, 0x4}], 0x1, 0x35aa) shutdown(r3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x808, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r9, 0x80106720, &(0x7f00000008c0)={0x2, &(0x7f0000000880)=[{0x1, 0xb7, &(0x7f0000000780)="3f0f13d137ef326b45986dc6df9f725fc51c53b7052d48e73702e88049c6a75432714260c9350a3a6ee7476e4ffe0be0faf3102ac8a4cbc7bdbc9c47b07e6665075282cb9dc0d4e3736300a825bd18640a610557beb587566ad1724f0062306f690b12dca43c29e1241e6867fa7aa64b7c108f45faefa01d38a211719b65fc7874f5c0036eccd2fd782c611373d40c16b8e809ff52d1c9a2efe3e3c64d072114c6f6161b3a0aeaa28fa91c7b7ee9d9ffbd3b90820b0dfb"}, {0x8, 0x31, &(0x7f0000000840)="9504fb7cbbdd10e7b95cc45e0cf0365edfddc6e5ef567818dbf486d7f04baf2dc95c8edb63f2f4ca174068e65ff3de9933"}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="611228000000000061138c0000000000bf200000000000001500000008ffffffbd03010000000000950000000000000069164e0000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be9c8d7d69b32cfa8758c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e12bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50030a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000afa6dabf3f69f41da8765ba8cc1fc08fb188bfca010117fdd2b1b97b0cd373d3f35f0de28914d0ff8b3800a370e8d01cd50e4c20a1c49478478e539ba1975f28ed19cab5f568bc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000002b0000000000000000000000863a0094a720971ffca1720000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d292900"/247], 0x148}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000680)={0x7, &(0x7f0000000180)=[{0x9b, 0x2, 0xe, 0x7}, {0x8, 0x5, 0xc0, 0xe95}, {0x8, 0x8, 0x4, 0x8}, {0x4, 0x8, 0x4, 0x4}, {0xff, 0xb, 0x4, 0x80}, {0x7, 0x8b, 0x2e, 0x80000001}, {0xb362, 0xc0, 0xb, 0x1}]}) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 2.88469595s ago: executing program 1 (id=210): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x10}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000280000000000000001"], 0xe0, 0x4000000}}], 0x2, 0x800) 2.782065217s ago: executing program 1 (id=211): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=@ethtool_coalesce={0xf, 0x0, 0xd, 0x8, 0xd8e8, 0x3, 0x0, 0xc0000001, 0x3, 0x32, 0x7fff, 0x7, 0x3, 0xe, 0x5b, 0x4, 0xd88, 0x14cf, 0x80000000, 0x1, 0x4001ff, 0xfffffff9, 0xa}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000000c0)={"88a7949f48150cb7f1aae42e7e0ce546", 0x0, 0x0, {0x6, 0x5}, {0x73, 0xcbfb}, 0x7, [0x500, 0x813, 0x7, 0x2, 0x7, 0x9, 0x5, 0x8, 0x9, 0x7, 0xa, 0xbb2, 0x5, 0x2]}) mmap(&(0x7f0000249000/0x1000)=nil, 0x1000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@oldalloc}, {@init_itable_val}, {@nobh}, {@jqfmt_vfsv1}, {@prjquota}, {@debug}, {@prjquota}, {@errors_remount}, {@auto_da_alloc}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0xe3, 0x47c, &(0x7f0000000280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x3, @multicast, 'geneve0\x00'}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000380)) read(r2, 0x0, 0x2) 0s ago: executing program 32 (id=105): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "75ee1a594da87ca75ed8e76a3468"}}]}, 0x30}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003380), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2506"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x4000800) kernel console output (not intermixed with test programs): =process permissive=1 [ 15.085758][ T29] audit: type=1400 audit(1769028314.113:61): avc: denied { siginh } for pid=3194 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.708128][ T29] audit: type=1400 audit(1769028316.743:62): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.730078][ T29] audit: type=1400 audit(1769028316.743:63): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.752798][ T29] audit: type=1400 audit(1769028316.743:64): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.775930][ T29] audit: type=1400 audit(1769028316.743:65): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.798882][ T29] audit: type=1400 audit(1769028316.743:66): avc: denied { read open } for pid=3201 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. [ 22.256880][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 22.256895][ T29] audit: type=1400 audit(1769028321.293:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.285828][ T29] audit: type=1400 audit(1769028321.323:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.286606][ T3303] cgroup: Unknown subsys name 'net' [ 22.313663][ T29] audit: type=1400 audit(1769028321.353:72): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.492740][ T3303] cgroup: Unknown subsys name 'cpuset' [ 22.498833][ T3303] cgroup: Unknown subsys name 'rlimit' [ 22.608674][ T29] audit: type=1400 audit(1769028321.643:73): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.631938][ T29] audit: type=1400 audit(1769028321.643:74): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.652606][ T29] audit: type=1400 audit(1769028321.643:75): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.673040][ T29] audit: type=1400 audit(1769028321.643:76): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.681927][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.693379][ T29] audit: type=1400 audit(1769028321.653:77): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 22.722798][ T29] audit: type=1400 audit(1769028321.673:78): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.747584][ T29] audit: type=1400 audit(1769028321.673:79): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.751505][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.601114][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 24.635971][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 24.668932][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.676074][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.683483][ T3325] bridge_slave_0: entered allmulticast mode [ 24.689854][ T3325] bridge_slave_0: entered promiscuous mode [ 24.708741][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.715990][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.723206][ T3325] bridge_slave_1: entered allmulticast mode [ 24.729730][ T3325] bridge_slave_1: entered promiscuous mode [ 24.779148][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.796697][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 24.805746][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.812956][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.820052][ T3320] bridge_slave_0: entered allmulticast mode [ 24.826427][ T3320] bridge_slave_0: entered promiscuous mode [ 24.833666][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.844963][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 24.863060][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.870177][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.877372][ T3320] bridge_slave_1: entered allmulticast mode [ 24.883861][ T3320] bridge_slave_1: entered promiscuous mode [ 24.894114][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 24.934439][ T3325] team0: Port device team_slave_0 added [ 24.950708][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.960643][ T3325] team0: Port device team_slave_1 added [ 24.973663][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.011847][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.018851][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.044987][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.071921][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.079012][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.086202][ T3318] bridge_slave_0: entered allmulticast mode [ 25.092747][ T3318] bridge_slave_0: entered promiscuous mode [ 25.099371][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.106324][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.132304][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.143840][ T3320] team0: Port device team_slave_0 added [ 25.153124][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.160230][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.167397][ T3326] bridge_slave_0: entered allmulticast mode [ 25.173722][ T3326] bridge_slave_0: entered promiscuous mode [ 25.180252][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.187316][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.194613][ T3318] bridge_slave_1: entered allmulticast mode [ 25.201109][ T3318] bridge_slave_1: entered promiscuous mode [ 25.210621][ T3320] team0: Port device team_slave_1 added [ 25.216236][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.223368][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.230561][ T3327] bridge_slave_0: entered allmulticast mode [ 25.236912][ T3327] bridge_slave_0: entered promiscuous mode [ 25.243431][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.250485][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.257631][ T3326] bridge_slave_1: entered allmulticast mode [ 25.263945][ T3326] bridge_slave_1: entered promiscuous mode [ 25.279207][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.292932][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.299980][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.307649][ T3327] bridge_slave_1: entered allmulticast mode [ 25.313991][ T3327] bridge_slave_1: entered promiscuous mode [ 25.325265][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.354482][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.361507][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.387525][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.403566][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.420464][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.427515][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.453410][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.465257][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.476208][ T3325] hsr_slave_0: entered promiscuous mode [ 25.482311][ T3325] hsr_slave_1: entered promiscuous mode [ 25.489004][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.498837][ T3318] team0: Port device team_slave_0 added [ 25.508289][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.522188][ T3318] team0: Port device team_slave_1 added [ 25.554829][ T3326] team0: Port device team_slave_0 added [ 25.561525][ T3326] team0: Port device team_slave_1 added [ 25.567509][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.574481][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.600477][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.616167][ T3327] team0: Port device team_slave_0 added [ 25.626319][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.633279][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.659286][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.675064][ T3327] team0: Port device team_slave_1 added [ 25.700445][ T3320] hsr_slave_0: entered promiscuous mode [ 25.706443][ T3320] hsr_slave_1: entered promiscuous mode [ 25.712358][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 25.718068][ T3320] Cannot create hsr debugfs directory [ 25.730140][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.737116][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.763266][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.774824][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.781817][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.807837][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.828954][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.835996][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.862016][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.885650][ T3318] hsr_slave_0: entered promiscuous mode [ 25.891715][ T3318] hsr_slave_1: entered promiscuous mode [ 25.897697][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 25.903464][ T3318] Cannot create hsr debugfs directory [ 25.913024][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.919994][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.945964][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.982693][ T3326] hsr_slave_0: entered promiscuous mode [ 25.988802][ T3326] hsr_slave_1: entered promiscuous mode [ 25.994772][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 26.000487][ T3326] Cannot create hsr debugfs directory [ 26.056835][ T3327] hsr_slave_0: entered promiscuous mode [ 26.062938][ T3327] hsr_slave_1: entered promiscuous mode [ 26.068729][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 26.074477][ T3327] Cannot create hsr debugfs directory [ 26.166726][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.184407][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.199810][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.214569][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.242887][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.255399][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.264491][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.275512][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.302604][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.311647][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.323568][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.336932][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.365336][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.377354][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.386796][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.396616][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.434289][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.443334][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.453510][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.464481][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.477880][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.496174][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.514049][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.521110][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.535927][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.547741][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.554881][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.596477][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.605635][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.624641][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.646126][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.653281][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.662738][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.669846][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.680741][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.694326][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.701446][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.709902][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.716999][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.732842][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.752740][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.767267][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.780319][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.787436][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.796894][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.809350][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.816484][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.830833][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.837978][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.848459][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.865226][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.872347][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.945895][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.991099][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.024089][ T3325] veth0_vlan: entered promiscuous mode [ 27.038554][ T3325] veth1_vlan: entered promiscuous mode [ 27.058087][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.092721][ T3325] veth0_macvtap: entered promiscuous mode [ 27.111635][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.121522][ T3325] veth1_macvtap: entered promiscuous mode [ 27.164047][ T3320] veth0_vlan: entered promiscuous mode [ 27.185491][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.208340][ T3320] veth1_vlan: entered promiscuous mode [ 27.225353][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.245371][ T1629] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.263295][ T1629] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.277534][ T1629] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.293456][ T1629] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.303829][ T3318] veth0_vlan: entered promiscuous mode [ 27.310529][ T3320] veth0_macvtap: entered promiscuous mode [ 27.323633][ T3326] veth0_vlan: entered promiscuous mode [ 27.332698][ T3320] veth1_macvtap: entered promiscuous mode [ 27.343429][ T3327] veth0_vlan: entered promiscuous mode [ 27.349390][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 27.349430][ T29] audit: type=1400 audit(1769028326.383:90): avc: denied { mounton } for pid=3325 comm="syz-executor" path="/root/syzkaller.hjaf3a/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.355092][ T3327] veth1_vlan: entered promiscuous mode [ 27.362460][ T29] audit: type=1400 audit(1769028326.383:91): avc: denied { mount } for pid=3325 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.407244][ T29] audit: type=1400 audit(1769028326.383:92): avc: denied { mounton } for pid=3325 comm="syz-executor" path="/root/syzkaller.hjaf3a/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.412612][ T3326] veth1_vlan: entered promiscuous mode [ 27.432662][ T29] audit: type=1400 audit(1769028326.383:93): avc: denied { mount } for pid=3325 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.441488][ T3318] veth1_vlan: entered promiscuous mode [ 27.459741][ T29] audit: type=1400 audit(1769028326.383:94): avc: denied { mounton } for pid=3325 comm="syz-executor" path="/root/syzkaller.hjaf3a/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.485998][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.499259][ T29] audit: type=1400 audit(1769028326.413:95): avc: denied { mounton } for pid=3325 comm="syz-executor" path="/root/syzkaller.hjaf3a/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.512163][ T3318] veth0_macvtap: entered promiscuous mode [ 27.526955][ T29] audit: type=1400 audit(1769028326.413:96): avc: denied { unmount } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.535934][ T3318] veth1_macvtap: entered promiscuous mode [ 27.562184][ T29] audit: type=1400 audit(1769028326.533:97): avc: denied { mounton } for pid=3325 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.580035][ T3327] veth0_macvtap: entered promiscuous mode [ 27.585013][ T29] audit: type=1400 audit(1769028326.533:98): avc: denied { mount } for pid=3325 comm="syz-executor" name="/" dev="gadgetfs" ino=4617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.594088][ T3327] veth1_macvtap: entered promiscuous mode [ 27.619846][ T3326] veth0_macvtap: entered promiscuous mode [ 27.626646][ T3325] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.635348][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.653655][ T3326] veth1_macvtap: entered promiscuous mode [ 27.665376][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.673559][ T29] audit: type=1400 audit(1769028326.703:99): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.707226][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.714719][ T3489] loop0: detected capacity change from 0 to 1024 [ 27.715825][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.728776][ T1629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.738794][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.751387][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.764828][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.777893][ T1629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.790700][ T1629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.800666][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.809855][ T1629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.843492][ T1629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.868078][ T1629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.897650][ T1629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.937063][ T1629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.998298][ T3503] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 28.016433][ T3506] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 28.023543][ T1629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.053260][ T1629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.077252][ T1629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.099924][ T3516] loop1: detected capacity change from 0 to 256 [ 28.111075][ T1629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.135419][ T3516] vfat: Unknown parameter '0x0000000000000004' [ 28.149653][ T1629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.181023][ T1629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.197038][ T3496] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 28.207611][ T1629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.217134][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.264246][ T3527] loop2: detected capacity change from 0 to 128 [ 28.330746][ T3527] syz.2.8: attempt to access beyond end of device [ 28.330746][ T3527] loop2: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 28.344116][ T3527] syz.2.8: attempt to access beyond end of device [ 28.344116][ T3527] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 28.357536][ T3527] syz.2.8: attempt to access beyond end of device [ 28.357536][ T3527] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 28.371343][ T3527] syz.2.8: attempt to access beyond end of device [ 28.371343][ T3527] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 28.385190][ T3527] syz.2.8: attempt to access beyond end of device [ 28.385190][ T3527] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 28.398685][ T3527] syz.2.8: attempt to access beyond end of device [ 28.398685][ T3527] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 28.412199][ T3527] syz.2.8: attempt to access beyond end of device [ 28.412199][ T3527] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 28.425506][ T3527] syz.2.8: attempt to access beyond end of device [ 28.425506][ T3527] loop2: rw=2049, sector=289, nr_sectors = 16 limit=128 [ 28.438945][ T3527] syz.2.8: attempt to access beyond end of device [ 28.438945][ T3527] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 28.452337][ T3527] syz.2.8: attempt to access beyond end of device [ 28.452337][ T3527] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 28.635481][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.662376][ T3531] loop0: detected capacity change from 0 to 1024 [ 28.669054][ T3531] ======================================================= [ 28.669054][ T3531] WARNING: The mand mount option has been deprecated and [ 28.669054][ T3531] and is ignored by this kernel. Remove the mand [ 28.669054][ T3531] option from the mount to silence this warning. [ 28.669054][ T3531] ======================================================= [ 28.707670][ T3531] EXT4-fs: inline encryption not supported [ 28.723727][ T3531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.739194][ T3531] random: crng reseeded on system resumption [ 28.748112][ T3531] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 28.789951][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.944852][ T3545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 28.961234][ T3553] tipc: Enabling of bearer rejected, failed to enable media [ 29.064751][ T3564] x_tables: duplicate underflow at hook 1 [ 29.067385][ T3562] team0: Device gtp0 is of different type [ 29.078380][ T3561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 29.172876][ T3561] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.192043][ T3561] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 29.202514][ T3561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3561 comm=syz.4.20 [ 29.368720][ T3547] Set syz1 is full, maxelem 65536 reached [ 29.678231][ T3574] netlink: 'syz.0.21': attribute type 22 has an invalid length. [ 29.685964][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 29.698358][ T52] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.698383][ T3574] netlink: 'syz.0.21': attribute type 22 has an invalid length. [ 29.707185][ T52] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.714818][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 29.724877][ T52] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.742559][ T52] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.751952][ T3574] Zero length message leads to an empty skb [ 29.801003][ T3578] loop0: detected capacity change from 0 to 512 [ 29.811515][ T3578] EXT4-fs: Ignoring removed orlov option [ 29.817359][ T3578] EXT4-fs: Ignoring removed i_version option [ 29.827159][ T3578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.845214][ T3578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.857880][ T3578] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.979976][ T3578] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.23: corrupted inode contents [ 29.992844][ T3590] netlink: 'syz.4.26': attribute type 2 has an invalid length. [ 30.000770][ T3578] EXT4-fs (loop0): Remounting filesystem read-only [ 30.007922][ T3585] loop2: detected capacity change from 0 to 4096 [ 30.026454][ T3585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.049579][ T3589] infiniband !yz!: set active [ 30.053482][ T3578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23'. [ 30.054513][ T3589] infiniband !yz!: added team_slave_0 [ 30.137352][ T3589] RDS/IB: !yz!: added [ 30.143533][ T3589] smc: adding ib device !yz! with port count 1 [ 30.160179][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.190433][ T3589] smc: ib device !yz! port 1 has no pnetid [ 30.206735][ T3598] loop4: detected capacity change from 0 to 512 [ 30.216256][ T3598] EXT4-fs: dax option not supported [ 30.254783][ T3600] wireguard0: entered promiscuous mode [ 30.260293][ T3600] wireguard0: entered allmulticast mode [ 30.327523][ T3607] mmap: syz.4.31 (3607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.412334][ T3611] loop4: detected capacity change from 0 to 1024 [ 30.437646][ T3611] EXT4-fs: Ignoring removed bh option [ 30.482934][ T3611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.508022][ T3613] can: request_module (can-proto-0) failed. [ 30.530393][ T3611] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #12: block 7: comm syz.4.32: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 30.559131][ T3618] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 30.567027][ T3611] EXT4-fs (loop4): Remounting filesystem read-only [ 30.602498][ T3596] syz.2.25 (3596) used greatest stack depth: 10168 bytes left [ 30.611661][ T3621] random: crng reseeded on system resumption [ 30.627014][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.670099][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.691555][ T3623] netlink: 104 bytes leftover after parsing attributes in process `syz.0.37'. [ 30.769033][ T3625] loop2: detected capacity change from 0 to 512 [ 30.777740][ T3630] IPVS: Scheduler module ip_vs_@ not found [ 30.785646][ T3625] EXT4-fs: Ignoring removed oldalloc option [ 30.792652][ T3625] EXT4-fs: Ignoring removed nobh option [ 30.831938][ T3625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6064e02c, mo2=0002] [ 30.862122][ T3625] System zones: 1-12 [ 30.874058][ T3625] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.916635][ T3625] EXT4-fs (loop2): shut down requested (1) [ 30.952835][ T3645] netlink: 96 bytes leftover after parsing attributes in process `syz.4.43'. [ 31.073527][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.098455][ T3657] random: crng reseeded on system resumption [ 31.105705][ T3655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'. [ 31.126849][ T3659] loop4: detected capacity change from 0 to 512 [ 31.150258][ T3659] EXT4-fs: Ignoring removed orlov option [ 31.156110][ T3659] EXT4-fs: Ignoring removed i_version option [ 31.162933][ T3659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.184056][ T3659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.197987][ T3659] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.210648][ T3659] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.49: corrupted inode contents [ 31.222779][ T3659] EXT4-fs (loop4): Remounting filesystem read-only [ 31.230936][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 31.247083][ T3664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 31.273656][ T3665] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.291403][ T3665] EXT4-fs (loop1): mount failed [ 31.343269][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.361400][ T3671] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 31.374896][ T3671] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.425994][ T3325] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.460838][ T3678] netlink: 96 bytes leftover after parsing attributes in process `syz.4.56'. [ 31.536492][ T3691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.598051][ T3697] EXT4-fs: inline encryption not supported [ 31.608010][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.631913][ T3681] syz.0.55 (3681) used greatest stack depth: 9224 bytes left [ 31.663372][ T3697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.676307][ T3326] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 31.686327][ T3697] random: crng reseeded on system resumption [ 31.765607][ T3706] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.792631][ T3711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.801151][ T3711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.810270][ T3706] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.831962][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.881652][ T3714] syz_tun: entered allmulticast mode [ 31.889051][ T3718] netlink: 'syz.4.69': attribute type 4 has an invalid length. [ 32.038428][ T3737] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 32.060844][ T3737] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.72: invalid indirect mapped block 2683928664 (level 1) [ 32.082943][ T3737] EXT4-fs (loop3): Remounting filesystem read-only [ 32.095093][ T3737] EXT4-fs (loop3): 1 truncate cleaned up [ 32.108595][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.122533][ T3737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.205180][ T3751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.241362][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.254806][ T3326] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.418840][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 32.418855][ T29] audit: type=1400 audit(1769028331.453:274): avc: denied { mount } for pid=3805 comm="syz.1.82" name="/" dev="ramfs" ino=5533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 32.458130][ T3809] process 'syz.3.83' launched '/dev/fd/3' with NULL argv: empty string added [ 32.478774][ T3806] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.503414][ T3806] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 32.524748][ T29] audit: type=1400 audit(1769028331.453:275): avc: denied { create } for pid=3805 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.524812][ T3806] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.544092][ T29] audit: type=1400 audit(1769028331.483:276): avc: denied { map } for pid=3805 comm="syz.1.82" path="socket:[5534]" dev="sockfs" ino=5534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.544119][ T29] audit: type=1400 audit(1769028331.483:277): avc: denied { read } for pid=3805 comm="syz.1.82" path="socket:[5534]" dev="sockfs" ino=5534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.544169][ T29] audit: type=1400 audit(1769028331.493:278): avc: denied { mounton } for pid=3805 comm="syz.1.82" path="/file0" dev="ramfs" ino=5535 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 32.544188][ T29] audit: type=1400 audit(1769028331.493:279): avc: denied { read } for pid=3808 comm="syz.3.83" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.544208][ T29] audit: type=1400 audit(1769028331.493:280): avc: denied { open } for pid=3808 comm="syz.3.83" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.544239][ T29] audit: type=1400 audit(1769028331.493:281): avc: denied { ioctl } for pid=3808 comm="syz.3.83" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.544260][ T29] audit: type=1400 audit(1769028331.533:282): avc: denied { execute_no_trans } for pid=3808 comm="syz.3.83" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.762634][ T3806] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 32.792057][ T3806] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.82: Failed to acquire dquot type 0 [ 32.822729][ T3806] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.82: Failed to acquire dquot type 0 [ 32.844457][ T3806] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.82: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.863153][ T3806] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.82: Failed to acquire dquot type 0 [ 32.891607][ T3827] set_capacity_and_notify: 9 callbacks suppressed [ 32.891625][ T3827] loop4: detected capacity change from 0 to 764 [ 32.892476][ T3806] EXT4-fs (loop1): 1 orphan inode deleted [ 32.917080][ T3806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.930140][ T3806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.942168][ T3827] iso9660: Bad value for 'check' [ 33.007907][ T3850] team0: Device gtp0 is of different type [ 33.009175][ T3852] loop2: detected capacity change from 0 to 512 [ 33.027774][ T3852] EXT4-fs: Ignoring removed orlov option [ 33.033794][ T3852] EXT4-fs: Ignoring removed i_version option [ 33.066958][ T3852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.071764][ T3868] tipc: Enabling of bearer rejected, media not registered [ 33.084742][ T3852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.084822][ T3852] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.109568][ T3852] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.92: corrupted inode contents [ 33.109708][ T3852] EXT4-fs (loop2): Remounting filesystem read-only [ 33.132619][ T3865] loop4: detected capacity change from 0 to 8192 [ 33.149156][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.155511][ T3865] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.185030][ T3882] loop2: detected capacity change from 0 to 512 [ 33.208321][ T3886] loop0: detected capacity change from 0 to 512 [ 33.209346][ T3882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.209413][ T3882] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.244787][ T3886] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.265860][ T3882] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.99: iget: bad i_size value: 2533274857506816 [ 33.315734][ T3899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3899 comm=syz.4.101 [ 33.331870][ T3886] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 33.344828][ T3886] EXT4-fs (loop0): orphan cleanup on readonly fs [ 33.345509][ T3899] loop4: detected capacity change from 0 to 4096 [ 33.351680][ T3886] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.372544][ T3886] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 33.391694][ T3899] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.398208][ T3899] EXT4-fs: test_dummy_encryption option not supported [ 33.407797][ T3886] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.100: corrupted inode contents [ 33.438127][ T3886] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.100: mark_inode_dirty error [ 33.465501][ T3914] loop1: detected capacity change from 0 to 512 [ 33.472699][ T3886] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.100: corrupted inode contents [ 33.484856][ T3914] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.485283][ T3886] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.100: mark_inode_dirty error [ 33.493726][ T3914] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.505293][ T3886] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.100: corrupted inode contents [ 33.538037][ T3886] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 33.563452][ T3920] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 33.570322][ T3886] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.100: corrupted inode contents [ 33.586518][ T3914] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.104: Allocating blocks 41-42 which overlap fs metadata [ 33.605037][ T3886] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.100: mark_inode_dirty error [ 33.616845][ T3914] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.104: Allocating blocks 41-42 which overlap fs metadata [ 33.630847][ T3886] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 33.639959][ T3914] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.104: Failed to acquire dquot type 1 [ 33.651694][ T3914] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 33.652908][ T3886] EXT4-fs (loop0): 1 truncate cleaned up [ 33.666378][ T3914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.104: corrupted inode contents [ 33.683713][ T3914] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.104: mark_inode_dirty error [ 33.695423][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.708271][ T3914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.104: corrupted inode contents [ 33.732421][ T3914] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.104: mark_inode_dirty error [ 33.743838][ T3914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.104: corrupted inode contents [ 33.763685][ T3886] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.100: iget: bad i_size value: 360287970189639690 [ 33.776507][ T3914] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 33.789811][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.800687][ T3914] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.104: corrupted inode contents [ 33.814341][ T3914] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.104: mark_inode_dirty error [ 33.829602][ T3914] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 33.839432][ T3914] EXT4-fs (loop1): 1 truncate cleaned up [ 33.846272][ T3914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.961878][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.980081][ T3934] loop0: detected capacity change from 0 to 1024 [ 34.016836][ T3942] tipc: Enabling of bearer rejected, media not registered [ 34.043648][ T3934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.046164][ T3947] loop4: detected capacity change from 0 to 512 [ 34.074177][ T3934] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 34.084435][ T3946] team0: Device gtp0 is of different type [ 34.099766][ T3956] __nla_validate_parse: 14 callbacks suppressed [ 34.099784][ T3956] netlink: 76 bytes leftover after parsing attributes in process `syz.1.113'. [ 34.134603][ T3947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.211517][ T3947] netlink: 'syz.4.112': attribute type 21 has an invalid length. [ 34.220721][ T3947] netlink: 104 bytes leftover after parsing attributes in process `syz.4.112'. [ 34.234941][ T3954] loop3: detected capacity change from 0 to 8192 [ 34.245939][ T3954] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.319846][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.330261][ T3974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=3974 comm=syz.1.117 [ 34.376360][ T3974] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.382971][ T3974] EXT4-fs: test_dummy_encryption option not supported [ 34.390493][ T3981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.429580][ T3981] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.454210][ T3981] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.116: iget: bad i_size value: 2533274857506816 [ 34.665266][ T3995] wireguard0: entered promiscuous mode [ 34.670774][ T3995] wireguard0: entered allmulticast mode [ 34.819968][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.913162][ T4009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.074768][ T4022] netlink: 96 bytes leftover after parsing attributes in process `syz.0.122'. [ 35.200707][ T4033] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 35.209995][ T4034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.124'. [ 35.218959][ T4034] netlink: 140 bytes leftover after parsing attributes in process `syz.0.124'. [ 35.281376][ T4037] team0: Device gtp0 is of different type [ 35.394623][ T4042] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.507484][ T4048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.560490][ T4048] netlink: 'syz.3.127': attribute type 21 has an invalid length. [ 35.588529][ T4048] netlink: 104 bytes leftover after parsing attributes in process `syz.3.127'. [ 35.631545][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.690121][ T4056] EXT4-fs: dax option not supported [ 35.818039][ T4070] EXT4-fs: Ignoring removed orlov option [ 35.823832][ T4070] EXT4-fs: Ignoring removed i_version option [ 35.844023][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.858617][ T4070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.894899][ T4070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.932079][ T4070] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.957256][ T4070] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.132: corrupted inode contents [ 35.982615][ T4070] EXT4-fs (loop3): Remounting filesystem read-only [ 36.024864][ T4089] netlink: 96 bytes leftover after parsing attributes in process `syz.1.136'. [ 36.034924][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 36.125530][ T4098] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.164585][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.209297][ T4112] netlink: 76 bytes leftover after parsing attributes in process `syz.0.141'. [ 36.258400][ T4113] random: crng reseeded on system resumption [ 36.276952][ T4100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 36.377591][ T4121] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 37.076280][ T4144] x_tables: duplicate underflow at hook 1 [ 37.473718][ T4170] netlink: 'syz.0.152': attribute type 4 has an invalid length. [ 37.572115][ T3581] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 37.597471][ T3581] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 37.619727][ T4176] EXT4-fs: Ignoring removed oldalloc option [ 37.662172][ T4176] EXT4-fs: Ignoring removed nobh option [ 37.682695][ T4176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6064e02c, mo2=0002] [ 37.718754][ T4176] System zones: 1-12 [ 37.732620][ T4176] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.776031][ T4176] EXT4-fs (loop0): shut down requested (1) [ 37.857580][ T3325] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 37.918287][ T4200] random: crng reseeded on system resumption [ 38.114644][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 38.114658][ T29] audit: type=1400 audit(1769028337.153:328): avc: denied { bind } for pid=4213 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.316080][ T29] audit: type=1400 audit(1769028337.353:329): avc: denied { create } for pid=4213 comm="syz.1.162" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.387917][ T4204] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 38.393856][ T29] audit: type=1400 audit(1769028337.383:330): avc: denied { write } for pid=4213 comm="syz.1.162" name="file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.423597][ T29] audit: type=1400 audit(1769028337.383:331): avc: denied { open } for pid=4213 comm="syz.1.162" path="/37/file0" dev="tmpfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.446154][ T29] audit: type=1400 audit(1769028337.413:332): avc: denied { create } for pid=4213 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 38.465537][ T29] audit: type=1400 audit(1769028337.423:333): avc: denied { bind } for pid=4202 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.484689][ T29] audit: type=1400 audit(1769028337.423:334): avc: denied { read } for pid=4202 comm="syz.3.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.558068][ T29] audit: type=1326 audit(1769028337.593:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00aeddacb9 code=0x7ffc0000 [ 38.558292][ T4221] FAULT_INJECTION: forcing a failure. [ 38.558292][ T4221] name failslab, interval 1, probability 0, space 0, times 0 [ 38.581605][ T29] audit: type=1326 audit(1769028337.593:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00aeddacb9 code=0x7ffc0000 [ 38.594274][ T4221] CPU: 1 UID: 0 PID: 4221 Comm: syz.0.163 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.594346][ T4221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.594358][ T4221] Call Trace: [ 38.594369][ T4221] [ 38.594377][ T4221] __dump_stack+0x1d/0x30 [ 38.594459][ T4221] dump_stack_lvl+0x95/0xd0 [ 38.594480][ T4221] dump_stack+0x15/0x1b [ 38.594498][ T4221] should_fail_ex+0x263/0x280 [ 38.594519][ T4221] should_failslab+0x8c/0xb0 [ 38.594586][ T4221] kmem_cache_alloc_noprof+0x68/0x490 [ 38.594606][ T4221] ? alloc_empty_file+0x76/0x200 [ 38.594631][ T4221] alloc_empty_file+0x76/0x200 [ 38.594720][ T4221] alloc_file_pseudo+0xf6/0x190 [ 38.594742][ T4221] anon_inode_getfile+0xa0/0x120 [ 38.594768][ T4221] do_epoll_create+0x1b4/0x280 [ 38.594844][ T4221] __x64_sys_epoll_create1+0x1e/0x30 [ 38.594869][ T4221] x64_sys_call+0x114e/0x3000 [ 38.594892][ T4221] do_syscall_64+0xc0/0x2a0 [ 38.595014][ T4221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.595040][ T4221] RIP: 0033:0x7f00aeddacb9 [ 38.595061][ T4221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.595078][ T4221] RSP: 002b:00007f00ad837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 38.595175][ T4221] RAX: ffffffffffffffda RBX: 00007f00af055fa0 RCX: 00007f00aeddacb9 [ 38.595188][ T4221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.595201][ T4221] RBP: 00007f00ad837090 R08: 0000000000000000 R09: 0000000000000000 [ 38.595213][ T4221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.595225][ T4221] R13: 00007f00af056038 R14: 00007f00af055fa0 R15: 00007ffedc9653b8 [ 38.595245][ T4221] [ 38.763188][ T4228] netlink: 'syz.3.165': attribute type 4 has an invalid length. [ 38.765389][ T29] audit: type=1326 audit(1769028337.593:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4220 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00aeddacb9 code=0x7ffc0000 [ 38.775108][ T4227] set_capacity_and_notify: 8 callbacks suppressed [ 38.775172][ T4227] loop0: detected capacity change from 0 to 512 [ 38.836920][ T4229] netlink: 'syz.1.164': attribute type 21 has an invalid length. [ 38.891172][ T4232] loop1: detected capacity change from 0 to 512 [ 38.917101][ T4227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.932172][ T4227] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.948138][ T4232] msdos: Unexpected value for 'dots' [ 39.125518][ T4264] __nla_validate_parse: 7 callbacks suppressed [ 39.125537][ T4264] netlink: 76 bytes leftover after parsing attributes in process `syz.3.176'. [ 39.143867][ T4262] loop1: detected capacity change from 0 to 512 [ 39.173913][ T4267] netlink: 76 bytes leftover after parsing attributes in process `syz.3.177'. [ 39.175412][ T4262] EXT4-fs: Ignoring removed orlov option [ 39.188689][ T4262] EXT4-fs: Ignoring removed i_version option [ 39.221265][ T4262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.244386][ T4270] netlink: 3 bytes leftover after parsing attributes in process `syz.3.178'. [ 39.262840][ T4270] 0ªX¹¦À: renamed from caif0 [ 39.268474][ T4262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.293729][ T4270] 0ªX¹¦À: entered allmulticast mode [ 39.298955][ T4270] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 39.334406][ T4262] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.416940][ T4262] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.175: corrupted inode contents [ 39.430879][ T4262] EXT4-fs (loop1): Remounting filesystem read-only [ 39.499419][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.606899][ T4292] netlink: 96 bytes leftover after parsing attributes in process `syz.3.184'. [ 39.677164][ T4295] loop3: detected capacity change from 0 to 512 [ 39.723325][ T4295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.754244][ T4295] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.437870][ T4304] netlink: 76 bytes leftover after parsing attributes in process `syz.1.188'. [ 40.529203][ T4308] loop1: detected capacity change from 0 to 1024 [ 40.552605][ T4308] EXT4-fs: Ignoring removed bh option [ 40.582620][ T4308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.632806][ T4308] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.189: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 40.709235][ T4308] EXT4-fs (loop1): Remounting filesystem read-only [ 41.368220][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.490886][ T4321] loop1: detected capacity change from 0 to 2048 [ 41.503778][ T4182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 41.545571][ T4321] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.592958][ T4321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.642072][ T4321] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.792073][ T4326] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.191: bg 0: block 345: padding at end of block bitmap is not set [ 41.842279][ T4326] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 583 with error 117 [ 41.854867][ T4326] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.854867][ T4326] [ 41.916027][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 599 with max blocks 1 with error 28 [ 41.928454][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.928454][ T31] [ 41.938130][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 41.944225][ T31] EXT4-fs (loop1): Free/Dirty block details [ 41.950110][ T31] EXT4-fs (loop1): free_blocks=0 [ 41.955051][ T31] EXT4-fs (loop1): dirty_blocks=16 [ 41.960183][ T31] EXT4-fs (loop1): Block reservation details [ 42.130606][ T4331] xt_l2tp: wrong L2TP version: 35 [ 42.524233][ T4341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 43.059516][ T4350] loop1: detected capacity change from 0 to 1024 [ 43.359010][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 43.359098][ T29] audit: type=1326 audit(1769028342.393:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.432021][ T29] audit: type=1326 audit(1769028342.423:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.455173][ T29] audit: type=1326 audit(1769028342.423:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.478513][ T29] audit: type=1326 audit(1769028342.423:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.501695][ T29] audit: type=1326 audit(1769028342.423:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.525000][ T29] audit: type=1326 audit(1769028342.423:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.548304][ T29] audit: type=1326 audit(1769028342.423:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.571613][ T29] audit: type=1326 audit(1769028342.423:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f113936b58e code=0x7ffc0000 [ 43.594945][ T29] audit: type=1326 audit(1769028342.423:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f113936b58e code=0x7ffc0000 [ 43.618373][ T29] audit: type=1326 audit(1769028342.423:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.1.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11393aacb9 code=0x7ffc0000 [ 43.852112][ T4371] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 43.892397][ T4182] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 44.344506][ T4377] netlink: 64 bytes leftover after parsing attributes in process `syz.1.204'. [ 44.353410][ T4377] netlink: 64 bytes leftover after parsing attributes in process `syz.1.204'. [ 45.417011][ T4394] netlink: 96 bytes leftover after parsing attributes in process `syz.1.208'. [ 45.967710][ T4408] loop1: detected capacity change from 0 to 512 [ 45.984179][ T4408] EXT4-fs: Ignoring removed oldalloc option [ 45.993910][ T4408] EXT4-fs: Ignoring removed nobh option [ 46.022650][ T4408] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6064e02c, mo2=0002] [ 46.030609][ T4408] System zones: 1-12 [ 46.042674][ T4408] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.132997][ T4408] EXT4-fs (loop1): shut down requested (1) [ 46.191775][ T3320] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 49.052910][ T3895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.099199][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.153193][ T4421] chnl_net:caif_netlink_parms(): no params data found [ 49.217351][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.284948][ T52] ================================================================== [ 49.293041][ T52] BUG: KCSAN: data-race in alloc_pid / copy_process [ 49.299621][ T52] [ 49.301929][ T52] read-write to 0xffffffff86a60008 of 4 bytes by task 384 on cpu 1: [ 49.309885][ T52] alloc_pid+0x54c/0x760 [ 49.314123][ T52] copy_process+0xdd2/0x1f10 [ 49.318788][ T52] kernel_clone+0x16b/0x5b0 [ 49.323275][ T52] user_mode_thread+0x9c/0xd0 [ 49.327935][ T52] call_usermodehelper_exec_work+0x41/0x160 [ 49.333824][ T52] process_scheduled_works+0x4cd/0x9d0 [ 49.339298][ T52] worker_thread+0x581/0x770 [ 49.343963][ T52] kthread+0x488/0x510 [ 49.348018][ T52] ret_from_fork+0x148/0x280 [ 49.352595][ T52] ret_from_fork_asm+0x1a/0x30 [ 49.357346][ T52] [ 49.359662][ T52] read to 0xffffffff86a60008 of 4 bytes by task 52 on cpu 0: [ 49.367008][ T52] copy_process+0x16e4/0x1f10 [ 49.371753][ T52] kernel_clone+0x16b/0x5b0 [ 49.376246][ T52] user_mode_thread+0x9c/0xd0 [ 49.380914][ T52] call_usermodehelper_exec_work+0x41/0x160 [ 49.386813][ T52] process_scheduled_works+0x4cd/0x9d0 [ 49.392267][ T52] worker_thread+0x581/0x770 [ 49.396851][ T52] kthread+0x488/0x510 [ 49.400910][ T52] ret_from_fork+0x148/0x280 [ 49.405487][ T52] ret_from_fork_asm+0x1a/0x30 [ 49.410237][ T52] [ 49.412545][ T52] value changed: 0x800000ed -> 0x800000ee [ 49.418239][ T52] [ 49.420550][ T52] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 49.426679][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.436565][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.446692][ T52] Workqueue: events_unbound call_usermodehelper_exec_work [ 49.453794][ T52] ================================================================== [ 49.554533][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.561630][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.568888][ T4421] bridge_slave_0: entered allmulticast mode [ 49.575615][ T4421] bridge_slave_0: entered promiscuous mode [ 49.582546][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.589733][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.596899][ T4421] bridge_slave_1: entered allmulticast mode [ 49.603462][ T4421] bridge_slave_1: entered promiscuous mode [ 49.640528][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.675269][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.718886][ T4299] syz_tun (unregistering): left allmulticast mode [ 49.760016][ T31] bridge_slave_1: left allmulticast mode [ 49.765853][ T31] bridge_slave_1: left promiscuous mode [ 49.771523][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.779219][ T31] bridge_slave_0: left allmulticast mode [ 49.784897][ T31] bridge_slave_0: left promiscuous mode [ 49.790564][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.836410][ T4242] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.853529][ T4299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.876679][ T3991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.886341][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.896749][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.906291][ T31] bond0 (unregistering): Released all slaves [ 49.937055][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 49.937070][ T29] audit: type=1400 audit(1769028348.973:405): avc: denied { getattr } for pid=4572 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.969403][ T29] audit: type=1400 audit(1769028348.983:406): avc: denied { read } for pid=4574 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.991178][ T29] audit: type=1400 audit(1769028348.983:407): avc: denied { open } for pid=4574 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=508 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.016510][ T29] audit: type=1400 audit(1769028349.033:408): avc: denied { create } for pid=4571 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.038806][ T29] audit: type=1400 audit(1769028349.033:409): avc: denied { write } for pid=4571 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1992 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.064927][ T29] audit: type=1400 audit(1769028349.033:410): avc: denied { append } for pid=4571 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1992 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.091616][ T29] audit: type=1400 audit(1769028349.053:411): avc: denied { unlink } for pid=4582 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1992 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.163949][ T31] hsr_slave_0: left promiscuous mode [ 50.169810][ T31] hsr_slave_1: left promiscuous mode [ 50.175939][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.183373][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.190956][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.198437][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.209814][ T31] veth1_macvtap: left promiscuous mode [ 50.216122][ T31] veth0_macvtap: left promiscuous mode [ 50.221658][ T31] veth1_vlan: left promiscuous mode [ 50.227221][ T31] veth0_vlan: left promiscuous mode [ 50.293651][ T31] team0 (unregistering): Port device team_slave_1 removed [ 50.303259][ T31] team0 (unregistering): Port device team_slave_0 removed [ 50.606741][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.654796][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.694883][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.754417][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.814200][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.865091][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.904974][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.975235][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.025509][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.035863][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.085241][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.095725][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.145319][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.155726][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.210307][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.220639][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.288210][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.346365][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.376728][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.437115][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.475118][ T31] debugfs: 'netdev@ffff88811adfc558' already exists in 'ref_tracker' [ 51.503446][ T31] bridge_slave_1: left allmulticast mode [ 51.509347][ T31] bridge_slave_1: left promiscuous mode [ 51.515138][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.522947][ T31] bridge_slave_0: left allmulticast mode [ 51.528633][ T31] bridge_slave_0: left promiscuous mode [ 51.534270][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.542895][ T31] bridge_slave_1: left allmulticast mode [ 51.548523][ T31] bridge_slave_1: left promiscuous mode [ 51.554197][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.561988][ T31] bridge_slave_0: left allmulticast mode [ 51.567669][ T31] bridge_slave_0: left promiscuous mode [ 51.573633][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.581690][ T31] bridge_slave_1: left allmulticast mode [ 51.587548][ T31] bridge_slave_1: left promiscuous mode [ 51.593428][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.601111][ T31] bridge_slave_0: left allmulticast mode [ 51.606844][ T31] bridge_slave_0: left promiscuous mode [ 51.612538][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.620764][ T31] bridge_slave_1: left allmulticast mode [ 51.626523][ T31] bridge_slave_1: left promiscuous mode [ 51.632202][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.639898][ T31] bridge_slave_0: left allmulticast mode [ 51.645610][ T31] bridge_slave_0: left promiscuous mode [ 51.651313][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.659438][ T31] bridge_slave_1: left allmulticast mode [ 51.665121][ T31] bridge_slave_1: left promiscuous mode [ 51.670738][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.678531][ T31] bridge_slave_0: left allmulticast mode [ 51.684254][ T31] bridge_slave_0: left promiscuous mode [ 51.689881][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.814579][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.824311][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.833687][ T31] bond0 (unregistering): Released all slaves [ 51.914539][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.924208][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.933723][ T31] bond0 (unregistering): Released all slaves [ 52.004772][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.014632][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.024034][ T31] bond0 (unregistering): Released all slaves [ 52.093622][ T31] bond0 (unregistering): Released all slaves [ 52.134706][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.144260][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.153685][ T31] bond0 (unregistering): Released all slaves [ 52.291725][ T31] hsr_slave_0: left promiscuous mode [ 52.299553][ T31] hsr_slave_1: left promiscuous mode [ 52.306050][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.313468][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.320991][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.328455][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.337923][ T31] hsr_slave_0: left promiscuous mode [ 52.343845][ T31] hsr_slave_1: left promiscuous mode [ 52.349553][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.357052][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.364889][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.372467][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.382724][ T31] hsr_slave_0: left promiscuous mode [ 52.388503][ T31] hsr_slave_1: left promiscuous mode [ 52.394156][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.401519][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.409307][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.416771][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.425754][ T31] hsr_slave_0: left promiscuous mode [ 52.431501][ T31] hsr_slave_1: left promiscuous mode [ 52.437350][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.444909][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.452524][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.459944][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.476584][ T31] veth1_macvtap: left promiscuous mode [ 52.482113][ T31] veth0_macvtap: left promiscuous mode [ 52.487602][ T31] veth1_vlan: left promiscuous mode [ 52.492887][ T31] veth0_vlan: left promiscuous mode [ 52.498608][ T31] veth1_macvtap: left promiscuous mode [ 52.504394][ T31] veth0_macvtap: left promiscuous mode [ 52.509955][ T31] veth1_vlan: left promiscuous mode [ 52.515245][ T31] veth0_vlan: left promiscuous mode [ 52.521590][ T31] veth1_macvtap: left promiscuous mode [ 52.527131][ T31] veth0_macvtap: left promiscuous mode [ 52.532794][ T31] veth1_vlan: left promiscuous mode [ 52.538007][ T31] veth0_vlan: left promiscuous mode [ 52.544615][ T31] veth1_macvtap: left promiscuous mode [ 52.550100][ T31] veth0_macvtap: left promiscuous mode [ 52.555628][ T31] veth1_vlan: left promiscuous mode [ 52.560881][ T31] veth0_vlan: left promiscuous mode [ 52.701890][ T31] team0 (unregistering): Port device team_slave_1 removed [ 52.711688][ T31] team0 (unregistering): Port device team_slave_0 removed [ 52.763037][ T31] team0 (unregistering): Port device team_slave_1 removed [ 52.772406][ T31] team0 (unregistering): Port device team_slave_0 removed [ 52.823801][ T31] team0 (unregistering): Port device team_slave_1 removed [ 52.834098][ T31] team0 (unregistering): Port device team_slave_0 removed [ 52.900058][ T31] team0 (unregistering): Port device team_slave_1 removed [ 52.910587][ T31] team0 (unregistering): Port device team_slave_0 removed [ 52.918347][ T52] smc: removing ib device !yz!