last executing test programs: 2.845332243s ago: executing program 4 (id=139): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.803484366s ago: executing program 4 (id=141): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@grpid}, {@jqfmt_vfsold}, {@noquota}, {@debug}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4f5, &(0x7f00000006c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) ptrace(0x10, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xe, 0x796c, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x10, 0x1, 0x5, 0x1}}) 2.596063308s ago: executing program 1 (id=144): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x6, 0x0, &(0x7f0000000040)="ded6e0966ec1", 0x0, 0x0, 0x3}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001340)={0x0, 0x8}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000001c0)={'erspan0\x00', {0x2, 0x0, @dev}}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r3) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}, 0x16}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) socket$kcm(0x29, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000580)="40e57a4222c1d3c8afba10c0e65baf89dca2be4aad933a23bc03d9167a0111a2fff8b6632f23fa0aaf1b512cfb6c75ec1da1a975935807ce13fbec1d8b6facfbab0713d30713870b25f88f58ad4fa428c220966b043b2140cdc2aabc3c56a13ff047496b", &(0x7f0000000880)=""/177, &(0x7f0000000a40)="e2ec47e20c23be6f691a234dcee9d7a30552b5c28f204e37693c2621dfeb50e292bd69ab3a259053e74ae904d875bae99265aca4651666ca91d5493de6adf55f73e56285e3df8fad8e8a2d62cf2dc266b246c987b1619b488f1ed28b977f8885ec7ceb17613c50cb3cb7de8109f0429c10df9e73dd255818768ef2dfbc44fdefd38c03b106bca8c54a", &(0x7f0000000b00)="f5938e1ba5eda0d6043e486bd5d3a5d97622d53902f240fe71ca67376dd096f00c755892e82b16a172f2559ff21ea4d523405a4d17587e5230d0498421530e94fbecde7a99625d6596af98afcbc985819c41dbfe7da255849b2767947f0e231f45ed6d1b23399fbcf38ff6e917cb114bf507dfe107d31bca9d42eba3059845c0", 0xd9, r3}, 0x38) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000400)=""/76) 2.38892382s ago: executing program 4 (id=147): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="d3e871f3a1d3344a091469db57a91f5d795b55dc6a04d94c746eb7e724dd47d3777fe1dc2b79413d5936a89ac38588dcdeebbe87390ef3b4208029c29e5d620792df6cee8a93e4731116af5610a072f66793aad59845bfe897760573f2faddc7e2e116a863556954470e697197a38385525d8767a10d5e5fd62c7c5615953bee4d299e5d86cc0fe4ca40e033e3f0a2c0e769e728a55cb2fd7390a4640754e5b1a21d8f735050efcf6a402f1d7d4cba8d76dde60e1a02ca9c72b1b23c3a7514ffa1a1aede013aef0825fdde32f254f22074c12dba31a29182f68c0360a1a01f90251c8988", 0xe4}, {&(0x7f0000000400)="d30cbf8fa70026ee3cd49e0859e7dafcd3523e5e204e97d9ac5adf26abd70e5e9cd67f69eb19f31cae1d278dd886d59e066c1bc9c0b6a846a341c5947c2317f18b59a7b3cbcb1b9c3e2d561735e0b5803319aa5a388256cd5381fac4984c12e66af06068dbd947973b658b8c07f7302e2cf0ea2784ae3870935d7e313bd1f1f26227b9656bd491c685863d3e2aa3eb4b2008d1c0407457c6dc38d81e7eed16868d27e4", 0xa3}, {&(0x7f0000000680)="4ebb06a386c2b88eb6c00f6fcf33e8b927749339f7c8a80fb00204dd4222f9573d5b3b02c290dbe09bb4954475b0ecd2438a29ebc23b2cbd5b460740ed00b1bc592cfcbc827f2d71eb6932ec1dfb4f727e54b42113dd324d7cc4f8f898edf2ef0562df9c84fac075931078fae0bfb8f0df46dc450ceb8924eb61eff1a898889009ce210c4ec198a91b7eb909cbf2a6e2", 0x90}], 0x3}}], 0x1, 0x4) 2.271233507s ago: executing program 4 (id=150): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) migrate_pages(0xffffffffffffffff, 0x7f, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) waitid(0x2, r5, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@subj_type={'subj_type', 0x3d, 'n\x04\xb2\x8ei\xdd\xd0U\\c'}}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2007, @fd=r0, 0x8, 0x0, 0x0, 0xc, 0x1, {0x1, r6}}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r7, &(0x7f00000000c0)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1e) close(0x3) 1.566644388s ago: executing program 1 (id=162): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.53392222s ago: executing program 4 (id=163): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xd}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) syz_clone(0x8080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x7, 0x4, 0x3, 0x71, 0x0, 0x3, 0x3, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1425, 0x1, @perf_bp={&(0x7f0000000400), 0xd}, 0xfe38, 0x8, 0x0, 0x8, 0x8, 0x40, 0x38d, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00014900e180000008001b0000000000"], 0x28}}, 0x0) sendmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000900)="a9", 0x1}], 0x1}}], 0x1, 0x80) 1.490624043s ago: executing program 1 (id=165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0xfff5, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000808) 1.422452427s ago: executing program 3 (id=168): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x400000, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) 1.401715518s ago: executing program 1 (id=169): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40087}, 0x8010) 1.283381745s ago: executing program 3 (id=171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x3, 0x541b7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100002, 0x0, 0x0, 0x7, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000400000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001813e95e7824ef7b00000000005a6e2cf219ce"], 0x50) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095", @ANYRESHEX=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4, r1}, 0xc) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000600)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x2, 0x2, 0x8, 0xc, 0xced}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xe}}, './file0\x00'}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000300)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYRES16=r8, @ANYRES8=r0, @ANYRES32=r9, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (async) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xfff1, 0xfff2}, {0x9, 0xffff}, {0xc12ef5e1b4db1b50, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r10, @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4000004) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x1}}, 0x0) 1.252428837s ago: executing program 1 (id=173): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = syz_open_pts(r4, 0x80) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) dup3(r5, r4, 0x80000) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0xffffffec}) 1.091159536s ago: executing program 3 (id=175): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@grpid}, {@jqfmt_vfsold}, {@noquota}, {@debug}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4f5, &(0x7f00000006c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x1) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) ptrace(0x10, 0x0) socket(0x1e, 0x4, 0x0) 1.072826237s ago: executing program 2 (id=176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf523", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 886.098858ms ago: executing program 0 (id=178): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(r0, r0, 0x0, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) 782.188805ms ago: executing program 0 (id=179): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfd4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x148, 0x15, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_USERDATA={0xef, 0x8, "4687ec736309c385e92e298ad2f8958c822298a223baf30f24d28d78e1d8315ad8e8c0aa7c838eecc84b318b7f904cf9ed0906a6d0239e0b4d11839f06de679476a67e97b51973632feed3f6dfa19e6ed844d125477cebe0c32d53fde4a47e6882334c681229c622a3d7fa85c3f5be3e5bb0557d3d2d29175739dbb126ba44dfe42700651d3171b92013be82777956e1ea074f22f04c979adf0c9516d38448b27aaab03de1a2de7de632a9369e9cfa9e4d3a2fb7766bc117b83a9259674a32d6192cda31e518cd5d717587109d535b11b8b14a782b761d35b70c80a2007126a5404e4393ac53137e5546bd"}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x8d0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc044) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @dev, @dev}, &(0x7f0000000680)=0xc) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@bridge_getlink={0x4c, 0x12, 0x400, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r6, 0x10247, 0x4000e}, [@IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x3}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_WEIGHT={0x8, 0xf, 0x10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040014}, 0x4) pipe2(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) recvmsg$kcm(r8, &(0x7f0000001e40)={&(0x7f0000000800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000880)=""/221, 0xdd}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/104, 0x68}, {&(0x7f0000000a80)=""/133, 0x85}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/159, 0x9f}, {&(0x7f0000001c00)=""/148, 0x94}, {&(0x7f0000001cc0)=""/169, 0xa9}], 0x8, &(0x7f0000001e00)=""/63, 0x3f}, 0x4061) ioctl$BLKCRYPTOPREPAREKEY(r8, 0xc040128b, &(0x7f0000001f40)={&(0x7f0000001e80)="623158be815498e55e1e90cc3f35", 0xe, &(0x7f0000001ec0)=""/65, 0x41}) recvmmsg(r5, &(0x7f0000003300)=[{{&(0x7f0000001f80)=@tipc=@id, 0x80, &(0x7f0000003240)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/156, 0x9c}, {&(0x7f00000030c0)=""/28, 0x1c}, {&(0x7f0000003100)=""/53, 0x35}, {&(0x7f0000003140)=""/115, 0x73}, {&(0x7f00000031c0)=""/109, 0x6d}], 0x6, &(0x7f00000032c0)=""/58, 0x3a}, 0x9}], 0x1, 0x1, &(0x7f0000003340)={0x0, 0x3938700}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000033c0), r8) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x14, r9, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f00000034c0)={{0x1, 0x1, 0x18, r8, {0x9}}, './file0\x00'}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000003700)=0x0) syz_clone3(&(0x7f0000003780)={0x80000, &(0x7f0000003500), &(0x7f0000003540), &(0x7f0000003580), {0x35}, &(0x7f00000035c0)=""/107, 0x6b, &(0x7f0000003640)=""/160, &(0x7f0000003740)=[r11], 0x1, {r7}}, 0x58) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000003840), r8) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r12, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socketpair(0x2a, 0x800, 0x7, &(0x7f0000003940)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x1c, r14, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x8890) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000003b00)={{0xa, 0x4e23, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}, {0xa, 0x4e22, 0x328e, @private0, 0x8}, 0x1, {[0x0, 0x8, 0xfffffff9, 0x2, 0x7fffffff, 0xf, 0x5a, 0x6]}}, 0x5c) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000003bc0), r7) sendmsg$DEVLINK_CMD_TRAP_SET(r13, &(0x7f0000003dc0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003c00)={0x164, r16, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x164}, 0x1, 0x0, 0x0, 0x2400c800}, 0x4000004) 780.247605ms ago: executing program 2 (id=180): pipe2(&(0x7f0000000000), 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r0, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0x1, {0xc}}, 0x5c5c01) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x253, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 720.041218ms ago: executing program 4 (id=181): bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@gettaction={0x170, 0x32, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2b}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xec5}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6f04}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4095}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x110}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x170}, 0x1, 0x0, 0x0, 0x8010}, 0x240400d0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6f253caa}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@quota}, {@init_itable}, {@errors_remount}]}, 0x5, 0x569, &(0x7f0000000b00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6f253caa}}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@quota}, {@init_itable}, {@errors_remount}]}, 0x5, 0x569, &(0x7f0000000b00)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x45, 0x1, 0x2}, {0x61}, {0x81}, {0x6, 0x0, 0xfd}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 682.7108ms ago: executing program 2 (id=182): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0xfffffffffffffb7b, 0x202400) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001514"], 0x10}}, 0x40) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000280)=0x3) 642.664172ms ago: executing program 0 (id=183): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40087}, 0x8010) 641.932522ms ago: executing program 3 (id=184): unshare(0x2c020400) syz_emit_ethernet(0x56, &(0x7f0000000200)={@random="2cb3a85bd5f4", @local, @void, {@canfd={0xd, {{0x2, 0x0, 0x1, 0x1}, 0x10, 0x1, 0x0, 0x0, "bc08000000a44153af9e76eca02266055ebc557341c6092269de9d066b8d3e8bd462d721a8cd23b2eed8f3ccf6aa710e4541adcd31fd94b9dc90320003ab3f19"}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x581, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) timer_create(0x8, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) unshare(0x50000000) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001e80)=ANY=[@ANYBLOB="1800000003000000000000000800000091110000000000009500"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 550.997438ms ago: executing program 0 (id=185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x401041}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x24044010}, 0x2400c010) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001"], 0xd4}}, 0x4414) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000040)={0x0, 0x2, 0x5, 0xfb9, 0x2}) 550.139468ms ago: executing program 2 (id=186): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1, 0x549, &(0x7f0000000b40)="$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") 537.533919ms ago: executing program 0 (id=187): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x6, 0x0, &(0x7f0000000040)="ded6e0966ec1", 0x0, 0x0, 0x3}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001340)={0x0, 0x8}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020600) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000001c0)={'erspan0\x00', {0x2, 0x0, @dev}}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r3) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}, 0x16}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) socket$kcm(0x29, 0x7, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xf535, 0x7}, {0x0, 0x805, 0x1, 0x7, 0x60d8, 0x1}]}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={&(0x7f0000000580)="40e57a4222c1d3c8afba10c0e65baf89dca2be4aad933a23bc03d9167a0111a2fff8b6632f23fa0aaf1b512cfb6c75ec1da1a975935807ce13fbec1d8b6facfbab0713d30713870b25f88f58ad4fa428c220966b043b2140cdc2aabc3c56a13ff047496b", &(0x7f0000000880)=""/177, &(0x7f0000000a40)="e2ec47e20c23be6f691a234dcee9d7a30552b5c28f204e37693c2621dfeb50e292bd69ab3a259053e74ae904d875bae99265aca4651666ca91d5493de6adf55f73e56285e3df8fad8e8a2d62cf2dc266b246c987b1619b488f1ed28b977f8885ec7ceb17613c50cb3cb7de8109f0429c10df9e73dd255818768ef2dfbc44fdefd38c03b106bca8c54a", &(0x7f0000000b00)="f5938e1ba5eda0d6043e486bd5d3a5d97622d53902f240fe71ca67376dd096f00c755892e82b16a172f2559ff21ea4d523405a4d17587e5230d0498421530e94fbecde7a99625d6596af98afcbc985819c41dbfe7da255849b2767947f0e231f45ed6d1b23399fbcf38ff6e917cb114bf507dfe107d31bca9d42eba3059845c0", 0xd9, r3}, 0x38) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000400)=""/76) 511.19757ms ago: executing program 3 (id=188): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001900)=@newtaction={0x14, 0x30, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44811}, 0x20000051) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 338.90336ms ago: executing program 1 (id=189): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @empty, 0x0, 0x0, 0xa, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x4b8, 0x1}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x3, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000280)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f0000000100)=@sha1={0x1, "135e05ce8ce63c18f826a69c16e06c678ba7da37"}, 0x15, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x3}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0xe}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x5a, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2032}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f00000003c0), &(0x7f0000000340)=@tcp=r7, 0x1}, 0x20) rt_sigqueueinfo(0x0, 0x3b, &(0x7f0000000580)={0x37, 0x5, 0x9}) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) 177.69402ms ago: executing program 3 (id=190): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x48aa, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0xff, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x4}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000007311410000000000851000000200000085000023f35aea5847f369093038291b005d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) rmdir(&(0x7f0000000500)='./file0\x00') sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000002010300000080000000000200000a2c0002800c000280050001002f00000006000340000000001400018008000100ac1414bb080002000000000004000380040001"], 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004844) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3aff8ff1001000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x9, &(0x7f00000015c0)=""/150, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000300)=0xfffffffffffffddf) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000340)=0x7, 0x4) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180c8, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRESOCT=r3, @ANYRES8=r7, @ANYRESOCT=r3, @ANYRES8=r7, @ANYRES8=r3, @ANYRESHEX=r7], 0x1, 0x279, &(0x7f0000000580)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 85.650225ms ago: executing program 0 (id=191): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0xfffffffffffffffd}], 0x2}, 0x10000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) gettid() (async) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff9, 0xfffffffa, 0x10, 0xffff}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0x1d, 0x830, &(0x7f0000000440)={0x11, 0x2, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010328bd7000fedbdf251c00000028000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="140002"], 0x3c}}, 0x20000034) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001240)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0xf3, 0x3ff, {{0x41, 0x4, 0x3, 0x6, 0x104, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x23, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @local, @multicast1, @multicast1, @multicast1, @private=0xa010102]}, @ssrr={0x89, 0x27, 0x74, [@dev={0xac, 0x14, 0x14, 0x18}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x81, 0x3, 0x9, [{@private=0xa010101, 0x7dc}, {@empty, 0x81}, {@local, 0x3}, {@multicast1, 0x15}, {@empty, 0x2}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x9}]}, @noop, @cipso={0x86, 0x4b, 0x3, [{0x1, 0x7, "1eb10d90c8"}, {0x1, 0x12, "f5760dcc9189fe1d6ea85deb7d5f35a7"}, {0x4, 0x10, "db183190d94e7cd732d21633577c"}, {0x0, 0xc, "520505ff4cbd66d2b971"}, {0x2, 0x8, "62c308bb15ed"}, {0x7, 0x5, "25caee"}, {0x6, 0x3, '+'}]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x11, "c542940f7f710b54225a31e61aa41f"}, @lsrr={0x83, 0x7, 0x9c, [@dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001240)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0xf3, 0x3ff, {{0x41, 0x4, 0x3, 0x6, 0x104, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x23, 0xa4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @local, @multicast1, @multicast1, @multicast1, @private=0xa010102]}, @ssrr={0x89, 0x27, 0x74, [@dev={0xac, 0x14, 0x14, 0x18}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x81, 0x3, 0x9, [{@private=0xa010101, 0x7dc}, {@empty, 0x81}, {@local, 0x3}, {@multicast1, 0x15}, {@empty, 0x2}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x9}]}, @noop, @cipso={0x86, 0x4b, 0x3, [{0x1, 0x7, "1eb10d90c8"}, {0x1, 0x12, "f5760dcc9189fe1d6ea85deb7d5f35a7"}, {0x4, 0x10, "db183190d94e7cd732d21633577c"}, {0x0, 0xc, "520505ff4cbd66d2b971"}, {0x2, 0x8, "62c308bb15ed"}, {0x7, 0x5, "25caee"}, {0x6, 0x3, '+'}]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0x11, "c542940f7f710b54225a31e61aa41f"}, @lsrr={0x83, 0x7, 0x9c, [@dev={0xac, 0x14, 0x14, 0x28}]}]}}}}}) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001bc0)={0x880, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb25}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xcff3, 0x9, 0x6, 0x9}, {0x2, 0x2, 0x3, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa93f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x23c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffeec}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xe826, 0x5, 0x6, 0x9}, {0x9, 0xfc, 0x3, 0x9}, {0x98, 0x3, 0x0, 0x6}, {0x3a, 0x9, 0x8, 0x43}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0xd3, 0x1, 0x2}, {0x9, 0x4, 0x2, 0x8}, {0x4, 0x8, 0x25, 0x9}, {0x1, 0x3, 0x0, 0xb}, {0x96b, 0x3b, 0x1, 0xff}, {0x8, 0x9, 0x8, 0x3}]}}}, {0xffffffffffffff54, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffd808}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x880}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN(r11, 0x4040942c, &(0x7f0000000240)={0x0, 0x6, [0x100000000, 0x31, 0x1, 0x6, 0x80000001, 0x8]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 27.066118ms ago: executing program 2 (id=192): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003805fafffffffcdbdf2500000008", @ANYRES32=0x0, @ANYBLOB="02550400040000001c002b8008000100", @ANYRES32=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000800)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x253, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 0s ago: executing program 2 (id=193): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmmsg$inet(r0, 0x0, 0x0, 0x20000034) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000400)=0x13) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x46, 0x9}, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x8005, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="7cb2", 0x2}], 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x3) write(r0, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cf30203001a000000", 0x33a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 34.268246][ T28] audit: type=1400 audit(1771274570.432:67): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.291358][ T28] audit: type=1400 audit(1771274570.452:68): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.293789][ T3303] cgroup: Unknown subsys name 'net' [ 34.319756][ T28] audit: type=1400 audit(1771274570.482:69): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.456696][ T3303] cgroup: Unknown subsys name 'cpuset' [ 34.463226][ T3303] cgroup: Unknown subsys name 'rlimit' [ 34.574364][ T28] audit: type=1400 audit(1771274570.732:70): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.610676][ T28] audit: type=1400 audit(1771274570.742:71): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.631371][ T28] audit: type=1400 audit(1771274570.742:72): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.651997][ T28] audit: type=1400 audit(1771274570.742:73): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.672462][ T28] audit: type=1400 audit(1771274570.752:74): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.697445][ T28] audit: type=1400 audit(1771274570.752:75): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.714203][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.721244][ T28] audit: type=1400 audit(1771274570.762:76): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.782606][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.057074][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.080566][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.112978][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.128730][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.186320][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.242233][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.249666][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.256882][ T3317] bridge_slave_0: entered allmulticast mode [ 36.263616][ T3317] bridge_slave_0: entered promiscuous mode [ 36.270237][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.277563][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.284687][ T3321] bridge_slave_0: entered allmulticast mode [ 36.291280][ T3321] bridge_slave_0: entered promiscuous mode [ 36.303410][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.310586][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.317792][ T3321] bridge_slave_1: entered allmulticast mode [ 36.324355][ T3321] bridge_slave_1: entered promiscuous mode [ 36.335606][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.342726][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.350089][ T3317] bridge_slave_1: entered allmulticast mode [ 36.356628][ T3317] bridge_slave_1: entered promiscuous mode [ 36.363036][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.370477][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.377680][ T3316] bridge_slave_0: entered allmulticast mode [ 36.384163][ T3316] bridge_slave_0: entered promiscuous mode [ 36.395464][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.402653][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.409864][ T3316] bridge_slave_1: entered allmulticast mode [ 36.416430][ T3316] bridge_slave_1: entered promiscuous mode [ 36.456554][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.463652][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.470830][ T3320] bridge_slave_0: entered allmulticast mode [ 36.477204][ T3320] bridge_slave_0: entered promiscuous mode [ 36.489618][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.499985][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.513883][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.521104][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.528329][ T3320] bridge_slave_1: entered allmulticast mode [ 36.534811][ T3320] bridge_slave_1: entered promiscuous mode [ 36.551709][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.566562][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.577074][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.586517][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.593683][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.600938][ T3323] bridge_slave_0: entered allmulticast mode [ 36.607485][ T3323] bridge_slave_0: entered promiscuous mode [ 36.624851][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.640165][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.653974][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.661415][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.668604][ T3323] bridge_slave_1: entered allmulticast mode [ 36.675353][ T3323] bridge_slave_1: entered promiscuous mode [ 36.682608][ T3321] team0: Port device team_slave_0 added [ 36.689351][ T3321] team0: Port device team_slave_1 added [ 36.696375][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.715806][ T3317] team0: Port device team_slave_0 added [ 36.742465][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.752447][ T3316] team0: Port device team_slave_0 added [ 36.758953][ T3317] team0: Port device team_slave_1 added [ 36.765311][ T3316] team0: Port device team_slave_1 added [ 36.776984][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.809928][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.817068][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.843033][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.859596][ T3320] team0: Port device team_slave_0 added [ 36.866015][ T3323] team0: Port device team_slave_0 added [ 36.877885][ T3320] team0: Port device team_slave_1 added [ 36.883780][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.890881][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.917068][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.928204][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.935251][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.961688][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.972830][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.979967][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.006095][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.018004][ T3323] team0: Port device team_slave_1 added [ 37.029412][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.036473][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.062730][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.073897][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.081190][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.107821][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.158866][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.165940][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.192046][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.203829][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.210958][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.237726][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.253715][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.261017][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.286974][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.300150][ T3321] hsr_slave_0: entered promiscuous mode [ 37.306445][ T3321] hsr_slave_1: entered promiscuous mode [ 37.322730][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.329863][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.355973][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.377474][ T3317] hsr_slave_0: entered promiscuous mode [ 37.383713][ T3317] hsr_slave_1: entered promiscuous mode [ 37.390005][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.395749][ T3317] Cannot create hsr debugfs directory [ 37.419376][ T3316] hsr_slave_0: entered promiscuous mode [ 37.425603][ T3316] hsr_slave_1: entered promiscuous mode [ 37.431898][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.437843][ T3316] Cannot create hsr debugfs directory [ 37.451054][ T3320] hsr_slave_0: entered promiscuous mode [ 37.457204][ T3320] hsr_slave_1: entered promiscuous mode [ 37.463183][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.469206][ T3320] Cannot create hsr debugfs directory [ 37.534216][ T3323] hsr_slave_0: entered promiscuous mode [ 37.540704][ T3323] hsr_slave_1: entered promiscuous mode [ 37.546759][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.552793][ T3323] Cannot create hsr debugfs directory [ 37.721046][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.730382][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.747652][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.762132][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.793258][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.802500][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.811804][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.821507][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.848958][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.858548][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.870377][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.880213][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.921208][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.938561][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.947988][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.958102][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.997247][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.008914][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.018549][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.028000][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.037421][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.048422][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.084901][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.101466][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.108688][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.118155][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.129702][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.136863][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.152192][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.172548][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.179657][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.198094][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.205251][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.214122][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.223381][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.248758][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.255922][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.279371][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.289181][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.296300][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.325386][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.336594][ T1826] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.343802][ T1826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.362213][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.369327][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.402816][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.418206][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.447028][ T1826] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.454313][ T1826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.484817][ T1826] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.491985][ T1826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.559272][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.603338][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.621744][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.652895][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.677801][ T3317] veth0_vlan: entered promiscuous mode [ 38.699585][ T3317] veth1_vlan: entered promiscuous mode [ 38.734120][ T3321] veth0_vlan: entered promiscuous mode [ 38.756961][ T3317] veth0_macvtap: entered promiscuous mode [ 38.769432][ T3317] veth1_macvtap: entered promiscuous mode [ 38.777658][ T3321] veth1_vlan: entered promiscuous mode [ 38.825476][ T3321] veth0_macvtap: entered promiscuous mode [ 38.833659][ T3316] veth0_vlan: entered promiscuous mode [ 38.850639][ T3316] veth1_vlan: entered promiscuous mode [ 38.861819][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.874012][ T3321] veth1_macvtap: entered promiscuous mode [ 38.883776][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.902980][ T3316] veth0_macvtap: entered promiscuous mode [ 38.910437][ T3323] veth0_vlan: entered promiscuous mode [ 38.920316][ T3316] veth1_macvtap: entered promiscuous mode [ 38.930727][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.940668][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.951257][ T3323] veth1_vlan: entered promiscuous mode [ 38.962670][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.976728][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.989278][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.998398][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.028066][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.037978][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.057382][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.066215][ T1692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.085207][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.099661][ T3320] veth0_vlan: entered promiscuous mode [ 39.107754][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.109409][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.154014][ T3484] loop1: detected capacity change from 0 to 1024 [ 39.162388][ T3484] ======================================================= [ 39.162388][ T3484] WARNING: The mand mount option has been deprecated and [ 39.162388][ T3484] and is ignored by this kernel. Remove the mand [ 39.162388][ T3484] option from the mount to silence this warning. [ 39.162388][ T3484] ======================================================= [ 39.168301][ T195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.207492][ T195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.220321][ T3323] veth0_macvtap: entered promiscuous mode [ 39.242716][ T3484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.256601][ T3484] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.262202][ T195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.280053][ T195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.292857][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 39.292873][ T28] audit: type=1400 audit(1771274575.452:100): avc: denied { add_name } for pid=3483 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.301274][ T3484] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 3) [ 39.335675][ T3323] veth1_macvtap: entered promiscuous mode [ 39.342912][ T3484] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 39.346014][ T28] audit: type=1400 audit(1771274575.452:101): avc: denied { create } for pid=3483 comm="syz.1.2" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.358584][ T3484] EXT4-fs (loop1): This should not happen!! Data will be lost [ 39.358584][ T3484] [ 39.385098][ T3490] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.401842][ T3320] veth1_vlan: entered promiscuous mode [ 39.408322][ T28] audit: type=1400 audit(1771274575.452:102): avc: denied { read write } for pid=3483 comm="syz.1.2" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.411534][ T3490] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.437490][ T28] audit: type=1400 audit(1771274575.452:103): avc: denied { open } for pid=3483 comm="syz.1.2" path="/0/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.459818][ T3483] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.478883][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.488458][ T3490] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.489355][ T28] audit: type=1400 audit(1771274575.542:104): avc: denied { map } for pid=3483 comm="syz.1.2" path="/0/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.527254][ T3483] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.555269][ T3320] veth0_macvtap: entered promiscuous mode [ 39.564931][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.572661][ T3490] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.589402][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.599040][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.608421][ T3483] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.622553][ T3490] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.637974][ T3483] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 39.661901][ T3320] veth1_macvtap: entered promiscuous mode [ 39.669266][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.678334][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.703363][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.717313][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.756795][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.776833][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.803621][ T28] audit: type=1400 audit(1771274575.952:105): avc: denied { open } for pid=3499 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.826632][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.838826][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.871121][ T28] audit: type=1400 audit(1771274575.952:106): avc: denied { perfmon } for pid=3499 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.946306][ T28] audit: type=1400 audit(1771274575.952:107): avc: denied { kernel } for pid=3499 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.984525][ T28] audit: type=1400 audit(1771274576.002:108): avc: denied { create } for pid=3501 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.005881][ T28] audit: type=1400 audit(1771274576.012:109): avc: denied { setopt } for pid=3501 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.059670][ T195] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 40.114666][ T195] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.114666][ T195] [ 40.167665][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.262376][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.291271][ T3525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.368921][ T3525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.414394][ T3525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.443740][ T3525] Zero length message leads to an empty skb [ 40.551106][ T3537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 40.552182][ T3538] Cannot find set identified by id 0 to match [ 40.584635][ T3540] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 40.646362][ T3544] netlink: 176 bytes leftover after parsing attributes in process `syz.2.22'. [ 40.754805][ T3545] macvlan2: entered promiscuous mode [ 40.760375][ T3545] macvlan2: entered allmulticast mode [ 40.830361][ T3550] loop4: detected capacity change from 0 to 512 [ 40.851175][ T3550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.864080][ T3550] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.893992][ T3550] EXT4-fs (loop4): shut down requested (1) [ 40.901733][ T3550] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 40.912064][ T3550] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 40.970460][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.212514][ C0] hrtimer: interrupt took 27693 ns [ 41.425137][ T3545] syz.3.19 (3545) used greatest stack depth: 10376 bytes left [ 41.459407][ T3560] netlink: 'syz.3.27': attribute type 27 has an invalid length. [ 41.556431][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.563754][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.676665][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.685521][ T3569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.725956][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.754722][ T3569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.820912][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.841432][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.866918][ T3579] loop0: detected capacity change from 0 to 128 [ 41.880031][ T3579] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.913319][ T3579] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.213779][ T3562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.234601][ T3562] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.257957][ T3562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.274954][ T3579] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.347530][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.356784][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.375670][ T3591] netlink: 'syz.2.35': attribute type 3 has an invalid length. [ 42.417168][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.434943][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.476381][ T3604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.487329][ T3602] loop4: detected capacity change from 0 to 1024 [ 42.500307][ T3602] EXT4-fs: Ignoring removed bh option [ 42.511761][ T3606] loop2: detected capacity change from 0 to 764 [ 42.541114][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.560844][ T3602] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.600897][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.696897][ T3614] netlink: 'syz.2.45': attribute type 3 has an invalid length. [ 42.830152][ T3625] loop4: detected capacity change from 0 to 512 [ 42.844943][ T3625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.868327][ T3625] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.426832][ T3631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.530577][ T3631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.540110][ T3631] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.817402][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.878933][ T3638] FAULT_INJECTION: forcing a failure. [ 43.878933][ T3638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.974814][ T3638] CPU: 1 UID: 0 PID: 3638 Comm: syz.3.51 Not tainted syzkaller #0 PREEMPT(full) [ 43.974854][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.974877][ T3638] Call Trace: [ 43.974886][ T3638] [ 43.974896][ T3638] __dump_stack+0x1d/0x30 [ 43.975001][ T3638] dump_stack_lvl+0x95/0xd0 [ 43.975032][ T3638] dump_stack+0x15/0x1b [ 43.975059][ T3638] should_fail_ex+0x263/0x280 [ 43.975091][ T3638] should_fail+0xb/0x20 [ 43.975118][ T3638] should_fail_usercopy+0x1a/0x20 [ 43.975235][ T3638] copy_fpstate_to_sigframe+0x650/0x7f0 [ 43.975273][ T3638] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 43.975421][ T3638] ? x86_task_fpu+0x36/0x60 [ 43.975451][ T3638] get_sigframe+0x34c/0x470 [ 43.975518][ T3638] ? get_signal+0xdc3/0xf60 [ 43.975566][ T3638] x64_setup_rt_frame+0xa7/0x4e0 [ 43.975602][ T3638] arch_do_signal_or_restart+0x24b/0x450 [ 43.975638][ T3638] exit_to_user_mode_loop+0x6a/0x6f0 [ 43.975662][ T3638] do_syscall_64+0x249/0x370 [ 43.975773][ T3638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.975796][ T3638] RIP: 0033:0x7f6be12fc84e [ 43.975812][ T3638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.975830][ T3638] RSP: 002b:00007f6bdfd8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.975850][ T3638] RAX: 0000000000000001 RBX: 00007f6bdfd8f6c0 RCX: 00007f6be12fc84e [ 43.975897][ T3638] RDX: 0000000000000001 RSI: 00007f6bdfd8f090 RDI: 0000000000000003 [ 43.975910][ T3638] RBP: 00007f6bdfd8f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.975923][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.975942][ T3638] R13: 00007f6be15b6038 R14: 00007f6be15b5fa0 R15: 00007ffcec450e18 [ 43.975963][ T3638] [ 43.988298][ T3640] Unsupported ieee802154 address type: 0 [ 44.190621][ T3642] loop4: detected capacity change from 0 to 4096 [ 44.213179][ T3642] EXT4-fs: dax option not supported [ 44.229280][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 44.229296][ T28] audit: type=1400 audit(1771274586.481:196): avc: denied { setattr } for pid=3647 comm="syz.0.56" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.275314][ T28] audit: type=1400 audit(1771274586.523:197): avc: denied { write } for pid=3647 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.307024][ T28] audit: type=1400 audit(1771274586.565:198): avc: denied { bind } for pid=3641 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.364467][ T28] audit: type=1400 audit(1771274586.607:199): avc: denied { getopt } for pid=3656 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.399053][ T3661] loop1: detected capacity change from 0 to 512 [ 44.406812][ T28] audit: type=1400 audit(1771274586.607:200): avc: denied { write } for pid=3641 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.426642][ T28] audit: type=1400 audit(1771274586.649:201): avc: denied { read write } for pid=3641 comm="syz.4.52" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.460121][ T28] audit: type=1400 audit(1771274586.649:202): avc: denied { open } for pid=3641 comm="syz.4.52" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.484666][ T3661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 44.500155][ T3664] loop0: detected capacity change from 0 to 128 [ 44.509371][ T3661] System zones: 1-12 [ 44.515652][ T28] audit: type=1400 audit(1771274586.670:203): avc: denied { ioctl } for pid=3641 comm="syz.4.52" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.516965][ T3664] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.541654][ T28] audit: type=1400 audit(1771274586.765:204): avc: denied { read write } for pid=3665 comm="syz.3.62" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.565422][ T3661] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.60: Directory hole found for htree index block 0 [ 44.577395][ T28] audit: type=1400 audit(1771274586.765:205): avc: denied { open } for pid=3665 comm="syz.3.62" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.615582][ T3664] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.629072][ T3661] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 44.630364][ T3661] EXT4-fs (loop1): Remounting filesystem read-only [ 44.639497][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 44.639540][ C1] EXT4-fs (loop1): initial error at time 1771274586: dx_probe:791: inode 2 [ 44.639577][ C1] EXT4-fs (loop1): last error at time 1771274586: dx_probe:791: inode 2 [ 44.683356][ T3661] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 44.692859][ T3661] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 44.704714][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.720705][ T3664] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.730465][ T3661] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 45.242507][ T3687] __nla_validate_parse: 14 callbacks suppressed [ 45.242920][ T3687] netlink: 176 bytes leftover after parsing attributes in process `syz.4.69'. [ 45.285372][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.340773][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 45.349669][ T3689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 45.358656][ T3689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 45.367773][ T3689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 45.397192][ T3693] loop4: detected capacity change from 0 to 512 [ 45.408053][ T3693] ext4: Unknown parameter 'obj_user' [ 45.415547][ T3691] serio: Serial port ptm0 [ 45.627634][ T3706] netlink: 48 bytes leftover after parsing attributes in process `syz.3.78'. [ 45.683153][ T3710] loop4: detected capacity change from 0 to 512 [ 45.717832][ T3710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 45.735538][ T3710] System zones: 1-12 [ 45.740299][ T3706] netlink: 48 bytes leftover after parsing attributes in process `syz.3.78'. [ 45.744252][ T3710] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.80: Directory hole found for htree index block 0 [ 45.761793][ T3710] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 45.765276][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 45.781125][ C1] EXT4-fs (loop4): initial error at time 1771274588: dx_probe:791: inode 2 [ 45.784463][ T3710] EXT4-fs (loop4): Remounting filesystem read-only [ 45.790129][ C1] EXT4-fs (loop4): last error at time 1771274588: dx_probe:791: inode 2 [ 45.833530][ T3716] netlink: 176 bytes leftover after parsing attributes in process `syz.3.82'. [ 45.852405][ T3710] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 45.860637][ T3710] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 45.895170][ T3710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.933021][ T3714] netlink: 'syz.2.81': attribute type 3 has an invalid length. [ 45.944164][ T3720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 45.944230][ T3720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 45.980910][ T3710] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 46.080295][ T3727] loop2: detected capacity change from 0 to 512 [ 46.096503][ T3730] netlink: 'syz.0.85': attribute type 6 has an invalid length. [ 46.117278][ T3730] loop0: detected capacity change from 0 to 512 [ 46.139325][ T3730] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.191816][ T3730] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.85: corrupted inode contents [ 46.219817][ T3730] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.219976][ T3730] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #3: comm syz.0.85: mark_inode_dirty error [ 46.229313][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 46.229335][ C0] EXT4-fs (loop0): initial error at time 1771274588: ext4_do_update_inode:5569: inode 3 [ 46.229366][ C0] EXT4-fs (loop0): last error at time 1771274588: ext4_do_update_inode:5569: inode 3 [ 46.268148][ T3730] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.268866][ T3730] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #3: comm syz.0.85: corrupted inode contents [ 46.290067][ T3730] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.290320][ T3730] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.85: mark_inode_dirty error [ 46.310807][ T3730] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.311281][ T3730] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.85: Failed to acquire dquot type 0 [ 46.331680][ T3730] loop0: lost filesystem error report for type 5 error -117 [ 46.332290][ T3730] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.85: corrupted inode contents [ 46.352676][ T3730] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.352930][ T3730] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.85: mark_inode_dirty error [ 46.375013][ T3730] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.375224][ T3730] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.85: corrupted inode contents [ 46.396382][ T3730] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.396588][ T3730] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.85: mark_inode_dirty error [ 46.396612][ T3730] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 46.397001][ T3730] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.85: corrupted inode contents [ 46.438779][ T3730] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 46.447464][ T3730] loop0: lost filesystem error report for type 5 error -117 [ 46.447742][ T3730] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.85: corrupted inode contents [ 46.467950][ T3730] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.85: mark_inode_dirty error [ 46.479347][ T3730] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 46.488687][ T3730] loop0: lost filesystem error report for type 5 error -117 [ 46.490104][ T3730] EXT4-fs (loop0): 1 truncate cleaned up [ 46.504060][ T3740] loop1: detected capacity change from 0 to 1024 [ 46.504075][ T3730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.504248][ T3730] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.545445][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.557075][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.595799][ T3730] syz.0.85 (3730) used greatest stack depth: 9720 bytes left [ 46.637817][ T3722] loop3: detected capacity change from 0 to 4096 [ 46.638370][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.661076][ T3750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.685400][ T3722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.707367][ T3750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.727682][ T3722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.742313][ T3758] loop0: detected capacity change from 0 to 512 [ 46.749125][ T3758] EXT4-fs: Invalid want_extra_isize 49 [ 46.771765][ T3750] bond0 (unregistering): Released all slaves [ 46.798944][ T3749] tipc: Started in network mode [ 46.805683][ T3762] syz.0.96 uses obsolete (PF_INET,SOCK_PACKET) [ 46.805773][ T3749] tipc: Node identity ac14140f, cluster identity 4711 [ 46.821973][ T3749] tipc: Enabled bearer , priority 10 [ 46.951513][ T3764] mmap: syz.4.97 (3764) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.049468][ T3782] netlink: 'syz.0.106': attribute type 1 has an invalid length. [ 47.085367][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.148221][ T3782] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 47.175696][ T3782] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 47.244179][ T3780] netlink: 'syz.4.105': attribute type 3 has an invalid length. [ 47.259170][ T3795] bond1: (slave gretap1): making interface the new active one [ 47.267895][ T3795] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 47.281282][ T3795] macvlan2: entered promiscuous mode [ 47.288076][ T3795] macvlan2: entered allmulticast mode [ 47.300581][ T3795] bond1: entered promiscuous mode [ 47.306905][ T3795] gretap1: entered promiscuous mode [ 47.313103][ T3795] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 47.320925][ T3806] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 47.331209][ T3795] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 47.343272][ T3795] bond1: left promiscuous mode [ 47.345782][ T3806] xt_hashlimit: size too large, truncated to 1048576 [ 47.348651][ T3795] gretap1: left promiscuous mode [ 47.599989][ T3826] ext2: Unknown parameter 'dont_appraise' [ 47.624664][ T3826] capability: warning: `syz.3.121' uses 32-bit capabilities (legacy support in use) [ 47.639233][ T3829] netlink: 'syz.4.119': attribute type 10 has an invalid length. [ 47.658780][ T3819] team0: Port device team_slave_0 removed [ 47.686319][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.693584][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.711888][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.719133][ T3829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.726558][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.733756][ T3829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.751574][ T3829] team0: Port device bridge0 added [ 47.767291][ T3488] tipc: Node number set to 2886997007 [ 47.928967][ T3795] syz.0.106 (3795) used greatest stack depth: 9336 bytes left [ 47.939243][ T3849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=3849 comm=syz.2.130 [ 48.042363][ T3857] bridge_slave_1: default FDB implementation only supports local addresses [ 48.184300][ T3866] Cannot find set identified by id 0 to match [ 48.277205][ T3870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 48.297076][ T3870] System zones: 1-12 [ 48.310543][ T3870] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.141: Directory hole found for htree index block 0 [ 48.351455][ T3870] EXT4-fs (loop4): Remounting filesystem read-only [ 48.358551][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 48.358568][ C0] EXT4-fs (loop4): initial error at time 1771274590: dx_probe:791: inode 2 [ 48.358592][ C0] EXT4-fs (loop4): last error at time 1771274590: dx_probe:791: inode 2 [ 48.524371][ T3870] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 48.556465][ T3870] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 48.604272][ T3870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.630064][ T3870] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 48.655450][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.743400][ T3888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.780140][ T3888] EXT4-fs (loop0): 1 truncate cleaned up [ 48.832815][ T3888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.891535][ T3899] 9p: Bad value for 'rfdno' [ 48.941089][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.992251][ T3900] set_capacity_and_notify: 4 callbacks suppressed [ 48.992273][ T3900] loop4: detected capacity change from 0 to 1024 [ 49.033742][ T3905] loop1: detected capacity change from 0 to 128 [ 49.051705][ T3905] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.104070][ T3900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.117864][ T28] kauditd_printk_skb: 250 callbacks suppressed [ 49.117882][ T28] audit: type=1400 audit(1771274591.615:454): avc: denied { create } for pid=3906 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.139524][ T3905] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.157416][ T28] audit: type=1400 audit(1771274591.657:455): avc: denied { link } for pid=3896 comm="syz.4.150" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.157468][ T3900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.150: missing EA_INODE flag [ 49.212148][ T3916] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 49.220640][ T28] audit: type=1400 audit(1771274591.731:456): avc: denied { create } for pid=3904 comm="syz.1.144" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.242502][ T959] IPVS: starting estimator thread 0... [ 49.248449][ T3900] EXT4-fs (loop4): Remounting filesystem read-only [ 49.265372][ T28] audit: type=1400 audit(1771274591.731:457): avc: denied { read append open } for pid=3904 comm="syz.1.144" path="/11/file1/memory.events.local" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.290533][ T28] audit: type=1400 audit(1771274591.762:458): avc: denied { create } for pid=3910 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.349136][ T28] audit: type=1400 audit(1771274591.762:459): avc: denied { ioctl } for pid=3910 comm="syz.0.155" path="socket:[5777]" dev="sockfs" ino=5777 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.385185][ T3917] IPVS: using max 2160 ests per chain, 108000 per kthread [ 49.404048][ T3905] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.438715][ T3306] IPVS: starting estimator thread 0... [ 49.453922][ T28] audit: type=1400 audit(1771274591.825:460): avc: denied { override_creds } for pid=3896 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.510997][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.527894][ T3931] IPVS: using max 2112 ests per chain, 105600 per kthread [ 49.624505][ T3948] loop2: detected capacity change from 0 to 512 [ 49.674115][ T28] audit: type=1400 audit(1771274592.203:461): avc: denied { write } for pid=3949 comm="syz.3.168" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.742545][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.749717][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.794278][ T28] audit: type=1400 audit(1771274592.319:462): avc: denied { ioctl } for pid=3954 comm="syz.2.170" path="socket:[6656]" dev="sockfs" ino=6656 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.823937][ T3964] loop0: detected capacity change from 0 to 128 [ 49.826728][ T28] audit: type=1400 audit(1771274592.319:463): avc: denied { shutdown } for pid=3954 comm="syz.2.170" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.851697][ T3964] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.875186][ T3964] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.956713][ T3964] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.971361][ T3943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.982459][ T3943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.000607][ T3973] loop3: detected capacity change from 0 to 512 [ 50.024847][ T3973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 50.042979][ T3973] System zones: 1-12 [ 50.052870][ T3973] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.175: Directory hole found for htree index block 0 [ 50.065847][ T3973] fserror_report: 4 callbacks suppressed [ 50.065863][ T3973] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 50.076917][ T3973] EXT4-fs (loop3): Remounting filesystem read-only [ 50.086774][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 50.086794][ C0] EXT4-fs (loop3): initial error at time 1771274592: dx_probe:791: inode 2 [ 50.086824][ C0] EXT4-fs (loop3): last error at time 1771274592: dx_probe:791: inode 2 [ 50.122906][ T3973] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 50.131626][ T3973] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 50.170432][ T3973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.198368][ T3976] __nla_validate_parse: 36 callbacks suppressed [ 50.198399][ T3976] netlink: 48 bytes leftover after parsing attributes in process `syz.2.176'. [ 50.202911][ T317] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.232425][ T317] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.251552][ T3973] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.263302][ T317] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.275477][ T317] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.292211][ T3985] loop2: detected capacity change from 0 to 512 [ 50.340370][ T3988] loop4: detected capacity change from 0 to 1024 [ 50.404211][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.458178][ T4002] netlink: 72 bytes leftover after parsing attributes in process `syz.0.185'. [ 50.518394][ T4004] loop2: detected capacity change from 0 to 2048 [ 50.534230][ T4006] loop0: detected capacity change from 0 to 128 [ 50.539728][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 50.550447][ T4008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 50.574164][ T1692] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.574351][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 50.583612][ T1692] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.601146][ T1692] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.610297][ T1692] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.614145][ T4006] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.632383][ T4008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 50.786954][ T4006] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.833687][ T4012] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 50.847069][ T4004] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 50.856958][ T4012] loop1: detected capacity change from 0 to 512 [ 50.872544][ T4004] FAT-fs (loop2): Filesystem has been set read-only [ 50.901558][ T4006] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.917821][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 50.930628][ T4012] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.980479][ T4014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.030187][ T4024] msdos: Unknown parameter '' [ 51.069491][ T4023] ================================================================== [ 51.077636][ T4023] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 51.085057][ T4023] [ 51.087415][ T4023] write to 0xffff888142a4e000 of 4096 bytes by task 4019 on cpu 0: [ 51.095523][ T4023] _copy_from_iter+0x106/0xea0 [ 51.096376][ T4014] block device autoloading is deprecated and will be removed. [ 51.100354][ T4023] copy_page_from_iter+0x178/0x2a0 [ 51.100390][ T4023] process_vm_rw+0x6ad/0x9c0 [ 51.100428][ T4023] __x64_sys_process_vm_writev+0x78/0x90 [ 51.100468][ T4023] x64_sys_call+0x1592/0x3020 [ 51.100501][ T4023] do_syscall_64+0x12c/0x370 [ 51.100538][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.100561][ T4023] [ 51.100568][ T4023] write to 0xffff888142a4e000 of 4096 bytes by task 4023 on cpu 1: [ 51.148840][ T4023] _copy_from_iter+0x106/0xea0 [ 51.153647][ T4023] copy_page_from_iter+0x178/0x2a0 [ 51.158808][ T4023] process_vm_rw+0x6ad/0x9c0 [ 51.163444][ T4023] __x64_sys_process_vm_writev+0x78/0x90 [ 51.169118][ T4023] x64_sys_call+0x1592/0x3020 [ 51.173886][ T4023] do_syscall_64+0x12c/0x370 [ 51.178711][ T4023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.184768][ T4023] [ 51.187106][ T4023] Reported by Kernel Concurrency Sanitizer on: [ 51.193385][ T4023] CPU: 1 UID: 0 PID: 4023 Comm: syz.0.191 Not tainted syzkaller #0 PREEMPT(full) [ 51.202706][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.212783][ T4023] ================================================================== [ 51.342910][ T4027] netlink: 'syz.2.193': attribute type 3 has an invalid length. [ 51.500417][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.