last executing test programs: 3m22.548030674s ago: executing program 32 (id=48): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a463978044b864f940e1137ce034002852c9ef5606de83cf95a02ef4bacef1195250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27fc9eeb304bb3e260a261", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f00000009c0)="$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") (async, rerun: 64) io_setup(0x202, &(0x7f0000000200)) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async, rerun: 64) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) (rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) 2m48.946111176s ago: executing program 33 (id=451): socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/195, 0xc3}], 0x1, 0x17e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x33) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x17) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x30a9f29ecc337b1d, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x14c, r5, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xf7, 0x2a, [@random_vendor={0xdd, 0xeb, "f75f02365a8ed647934fd411bd44e73c36864e51feae5501cbacbbe3ec62901b68961d695dcb01c180ddbd8033059c874c4248749523ad31992de77bc95f0394d1c0db74334df21b993a3a1af4f150b74af66557b00118dae69ff56423f62c0b70703bc2d237e363caccc94d62b4ca798b7db7a30925b910a62ea4fd3d041f8a042d529626a573844e9eb63f99bed6109e1c53efef323c7987baf73b62648e933714c2fbb6b87fac67199b0c02c093312d35cbb9e79fcdf2c27775369e7399d262d904c892b8b4f3bf6ead30b575fb5dcc2877d025b0e4a7be65b41d47d9ed9df52bdf95f8961278ea96d1"}, @dsss={0x3, 0x1, 0xb2}, @challenge={0x10, 0x1, 0x35}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="b50c8b520e3d81b82db54699df8fdf3c444953529e56c081598a"}]}, 0x14c}, 0x1, 0x0, 0x0, 0x1404c050}, 0x800) 2m46.081590126s ago: executing program 34 (id=317): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) socket$inet(0x2, 0x3, 0x5) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xe}, {0x0, 0xe4ff}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x4, 0x4, 0x2, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5f, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 2m43.532464234s ago: executing program 35 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r7) r8 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) sendmsg$nl_generic(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3f4, 0x36, 0x100, 0x70bd28, 0x25dfdbfc, {0x1}, [@generic, @nested={0xac, 0x2e, 0x0, 0x1, [@generic="471908357e65ad3d6876e0e4219e149e137fc57b23fea91382e49b21914f67ea4afa634754fe4e18e8d33726add36ed2983eae0e197d440779a11b0b10fa50fe3cd158cb47951d4b54edd20615b8f125fb2b3fff965a3dcb60f53b0845061bf73136887e6360fd770463124b01e1259716f94556045b06df84dd42d9647e7b41a4147b3a7cf3af5602866f95", @typed={0x8, 0xeb, 0x0, 0x0, @pid=r5}, @typed={0x8, 0xbd, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x13e, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xb3}]}, @nested={0x259, 0xff, 0x0, 0x1, [@generic="5b489dfeefed967a880dc1061ddaf0727777fa29eae4f518665a386a0fba25bc567733f3ce8fc7dbf9265d2834decc63abdd5062652b86bde6c7a13a79909f842d04f84f3c874e2c74558344d8f03a2ef77b0a0c6f7bc06d10237c9bde4ed0af917e24193e3a16ee8faf2e5a10b46b0dd64ec3b849e71c61769b36816c7380457da4ebf5db2a017d2cf095243d5be343fe66188f4165751c6d063192ea2aeb8a8467fa51070de4faceea5abd52dd3a8bc8ac783a47c2c92a8bc78d4b592240f8d2f6d627ae8edf747216a0", @generic="3eb850ce32bbf64d438c22e1b9a787610f6343f97255e38ea881f173c7cf3d5c18ab6af89edf64df010ec7444479f497b262eabb9a7df4c93d7df1cb62782962b8f6b15ee68707493549a19905d5940834614eb9e399fd030a793724b2f7150ea0378de076dff4f5a1db004e9d2e0dbe86f5a13e9088b500652adfb9ec164af3fed5860c1a57e25b6dd6ee9228a41143e15d11e4d0227bfc5b33ae95a4c8e8fca0e652423fa950000ba0", @generic="757418e9e972848b2b2f29cb3e008a394a0132efa34326b86eda774c92cd94dae01fa0a338424c7e0163788b22efdbd9c9d199390407c86e74f22318", @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x66, 0x0, 0x0, @u32=0x40}, @nested={0x4, 0x150}, @nested={0x4, 0x5c}, @generic="006cb46ce3b997949e194fa1", @generic="97bee5c88c805701927047c865ceeac1ee9a4fc8ac3220225988b54ca979b6d5ad6b95e6cad36235cb477ba5f7a55fda7d272604c631aba30ca119962b695d561c66a5ddac09f4ac79f01cfdbc9f0ea902571fab10f7f4bf591d240b0a4478d6f5e4af99457f02b659d50c0eba077115c18ee7ff"]}, @generic="85350d3817dc04c695657053407b94c7c3e6f157b5e7b106a1c5b3dba1b61ca83c76f4f528a3c0e850d9b2d059cf9bb34c58ed7c23e59b456c77b818a148ca822be2adae0912a7a5237af94afab87ed0e49e41b4457b3e7a19ff59fcf7", @generic="3e049d611e67c41510b14b2d4e30270731de869c9425074c9fda63fa8b583b7bba9ae104172036f75a2907491e455f40175497642ffd005e4c3022aec14fd388476f76f4ad5e33053a832b5770d97227bb7142f6bd42f78f243c6e2be2c678c5b9d089854ee0cbf1eff5412349560d0540f8fa0a6b6c1e60ab1fd2"]}, 0x3f4}, 0x1, 0x0, 0x0, 0x20000040}, 0x20049810) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYRES64=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m18.182325773s ago: executing program 36 (id=926): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x4}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) (async) r5 = msgget$private(0x0, 0x193) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) (async) bind$tipc(r2, 0x0, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149004001040800", 0x58}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xff0, &(0x7f0000000840)=""/4080}, 0x94) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a000100717565756500000014"], 0xd8}}, 0x4000040) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r7, &(0x7f00000001c0)='\x00', 0x81801) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0x6, 0x49, 0xd, 0x3, 0x0, 0x3, 0x80000, 0xe9e3e3672d16556e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffe2b, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x4}, 0x100766, 0x81, 0x5, 0x4, 0x1000, 0xffff, 0xeaaa, 0x0, 0xaa5, 0x0, 0x200}) 1m12.758027239s ago: executing program 5 (id=1800): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0483, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) 1m12.738996361s ago: executing program 5 (id=1801): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 1m12.528053469s ago: executing program 5 (id=1807): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) setuid(0xee01) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0) 1m11.319054704s ago: executing program 5 (id=1827): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, 0x0) 1m11.019349613s ago: executing program 5 (id=1829): creat(0x0, 0x112) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) 1m10.385692315s ago: executing program 5 (id=1838): r0 = syz_io_uring_setup(0x2e8d, &(0x7f0000000200)={0x0, 0x42fb, 0x800, 0x0, 0x346}, &(0x7f0000000040), &(0x7f0000000140)) exit(0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 1m10.332021011s ago: executing program 37 (id=1838): r0 = syz_io_uring_setup(0x2e8d, &(0x7f0000000200)={0x0, 0x42fb, 0x800, 0x0, 0x346}, &(0x7f0000000040), &(0x7f0000000140)) exit(0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 1m4.168101796s ago: executing program 0 (id=1939): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m4.091951856s ago: executing program 0 (id=1942): openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x263040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f0000000240)={0x0, 0x5331, 0x10100, 0x1000006, 0x84}, 0x0, &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1m3.989444499s ago: executing program 0 (id=1944): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x7daa}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m3.98915199s ago: executing program 0 (id=1945): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, 0x0) 1m3.960360633s ago: executing program 0 (id=1946): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x8, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x45, 0x3, 0x0) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0xf3, &(0x7f0000000d00)=""/243, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86dd", 0x12}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r6}, 0x20) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000f80)='./bus/file0\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x988ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10041}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffc1d0bcaebeaaaaaaaaaa0a0806add1e46b69caa8e4d493b68ef4fdb367e8fe"], 0x0) 1m1.782155264s ago: executing program 0 (id=2010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000400000490000000e0001"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@getsa={0x34, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xa, 0xff}, [@mark={0xc, 0x15, {0x35075b, 0xae7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@union={0x7, 0x8, 0x0, 0x5, 0x1, 0x800, [{0x8, 0x4, 0xffffff80}, {0x5, 0x5, 0x9}, {0xc, 0x4, 0x4b}, {0x6, 0x3, 0x4}, {0xf, 0x2, 0x3e5}, {0x1, 0x4, 0x6}, {0x2, 0x1, 0xfffffff9}, {0xf, 0x3, 0x1ff}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f00000001c0)=""/147, 0xbe, 0x93, 0x1, 0xffffff21}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x1, 0x0, 0x4, 0x8}, 0x50) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28009f00", @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040) 1m1.781308814s ago: executing program 38 (id=2010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000400000490000000e0001"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@getsa={0x34, 0x12, 0x1, 0x70bd28, 0x25dfdbfb, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xa, 0xff}, [@mark={0xc, 0x15, {0x35075b, 0xae7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000008) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x6, [@union={0x7, 0x8, 0x0, 0x5, 0x1, 0x800, [{0x8, 0x4, 0xffffff80}, {0x5, 0x5, 0x9}, {0xc, 0x4, 0x4b}, {0x6, 0x3, 0x4}, {0xf, 0x2, 0x3e5}, {0x1, 0x4, 0x6}, {0x2, 0x1, 0xfffffff9}, {0xf, 0x3, 0x1ff}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x2}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x3}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f00000001c0)=""/147, 0xbe, 0x93, 0x1, 0xffffff21}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x2, 0x1, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x1, 0x0, 0x4, 0x8}, 0x50) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28009f00", @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x24048014}, 0x24000040) 33.624271545s ago: executing program 1 (id=2570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000780)=""/184, 0xb8}], 0x5, &(0x7f00000008c0)=""/166, 0xa6}, 0x1}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000a00)=""/250, 0xfa}], 0x1, &(0x7f0000000700)}, 0x4}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/109, 0x6d}, {&(0x7f0000000b80)=""/122, 0x7a}], 0x2, &(0x7f0000000cc0)=""/136, 0x88}, 0x9}, {{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e00)=""/161, 0xa1}, {&(0x7f0000000ec0)=""/150, 0x96}, {&(0x7f0000000c40)=""/46, 0x2e}, {&(0x7f0000000f80)=""/193, 0xc1}, {&(0x7f0000001080)=""/126, 0x7e}, {&(0x7f0000001100)=""/63, 0x3f}, {&(0x7f0000001140)=""/165, 0xa5}, {&(0x7f0000002240)=""/61, 0x3d}], 0x8}, 0x400}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002300)=""/89, 0x59}], 0x1, &(0x7f00000023c0)=""/59, 0x3b}, 0x6}, {{&(0x7f0000002400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000004c80)=""/234, 0xea}, {&(0x7f0000002580)=""/121, 0x79}], 0x2, &(0x7f0000002640)=""/56, 0x38}, 0x7}, {{&(0x7f0000002680)=@nl, 0x80, &(0x7f0000003a00)=[{&(0x7f0000002700)=""/54, 0x36}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/151, 0x97}, {&(0x7f0000003800)=""/200, 0xc8}, {&(0x7f0000003900)=""/225, 0xe1}], 0x5, &(0x7f0000003a80)=""/242, 0xf2}, 0x40}, {{&(0x7f0000003b80)=@caif=@util, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003c00)=""/92, 0x5c}, {&(0x7f0000003c80)=""/40, 0x28}, {&(0x7f0000003cc0)=""/217, 0xd9}, {&(0x7f0000003dc0)=""/168, 0xa8}, {&(0x7f0000003e80)=""/237, 0xed}], 0x5}, 0xac}, {{&(0x7f0000004000)=@can, 0x80, &(0x7f0000004540)=[{&(0x7f0000004080)=""/80, 0x50}, {&(0x7f0000004100)=""/160, 0xa0}, {&(0x7f00000041c0)=""/33, 0x21}, {&(0x7f0000004200)=""/9, 0x9}, {&(0x7f0000004240)=""/240, 0xf0}, {&(0x7f0000004340)=""/206, 0xce}, {&(0x7f0000004440)=""/230, 0xe6}], 0x7, &(0x7f00000045c0)=""/107, 0x6b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004640)=""/139, 0x8b}, {&(0x7f0000004700)=""/110, 0x6e}, {&(0x7f0000004780)=""/202, 0xca}, {&(0x7f0000004880)=""/125, 0x7d}], 0x4, &(0x7f0000004940)=""/109, 0x6d}, 0x7}], 0xa, 0x40000000, &(0x7f0000004c40)={0x0, 0x3938700}) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r11, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf250500000008000100", @ANYRES32=r12, @ANYBLOB="08000100e6aa07277480425e37af5a91b2607ec142496e7121300469b3e7e9c91f933d3b186e06fe2e0e2ae20f01f6516de40a25e98e1950aa0b811a7df3f7f2770f26feb97dfa53515de231e6", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r13, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x40000, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1000}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x4200}, @TCA_NETEM_ECN={0x8}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xf5}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xef, 0xa, 0x401, 0x9, 0x0, 0x1, 0x7, 0x2}}, {0x8, 0x2, [0x7b2, 0xffff]}}, {{0x1c, 0x1, {0x3, 0x5, 0x8000, 0x3, 0x2, 0xd, 0x1ff, 0x4}}, {0xc, 0x2, [0xfff8, 0x40, 0x8, 0x80]}}]}]}, 0xc0}}, 0x0) 32.545544494s ago: executing program 1 (id=2579): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}, 0x88) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001140), 0x882, 0x0) unshare(0x2040400) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000001180)}, {&(0x7f00000011c0)="c9182716", 0x4}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x2e, 0x3c, 0x3c, 0x2, [@union={0x2, 0x4, 0x0, 0x5, 0x1, 0x1, [{0xb, 0x1, 0x3a04}, {0x7, 0x5, 0x6}, {0xa, 0x3, 0x1}, {0xa, 0x2, 0x9}]}]}}, 0x0, 0x56, 0x0, 0x1, 0x53a2}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050100000000000000000000ffff7f00ec01040012000500160001000000080015"], 0x60}}, 0x0) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x100, 0x6, 0x20010c}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x6b}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) syz_io_uring_submit(r6, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1, {0x0, r8}}) io_uring_enter(r2, 0x6e2, 0xc49, 0x1, 0x0, 0x0) r9 = msgget$private(0x0, 0x7ac) msgrcv(r9, 0x0, 0x0, 0x3, 0x2000) msgrcv(r9, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r9, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) r10 = syz_open_dev$mouse(&(0x7f0000000180), 0x7fffffffffffffff, 0x400882) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2f14}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xae}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 31.587149727s ago: executing program 1 (id=2589): sync() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f00000007c0)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sync() 31.481754411s ago: executing program 1 (id=2591): mkdir(&(0x7f0000001180)='./file0\x00', 0x195) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4000182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0x18a6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0/../file0\x00'}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000001140)=@nullb, r1, &(0x7f0000001200)) close(r0) truncate(&(0x7f0000001100)='./file0/../file0\x00', 0x1) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='\x01\x00%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 31.456979554s ago: executing program 1 (id=2593): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0x9}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x8, 0x4, [0x6, 0x40, 0x3, 0x4]}, 0x10) 31.122219287s ago: executing program 1 (id=2597): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104003000"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050100000000000000000000ffff7f00ec01040012000500160001000000080015"], 0x60}}, 0x0) 31.066388375s ago: executing program 39 (id=2597): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000000c0)={0x1, {{0xa, 0x4e20, 0x5, @mcast2, 0x6}}}, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000104003000"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050100000000000000000000ffff7f00ec01040012000500160001000000080015"], 0x60}}, 0x0) 28.449936482s ago: executing program 2 (id=2632): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0xfffffff7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffd41, 0x0, &(0x7f0000000100)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7eef8ad7aea5349e4086457ad9f3f7547", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3cfd94f2}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0xfffffff7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffd41, 0x0, &(0x7f0000000100)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7eef8ad7aea5349e4086457ad9f3f7547", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3cfd94f2}, 0x50) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) (async) 28.328025718s ago: executing program 2 (id=2637): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r0, &(0x7f0000000140)="3703c70f70e244b7878fedf0d0286e72651d1af212c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x45, 0x200000000000d) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/rpc\x00') 28.253943187s ago: executing program 2 (id=2639): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 28.116273315s ago: executing program 2 (id=2640): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, 0x0) 28.055286523s ago: executing program 2 (id=2641): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = epoll_create(0x7fffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TIOCNOTTY(r1, 0x5422) 27.059324041s ago: executing program 2 (id=2648): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4, 0x5, 0x32c8, 0x1, 0x6, 0x9, 0x651}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/20, &(0x7f0000000600), &(0x7f0000000380), 0x3, r1}, 0x38) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x3, 0x1, 0x2, 0x4}}, 0x80, 0x0}, 0xe07e872420dfefca) 27.056033171s ago: executing program 40 (id=2648): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4, 0x5, 0x32c8, 0x1, 0x6, 0x9, 0x651}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/20, &(0x7f0000000600), &(0x7f0000000380), 0x3, r1}, 0x38) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x3, 0x1, 0x2, 0x4}}, 0x80, 0x0}, 0xe07e872420dfefca) 12.40735617s ago: executing program 9 (id=2854): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 12.367612895s ago: executing program 9 (id=2855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00008ad8dda81a5f00", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf254a00000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x60000814}, 0x840) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, '4%\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'GPL\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001000)=0xfee) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xb, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 12.070004463s ago: executing program 9 (id=2861): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3f300000a5cdaeef394ff6ce0bcc353b4f443c2a7205adda96d921be3f57d25fa77ac695fa420525", @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf210e0000002c000280080003000200000006000b00020000000800060004000000080003000400000005000d0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x1d58078da822f49f}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$kcm(0x2, 0xa, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000680)={[{@journal_async_commit}, {@grpid}, {@nobarrier}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv0}, {@noinit_itable}], [{@fsname={'fsname', 0x3d, '@'}}]}, 0x1, 0x620, &(0x7f0000000d80)="$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") ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x102, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000000000014006f166a07010033d43afffe0b27bbaf02633bba00000000000010ff020000000000000000000000000001"], 0x340a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) r4 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = syz_io_uring_setup(0x71c5, &(0x7f00000003c0)={0x0, 0xe43c, 0x8, 0x1044}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)=0x0) r9 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xefc1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000740)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, 0x0, 0x1, 0x40, 0x1}) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r13, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r13, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) 11.160671151s ago: executing program 9 (id=2868): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000240)={0x1, 0x1, 0xfffffffffffffffc}) fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xdbd}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000440)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4ab}}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@auto_da_alloc}, {@nogrpid}, {@discard}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000001680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x1, @empty}}, 0x1e) r6 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x2, r6, 0x3, 0x0) write$binfmt_aout(r4, 0x0, 0x0) 11.034037697s ago: executing program 9 (id=2870): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x6, 0xb}, {0x9, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x7f, 0x7ff, 0x1a8}}}}]}, 0x48}}, 0x44000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.263854967s ago: executing program 9 (id=2882): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x6b52dd5006acfd5f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x28}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.201254655s ago: executing program 41 (id=2882): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x6b52dd5006acfd5f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x28}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400), 0x2000011a) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.87401399s ago: executing program 3 (id=2965): r0 = syz_io_uring_setup(0x5b00, &(0x7f0000000000)={0x0, 0x1244, 0x80, 0x3, 0x57}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_enter(r0, 0x3bc5, 0xacc1, 0x59, &(0x7f0000000100), 0x8) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x30d3bd3cffb24286, 0x2) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000180)={0x76}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000001c0)={{0x87, @rand_addr=0x64010100, 0x4e20, 0x3, 'none\x00', 0x29, 0x3, 0x2a}, {@private=0xa010102, 0x4e20, 0x10003, 0xc, 0x952a, 0x400}}, 0x44) (async) futex(&(0x7f0000000240)=0x1, 0xa, 0x1, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f00000002c0)=0x1, 0x2) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000300)) (async, rerun: 32) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000440)={0xe06, 0x28, '\x00', 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) clock_getres(0x0, &(0x7f0000000480)) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x800) (async, rerun: 64) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x80, 0x20) (rerun: 64) renameat2(r1, &(0x7f0000000500)='./file0\x00', r3, &(0x7f0000000580)='./file0\x00', 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) (async) r4 = open(&(0x7f00000005c0)='./file0\x00', 0x180000, 0x144) (async) r5 = perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x40, 0x8, 0x45, 0x81, 0x0, 0x8, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffd139, 0x3, @perf_config_ext={0x2, 0x6}, 0x1, 0x8, 0x40, 0x0, 0x8, 0x8, 0x4, 0x0, 0x8, 0x0, 0x2}, r1, 0xc, 0xffffffffffffffff, 0x8) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000680)) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f00000006c0)=@md0, r6, &(0x7f00000007c0)) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000840)={{0x2c, @remote, 0x4e24, 0x1, 'lblc\x00', 0x14, 0xfffffff8, 0x43}, {@multicast1, 0x4e23, 0x1, 0x200, 0x1, 0x6e75}}, 0x44) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000008c0)) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2040, 0x0) (rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x1a4, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd50}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x60}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2400001c}, 0x20000014) (async) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c00), 0x24800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r8, 0xc05c5340, &(0x7f0000000c40)={0x4, 0xffff, 0x8, {0x96, 0xf}, 0x1, 0x1}) (async) r9 = gettid() ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000cc0)=r9) 2.277096427s ago: executing program 3 (id=2970): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r1, 0x402, 0x8000000a) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000140)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000300)='mountstats\x00') 2.122162607s ago: executing program 4 (id=2971): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000005400000000000000700008849000000000000009500000300000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000680)=@req={0x743, 0x80000001, 0x4, 0x3}, 0x10) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f00000000c0)={0x6, 0xe}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)=0x2) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000010300)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c80028008000700000000000a0001"], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000006, 0x4082172, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r6 = getpid() r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000003c0)={@remote, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000440)="c1188e19b95d02ff4284860186ddcce44a0500000012db3299cf122c2b0f50fbaebfeb375b899e56d4c48d358a39fb8372a16e3af20c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0xff}, 0x301, 0x1, 0x3, 0x2, 0x6, 0xb}, 0x20) syz_pidfd_open(r6, 0x0) syz_open_procfs$userns(r6, &(0x7f0000000000)) 2.111721998s ago: executing program 8 (id=2972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="d61723d7c60133", 0x7}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9d223a7dfe52c1f5121", 0x1b}], 0x2}, 0x20008b88) 2.048362426s ago: executing program 8 (id=2973): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x13) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060018000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) 1.981908724s ago: executing program 4 (id=2975): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x80, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0xd2480, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.842820633s ago: executing program 8 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.345735226s ago: executing program 8 (id=2981): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x80) socket(0x400000000010, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x6, 0x5, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) 1.342308017s ago: executing program 7 (id=2985): delete_module(&(0x7f0000000000)='!L!\x00', 0xa00) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x4e}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x1549, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x0, 0x801e7}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r5, 0x80585414, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0x20000000001000) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x37, 0x1, {0x0, 0xc30000000, 0x3b2, r0, 0x1, ','}}, 0x1f) 1.3211263s ago: executing program 3 (id=2987): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000780), 0x1, 0x0) write$UHID_INPUT(r0, &(0x7f0000002040)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.061035104s ago: executing program 6 (id=2990): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x80800) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x300, 0x4, 0x7, 0x0, 0xe, @multicast}, 0x10) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f00000000c0)={'pimreg0\x00'}) r1 = dup3(r0, r0, 0x80000) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000180)=0xff38, &(0x7f00000001c0)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[r2], 0x1) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x6}, 0x8) syz_io_uring_setup(0x1, &(0x7f00000004c0)={0x0, 0x8830, 0x800, 0x0, 0x317, 0x0, r1}, &(0x7f0000000540), &(0x7f0000000580)) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1801000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x9d3, 0x2]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xb021}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x8080) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000001a00)={&(0x7f0000000700)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000740)="09838cbcfb6bec9a955478f911c8bcdf217fc82ed6a230946205d075e7bdd8ddf6835b170cba48353bb0f8a3628052c6930d53ac89499b34ed9c9e09c83e108963d9ee8fef024c99351acbb3", 0x4c}, {&(0x7f00000007c0)="98141ed8", 0x4}, {&(0x7f0000000800)="81c8ac230bf1c8dd232e470a3f678a338e34acf35ebbeb7021a21da217f90bfca304058c0d54024d3a17824235e7523a1ef0bc26aa5945f8b6ccab738e44771654be1a3ba9c85b766fc2f6c94d1c25ffa34aaa849ee117977ec8a99276d5bac4520d95f28ab84f3128437c3d93fb65c8125f8fac698c6717e86c9b237de08d1fe685803d94eab4470fa657cba8743f44f8fab7ce2f467510662d8c68f63a28eb3b3da2801e2252992e19cdbdb954b05cfca2dc11003a4990b004d30985ed0e1412f7370d9cc06edf34798e573d3b5e7c9f178bcc4b99019a94732fa550c71cfbf653317ac2c3d14055d35256f6a0854e05eec1dd2189bcca671f2433611f586a64d50105bfba635f2f16ee4952c51cc600bd58d5c05778ca7834aac1610d5df3bd174ea8aaa5a992b8ec94b7b4e8857d1d0624e73ec15b68b0a4fe5a602e090fd2eedac3d338f914e68dba16cb236e9a07ee0ffa5f900dff551d005b42e307bf8aa565e8469cf4eaf0708ac86f1e40e99f9f7344d139b65ed016a3c1924ddb24c6cac0221a6044f660aab97d5b775efee68a010b3f77c41f38e1a8bf031e8c5636dbb4960bdd0f1c210292cca53bf5cd98d65d1444b5b9941c995fe9948580357daa2eec6af9431c891efbc81b25e609b5cc6b3f56786d5ce1888178bdec8874949052067eb9496a13d06e98605c59132a8427b3a699022e7eb65601351e836f8573355f422df3901771a3b0f05c8b4405fa2a79ffd183203e5196b67828674d5b62c2294aa81451a86eb805d96dc8a628f9c8464c0c25fb594bf9e8643e3220b10ba2c3f107ff6bf1147eece94f3156a80709a6770f9efeadfaab929e0829f062b3121beb276e312d9c283fc3cc1796f33798c4a3320d168d0e12a1c17b1be4eea52b8099d386f0765259d8a9e488f91483f16a7b5f58fac20b1d48c1d38eb3bd01c5aad39bed33e12eabf6dc281e2fa0e160537723748de4ca9508a15fff47db2ec9e8cd93e6e2d899d7f3e5f94d92950d579778d1112b88254279a8a845cc8e350aff2a0bc07c02395429ecfc30806e4b5f814df3caaf979f3965d389479551cd0445d5f93330484c740f55e57a80116184359a8cbea394eb7a299efe719d3b3c08c63a6eb0b799cca9d3f2d6a50764e72e0ec24c43a8c5d71408ccf569bef95a738b0a1e4d7bcfaba2f089ea8c370f72e8c44cadd2668b1648df0c41ba962ca90dc961db6fcd149b43fe57bbcf29adbb88d27264f2e665d75d894d20bfd4ae42df42694cc4c50321c5c78a47f839ea138d6a41f43b379474acb907b2f35ae8ef47c4a275743e887d21e96c306d95a2cdfb253be09a4250e28aeddae4e8a9d505c9a6f06c0e65fd6e930527e2489fe64e729a2183f2b6f87b5b6941c01e135c552f72f8bdc872d542a29df007a72c5690404977ee2bf85eabf958477852675c23e16a5e5c0febb22a6bdea0c857e06bafe149fa8f8e50caa8350894d51bf82b3f4eef2fdda847c290b3954e8408266aa67c5f3fa7ca92401a4566c07a4a3998b7eeacc80cb656793470746426099443200d19240c4ccb3225acd70e0d5912ab44d12bf2403ee9d72ec7383c9786bf9056230c9be4fbad1eab52bb27bf082b8b70e4d37b87b59a541ddd36f715c7e8ce76892b4f8e481d11fc0a2a05bc67aa448dd67e7140602d4b1361960938099c61f195bed440732239340fc0f29520cf48b4e8e74ca911c7df79224db9f17adce06ec96cd9fe829b731010558043c6374412ce0b6da87368095254044dc9ba32974ebfabd251b78b7ef38b64707fba642d1c3b13e464210d270aa1d58066a8f348bc76598ed3e9f3b648330d3ea00f320e3497afdde17166e9a19b1a02e168b00682d7c7c04109316d04095b3e9451975b74a6a76aff24cccc95433163f0fbb885f7383ba092bc4ef6b29943feacbb5b614866e313583d9517a63502bc898d6a742f796cb8b0e3d2d452586536ad35c1fc991c5e7a4c9c947ac77f4592ccc66d12ba7ea61fbe307b726826a92c61d4c0424102934a9d0a17c9b3ed931492f4771c2d51232b43a6ec4393f26dd7c3cf35466fbbf699430d88bd7d32677cc1bfce8bd1875b4c3f90779f3d036f6e78c6291ec0b133b99dc485bd39d79a9c797cb14ad17c1000a8df08ddb60b5bb64123a221de12612046904008a0dcf794de145d31294176f47ea772efb1f87bb9690f7ef9126367c59c38e7624a4d5af08740f68180ceb932cf976ae2440adcda20f5c40536f4d08489b3df7410a1fa63e5c0a7279bbe1d9596f78378c6ed8baab65857db66629797b07e6e7862913a0b558c270a43916173a1a8083d4daecad8d882b8aac21ea94a60f8a66387e8a6ea3fd39f6878f85b0645dedcaebf2d3fbfdc065f24016746b2d614a9afe2dd8bcf36f517e1505b269f96693c3d768afba06da49fbbee5944636a2d7e1b0bcc2f045d83608b6a7c56db94f12c331039592784ed4a3e6fa502e302dae4957c74fa85356194a0a7eb01c202bbd582c763dc570323c03e2050ee5060d62b1b3e4c1494bfde8594b79ce6a29468c9751860cf8db4ad5d111a108e20064687ec11ffb26d3445efecc37e3c654837acf7729fce9db6be8408508c3c61a638a1bc364858a594538c12c4e1c7213c1431d3ff7412791d4aedc462afa282b7a31f8d199b6ef252a9a11452c0f16b81a335b7ab6fcfdb1b889a5ba2f26f42e50792a9d967b0ac4088883a8289dfea539265aa6de3263a3bd72f140f1f635a2a11ab71f2f19030bb958b565d3c07d96e250a5c4926db378b91566047336e7fdd2b80e3737847852dd818cf355a11f4473d01d1737003dc3a1f7ff9a8c8f6a277286bf4b255cb26eef2ff05bd16c5c0137d4c4dbc26a15b59f6a3d6a23a359ecc198488705b786f4b7a40ee90437c32f74d19bf0eac23d763f524f44fad352ab01c2647a880dc904c83382e99755cceb07de6c4ef816d2b345d63af9df638da29cef4e5cf0d3b481968085685608de541af1657c892ff9ac937746a2526020db17d1dd1b0f708f08e7b7b1605d9a3212a2a93d1859554d701d0a2b378b9868da468067f040660561b120a1b2a5b253ed94fead6b4b542d1a1058ebe2f520d699d3306764c67460cfbe3fecbd32db5fa52ad89715e7e9b47891370f2b9f5d4b757dd9d6ded833231c4b29b9af1a8a60f28e569cd923d511f07e583dbeedea572eceda089b9195b42b0d988f7f203ce3c8154d72b21f215a72d4d17016c03c99bd5bc2c2f2a48f6d75171d7f331c9dacc070957fa136bfbe613eb362f47d4a7e65f7668248b3db0815bc3808f70a588ca1bdc4f378002a7617d97c2a8d49b585fa894136339e906a38cc9fd0a9b9fb83a96fe51bc49ab643f6cdaa628a673b1eebb6dcb55a3dc26bf794ecb2b070cc996767af235327f85bd9eeb8d952794f9aa68b116a5d03703891cf1bd6632b51ecec55060791ed3a31615a01b5aa767bdcb777a0c211e0d5bd6242e1853a0f6734a7dcf0606ea5fe16456e9a7617a76b06c9d723ba30dcd70eef02a27c3b2aa61565b8d9449ddbd5f4dba5e0e3e8c60ea8c17ba8f423543e991a890200664cec8f80452970d6de0549619dfee9817565ef94d2cc6ca1cb222d03db8a4753e73dc38c0df197656067f8169a7d11e27a048b7f888ecca735af129be2cba6b8a58c9ee236147db958e1aeaa1dabd2858674700f287d0028c4b2896547d9c7fbe995b6cdcf5e2d089db4560992f9f9f44d13d85541b87c117c11bb0baacc8376c22a6a83bd52cda01c7b48ab49d431ad93c3679b29dc19ab50f10d241d71a260b8462aa284e7605263d6238e67fa15b5c6b90489dba362f865a1bbd7e1df6a0bb354cff7a8dd2d5b31ea8250e99993d79a30425c79aa1b7fef34f70dfd1ffad3b1e97da963143c03961a472be93dda07c393805bf620c994f3d147a60c479389ab19fc4db029044f877148b97364f50587237662c0bc8e475b3ec507918aac1c5cc50b1a7d79e2549b8f9ace3aeab5e6a122b34155e4d07fa883844330542c3c7ceaf709d62567f08c47af90f4208a84a2fcab5dcc3eb01f5f1d1cac429d2af2c26a3c854cab2f2f4a2f355e36b7e08828834302809250c187fb296d17023d1681f9e458fac169a2d13a72f9bf0dc0f0b1309051ea3fab817b2490f4e352db3bf6206525602d4429c5d708e69037feec164e30a3e3bb1afef2de1ee01e48a3cfa15a52647ee7680dbeb99879825469d146c23086c46e275b1dadd2173d9c5a04a43397ba0b9d0d43683b1ee5b6c67274135c8008badd613f83cebc0637cf90f559b07fd561fdb2b6cf354291a7b1f21a0577d163fe823af52544e38baaf8aef47ccbdb4363312b34356184239217a24387539ee23e27babf2b9a6ead60b715e08cb6987c1aaa72ac459d6f2a24243ce24b15ac72a2ca58bc2f156228930486d761228cf0873d058e14a87eaaab3c2e9068b20f1f51a95cfa51772300e88e0bd7c5fc0f510427f7b1398011c3ea38e4a71b1d696ce7c7789f51e3c665b555c6668d5022c67667e9046329ceae90b5e851b0762f9d92704618ec5f3c40b06823e871dd0c000200b3b8a348d7a1ea183cf0e389afa41ceb08d42f69b5334605db2c0ba155edd9920e33d666591bfb6f39edd80bcec18625485e34655f2c5769373aba4dff04f01b2fc515b74d14004d7567be6e4a5b78d4f618588b1d246111cdb56ec57f8a411bdd7cdfa795cd253ed04934bf2844fd7ea10a693c6f81439ceb643cf50d01f66a3b40d962c657eb3acee9741d128e9ce44f767d9d336b61b7bdd80c47636c9bb719e03d67ded59d880a1dfad7955dad158450ccd9a0103547587b6563cc7c9933fde879fc356debae64bd0a893d6535d4979044bdc352180675518212174f924fb7f4e6f174ca964fea696338bdeef5267748117fd6114bcbb8aacbed0b6c48c1af903821bd7308a0f05c7bc4ef9c9252d23bb3dcb5fea4173eceeac7e2aa75869dda0ea253644107069c6c9c03301d75138958676b4c6ec6ab300e4d313eeeda4f0e354d4bff5456554d78faf1e2c00b1a229324a76b6ca41d16b200c2b942e0d2a4c1f0f49f88dae304779f4c33e87876fb2aa1bed3697f33747ccc7923e1fab2094588122657c6010eb0bd0db7df57a9bf0f8578fe177c3028a9f3e2848c4f9b0ebbb02eeb2d63d1b35fddbb51fec6bc3f2520f379ce3c8c86e9d62b088ed849b9c2410d3237e79adfdef4560a9443e31982e8a9a625019ef17392f5581fb880ed3da3d7e77644e8b0773e84ca19eb0bd71a492a17df1d175b9be029352c0aa48be0902a715d6a5c216ccb0c5d1595bc01175b32a5f10488c6487b25f3b49a141bbbc590903798ce59dc5434ca61ee15efcdd50818ca077d93ec8f527998068976a327160c0257185bb62ddac3af34e32b6d719e0c67884ed72a84faf3f373c3cd6b7ac69183999500a061b4efa44bc4f21e87243aa553f6feb5dd8d25c5e6bc5d5183cdba42a35d1b804b9e0f492a58f67ea4a4799f8ef0cb5cafc1fdc30f2ccf765ca9794b8cd3ee86e44f6b698267f389d8e49ffceb193088cf57fc7dcc438bd6cafe18b8ae75b136021b28772fd2b2e631c250cf134bd7d4dc064c64cf84bc8c494084d0e3eb030e9621823c5f3efe7a711f49af242cf4f7ea9b107123cb494ee91eb79fd93b1223213dd64aa06b616580a05fc8a5e5c19529479581137e35fd5cc92e4455c1834f85e06bd85c3a58d97f17a896acfa506bf393d70a19d30ce142afae58a46", 0x1000}, {&(0x7f0000001800)="a6e57901f4e9af6894851c7bb01e448b19a13955ed51b5d1ae496bd57d4baac0a119d56d5bf879a11697aa8b2688fd8830c2a663225c39471eb6541bbe0638ac91d9aaae97014b4ccc03c70edd35b58b17a8cd988388e33ca9408cfe4dc79b64e928208ed21cff42dc8062d58a395ff59ad825c3c2739e48e687d6aefff90dfc5034074e4c76e3d959e5787ec12f28dbf25fd133939183af8681a16c021fc84d293d5a41e8e9431f5375801110c8506f11aadd1c76dfabea95c3cad70d77cc2a34c89d73d52f06a326", 0xc9}, {&(0x7f0000001900)="c6014e85e29ccae845a2db262c2e8376375c4b5eb33dbe9742cf12ea6f2fe2fe357351644ddf024593967fcb1668dfd8f5d718ee0bdadb215f0ed460b5a7ecb7ff", 0x41}], 0x5}, 0x40040c4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x80) unshare(0x0) r7 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000001b40)={0x4, 0x80, 0x8, 0x1, 0x0, 0x6, 0x0, 0x40000000000000, 0x1412, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xb, 0x1, @perf_config_ext={0x8, 0x3}, 0x15000, 0x3, 0x9, 0x0, 0x4, 0x6, 0xed, 0x0, 0x2, 0x0, 0x1000}, r7, 0x7, r1, 0xb) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000001bc0)={{0xa, 0x4e21, 0x7, @mcast2, 0x8473}, {0xa, 0x4e22, 0xc, @private2}, 0x1, {[0x25a9, 0xff, 0xf6, 0x5, 0x4, 0x6, 0x3, 0xf12e]}}, 0x5c) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001c80), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x9208010}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc}, 0x4) unshare(0x100) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001d80)=@sack_info={0x0, 0xfffffffb, 0x161}, &(0x7f0000001dc0)=0xc) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x2000, 0x107) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000800, 0x0, &(0x7f0000001ec0)={0x0, 0x506, 0x8, 0x3ff, 0x5, 0x8000000000000000, 0x7fffffffffffffff, 0x1000, 0x7}) 1.019665509s ago: executing program 6 (id=2991): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x100, 0x10) r1 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x321000, 0x106) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x8}, 0x16, 0x3) (async) prctl$PR_SET_SECUREBITS(0x1c, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x4, 0x4, 0x13d8, 0xffffffff, 0x1218, 0x1218, 0x1218, 0xfeffffff, 0xffffffff, 0x1308, 0x1308, 0x1308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x1fc, {0x8}}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pim6reg0\x00', {0xf18}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0x0, 0xffffffff], [0x0, 0x0, 0xff000000, 0xff], 'team0\x00', '\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 'veth1_to_bond\x00', {0xffffffffffff3ebb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x145b) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x142c1, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) writev(r3, &(0x7f0000000640)=[{&(0x7f00000011c0)="000000c3", 0x4}, {0x0, 0xfffffec3}, {&(0x7f0000000140)="df282030f97816377056", 0xa}], 0x3) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fremovexattr(r4, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') 965.770295ms ago: executing program 4 (id=2992): bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x3d8598d447c58231, 0xb, &(0x7f00000013c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x3d8598d447c58231, 0xb, &(0x7f00000013c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x3}, 0x12}], 0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fddbdf25050000000800320001800000080032000900000008000300", @ANYRES32=r4, @ANYBLOB="050035000000000005004742e610c9380001070000080039"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48801) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0x8000000008) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000004c0)=0xc) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfc2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x23, 0x80805, 0x0) listen(r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001480)={0x0, 0xfffeffff}, &(0x7f0000001440)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r6, 0xffff}, &(0x7f0000000100)=0x8) creat(&(0x7f0000000180)='./file0\x00', 0x80) connect$phonet_pipe(r5, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) 959.508486ms ago: executing program 7 (id=2993): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0x1, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970366772653000000000000000000008000a00", @ANYRES32], 0x3c}}, 0x0) 902.981033ms ago: executing program 4 (id=2994): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@nogrpid}, {@oldalloc}]}, 0xff, 0x58d, &(0x7f0000000240)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2804410, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES64]) 770.138411ms ago: executing program 7 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0xaa, 0x7, 0x1, 0x0, "fa3cd783caedb4940a470a5d9b4ab79986040403ed3c2dd6a5a59e7c1eaf64b805a07ee86c260721173fce3760164e6cff8f94177bdcf9cd1dab31093f9ab10993de567a659b5f6f4fb77dfdea4d8a5c50675aeb5a10f4289b271fe918bdcccd3f2dd7274ef4bcfc9e5954e05e3b3ce66e2c71e8350391cca8fd1a6f26de6a4eadbc227e47f3502726813dd64bbf3e48b53cc02d8dac0cb65dc1aa46677b3fb39bdf67691955"}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xffffffffffffff94, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x148}}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe"], 0xffdd) 769.597021ms ago: executing program 6 (id=2996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="d61723d7c60133", 0x7}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9d223a7dfe52c1f5121", 0x1b}], 0x2}, 0x20008b88) 726.066697ms ago: executing program 8 (id=2997): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x80, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0xd2480, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324292dad11008954a40b57bb23a78bd1175c0cd068c525e1cdf100", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000f40)={0x44, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80d}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0xc, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xfffffffffffffde5, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x104, 0x0, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xe4, 0x6, "6aa8d91272136e9d8fdd806db415a2ffff50933b7045be142699559c1da0ab8e9953bec0d0273f2fa56e18960f9abe2f2fafe454d8059dbec515f671deefabe2a2c63d883b10ac1717e37fd1dd67073cbb153071baf06fc10827c22d1b5c5d183533c2175621ee1e6525e0ce9810c40d549b762295f0256008cf45d45e28029173a154adae74893061bbb6526b28e86bada306d4cb213fe6b0c551f5b39247990de88dfc428fa6d2def1ff9bd6d5092fe149ee8be02750c38f3fa24de40eca6d29a3d32a1aa6764d2ade8f99fbb498ef798091526feea9a8d9da622a155840b9"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x19c}, 0x1, 0x0, 0x0, 0x4008090}, 0x24000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) fallocate(r3, 0x0, 0x8, 0x1101f0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900fdffffff450000000400080108000c000e0000000a001800030303030303000014002400069b00e0e05d2f87b447428a03188ce643554d10ba2e60f0b3572b"], 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x24000004) fallocate(r4, 0x10, 0x6, 0x10001) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xc9) sendfile(r7, r7, 0x0, 0x800000009) 711.588218ms ago: executing program 6 (id=2998): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x100000000004, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x8}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 386.0813ms ago: executing program 4 (id=2999): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = memfd_secret(0x80000) ftruncate(r1, 0x1) ftruncate(r1, 0x2) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x5, 0x21) sendto$inet6(r0, 0x0, 0x0, 0x4004884, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000), 0x4) 385.866ms ago: executing program 6 (id=3000): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) eventfd(0xffffff82) 361.993624ms ago: executing program 3 (id=3001): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0xff03, 0x3c8, 0x1f8, 0x2e0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private=0xa010100, @multicast1, 0xffffffff, 0xffffff00, 0x4, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0xff, 0x0, 0x0, 0xff, 0x1fe]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x0, 0x6, 0x3, 0x8, 0x1000, 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@broadcast, @private=0xa010102, 0xff, 0x0, 0x8, 0xd, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x5, 0x9, 0xffff, 0x8, 0x65c, 'sit0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x488}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @remote, 0x4}}}, {{@arp={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@mac=@multicast, {[0x0, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x9ee8, 0x4f, 0x4, 0xfff, 0x5, 0x1, 'veth0_to_batadv\x00', 'rose0\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 323.324278ms ago: executing program 6 (id=3002): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000400)=0x80, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0xd2480, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 288.747523ms ago: executing program 7 (id=3003): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x400, 0x70bd2d, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r1, 0x11e, 0x53, 0x0, &(0x7f0000000040)) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000280)=0x0) setfsuid(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x18, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x2}]}, 0x18}], 0x1}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x64000) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="4c0000001000010400"/20, @ANYBLOB="7b130000000000002c0012800b00010062726964676500001c0002800c00200000000000000000000c00219c4b28bfe0a010731c95658f16a9a06966ee0d62d3001f6e2959005ef3dcff9eef6527e9424269868e42975a7a49b150ec60e5f29008da754f9acd12a645eaf510148f9207e02f91ccc5d2fb067bec86632fb2f5012c91533b2d9bcf0b60480d67c576ca94dc77cad31980669a4d9114323b296812f5d781a38e87ebf8c81545b79fa8b49ce40f4e448b"], 0x4c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000300)="f9f618b61fa95c2139923f13e53a3c77821c52b0f8de7901e001068dd3e88ec6b8d912f75d8287242b6e3bcf283e9ef105827bb286f7a51df0d4eba82273f344c34c6208d3681dd604549f2c0f2f377ef57e6e55860513e026d5129f32f511e176a650e9cc097563fd206e72f6c12ffbeaf72bf086f5a88a3baaf08914caa299ff201712dee7c8de6cc7885e13937ac6af6575306b64febc382bb36a36c9fe410a10299fa1dd2d2011fdf28043aee789a178545c307df167a1c02d96b4d908b16a17ecb7f982f9fa1203084ba3906810fa5f08ea7f6bb1bd60f5", &(0x7f0000000400)=""/31, &(0x7f0000000440)="87cfb9689b3487d15c22f1efbb1eb96179d87bcea9e452672990bb796a7d3a64979ab62c594bbb38d325bf15c848f4c08cca7cee8637c9383aa5580c5f8fca648c4af58479d12faa9f", &(0x7f00000004c0)="1e182f57fbd12cbed5b98c44ad7fea16de5d131cc6d70dd6180157c53ca276612795af93f3dcbfc2e5180c9d5c2310f501a30283c3b44ad3502c32e541f7c33a0a53ec184f36d119994788957ed997234be7c864b265ee189407edb5fbf5d545212706cc8664148c9ba276d7b475fc37b9160655c1c2d8a983e5a47e4ec1874eabed193947821482c7b11bbc3541061639a4e0c4805123667a1ad90321d327c6646f3a1f527d", 0x7, r0}, 0x38) 280.283054ms ago: executing program 8 (id=3004): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$packet(0x11, 0x2, 0x300) (async) set_mempolicy(0x1, 0x0, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00'}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r3 = io_uring_setup(0x78d4, &(0x7f00000005c0)={0x0, 0xe39d, 0x800, 0x1, 0x122d}) syz_io_uring_setup(0x740d, &(0x7f00000004c0)={0x0, 0x8191, 0x0, 0x0, 0x400, 0x0, r3}, &(0x7f0000000540), &(0x7f0000000580)) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x43}, 0x1}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="280f4565db07cebcdc59c12f118d5806c106e2a46208c5e31336b7f96f85ef63f389e19e08b08f92410aed26d9bc4fed2a3db0", 0x33}, {&(0x7f00000001c0)="049c1356d49c2996d23448ed040f2db5715bfb5b7ae33e20d47235edd9225a3db58009c2be41c56bdf1e140f7a9819c3c36301920091055b40f1dae2d1727cfb4fa72442958799114c627998e9dd9b2c69d0861c95c19884a735f675dcf7c3f55daf72fb1d2c4b9033ea6271759dcb95415ca34de29aef7840c4f468b84b8d2cda9c6a1e447879813c8ed1c1e9718f613ab07703640a9c521e80dd462d866ccaf01c5ac11baf899091c59ddef4db0b2107aefcae46bfc89d46ada53297ffe02d8d7af2", 0xc3}], 0x2, &(0x7f0000000300)="0585afb1d38b36d9c90cd25af198f1575bc1e0067a2da332f4ed26be8ca4ebbd2c050efeb5128673ee93aeb639c263202d4a045f89c7500fee9f51724ec6135fb2c40db482e35b02d359dfe232138dd0ff9cfa2828ae45abe31180607759e07f2fbb0b8c7baa783d71a31efb9bab74c9c6f16ac93d253bdc0034faa4bdc5e0f17d0c80e1d502844c26b4843a01413e941352db7243750ba492da29ea50759cc92cdf0e81eb02377f07cd1b1d471a2a22c6ce7f4c99e3f83e2641173f7385c788357e1915c0134708b8dba4584d8991b497add0c9395fa0044a69087a460a1d40744c9ec7711bee56e055", 0xea, 0x40800}, 0xc8364b925b5a1405) 222.114681ms ago: executing program 4 (id=3005): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x49de, 0xed80, 0xfffc, 0xbfff, 0x0, "9d0302b4df468a7f"}) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) syz_open_pts(r0, 0x20800) (async) r1 = syz_open_pts(r0, 0x20800) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r1, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0, 0x237, &(0x7f00000006c0)="$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") syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00028006"], 0x24}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00028006"], 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0xa01, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x11c0000, 0x14, "e982f92973c981e2e5336eb3bfd4928ea402a4"}) 221.492511ms ago: executing program 3 (id=3006): unshare(0x20040600) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x0, 0x124) readv(r1, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0xfffffffffffffc8c) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000007c0)="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", 0x1000, r0}, 0x68) 219.349932ms ago: executing program 3 (id=3007): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x80) socket(0x400000000010, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x6, 0x5, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) 191.406005ms ago: executing program 7 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="d61723d7c60133", 0x7}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9d223a7dfe52c1f51218206f5ab", 0x1f}], 0x2}, 0x20008b88) 0s ago: executing program 7 (id=3009): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) kernel console output (not intermixed with test programs): r+0x178/0x2a0 [ 187.104757][T11451] tun_get_user+0xbbd/0x27c0 [ 187.104812][T11451] ? ref_tracker_alloc+0x1f2/0x2f0 [ 187.104842][T11451] tun_chr_write_iter+0x15e/0x210 [ 187.104870][T11451] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 187.104957][T11451] vfs_write+0x5a6/0x9f0 [ 187.104987][T11451] ksys_write+0xdc/0x1a0 [ 187.105017][T11451] __x64_sys_write+0x40/0x50 [ 187.105076][T11451] x64_sys_call+0x2847/0x3000 [ 187.105147][T11451] do_syscall_64+0xc0/0x2a0 [ 187.105185][T11451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.105208][T11451] RIP: 0033:0x7f334a44b58e [ 187.105252][T11451] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 187.105299][T11451] RSP: 002b:00007f3348ee6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.105325][T11451] RAX: ffffffffffffffda RBX: 00007f3348ee76c0 RCX: 00007f334a44b58e [ 187.105343][T11451] RDX: 0000000000000036 RSI: 0000200000000280 RDI: 00000000000000c8 [ 187.105376][T11451] RBP: 00007f3348ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.105464][T11451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.105476][T11451] R13: 00007f334a706038 R14: 00007f334a705fa0 R15: 00007fffb2504918 [ 187.105558][T11451] [ 187.371609][T11455] loop6: detected capacity change from 0 to 512 [ 187.434527][T11455] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 187.473326][T11455] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 187.498576][T11473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.588091][T11473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.097496][T11476] __nla_validate_parse: 47 callbacks suppressed [ 188.097518][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2148'. [ 188.231597][T11507] loop6: detected capacity change from 0 to 8192 [ 188.240721][T11507] msdos: Unknown parameter 'noÿ' [ 188.293564][T11514] loop7: detected capacity change from 0 to 1024 [ 188.311392][T11514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.352433][T11514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.394005][T11514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.555096][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 188.555192][ T29] audit: type=1400 audit(448.162:11950): avc: denied { map } for pid=11513 comm="syz.7.2156" path="/377/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.584296][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.713886][ T29] audit: type=1400 audit(448.359:11951): avc: denied { write } for pid=11537 comm="syz.1.2161" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 188.737686][ T29] audit: type=1400 audit(448.359:11952): avc: denied { open } for pid=11537 comm="syz.1.2161" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 189.004593][T11542] FAULT_INJECTION: forcing a failure. [ 189.004593][T11542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.017944][T11542] CPU: 1 UID: 0 PID: 11542 Comm: syz.1.2163 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.018007][T11542] Tainted: [W]=WARN [ 189.018016][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.018032][T11542] Call Trace: [ 189.018038][T11542] [ 189.018045][T11542] __dump_stack+0x1d/0x30 [ 189.018071][T11542] dump_stack_lvl+0x95/0xd0 [ 189.018100][T11542] dump_stack+0x15/0x1b [ 189.018195][T11542] should_fail_ex+0x263/0x280 [ 189.018224][T11542] should_fail+0xb/0x20 [ 189.018244][T11542] should_fail_usercopy+0x1a/0x20 [ 189.018295][T11542] _copy_to_user+0x20/0xa0 [ 189.018332][T11542] simple_read_from_buffer+0xb5/0x130 [ 189.018456][T11542] proc_fail_nth_read+0x10e/0x150 [ 189.018533][T11542] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.018566][T11542] vfs_read+0x1ab/0x7f0 [ 189.018597][T11542] ? __schedule+0x82d/0xc90 [ 189.018698][T11542] ? __rcu_read_unlock+0x4e/0x70 [ 189.018717][T11542] ? __fget_files+0x184/0x1c0 [ 189.018804][T11542] ? mutex_lock+0x57/0x90 [ 189.018842][T11542] ksys_read+0xdc/0x1a0 [ 189.018906][T11542] __x64_sys_read+0x40/0x50 [ 189.018983][T11542] x64_sys_call+0x2889/0x3000 [ 189.019008][T11542] do_syscall_64+0xc0/0x2a0 [ 189.019082][T11542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.019105][T11542] RIP: 0033:0x7f19416bb58e [ 189.019123][T11542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 189.019148][T11542] RSP: 002b:00007f1940156fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.019219][T11542] RAX: ffffffffffffffda RBX: 00007f19401576c0 RCX: 00007f19416bb58e [ 189.019234][T11542] RDX: 000000000000000f RSI: 00007f19401570a0 RDI: 0000000000000006 [ 189.019246][T11542] RBP: 00007f1940157090 R08: 0000000000000000 R09: 0000000000000000 [ 189.019258][T11542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.019351][T11542] R13: 00007f1941976038 R14: 00007f1941975fa0 R15: 00007ffd6111b628 [ 189.019373][T11542] [ 189.370097][T11552] syzkaller0: entered allmulticast mode [ 189.383787][T11552] syzkaller0: entered promiscuous mode [ 189.408274][T11552] syzkaller0 (unregistering): left allmulticast mode [ 189.415097][T11552] syzkaller0 (unregistering): left promiscuous mode [ 189.552600][T11558] tap0: tun_chr_ioctl cmd 2147767521 [ 190.001194][ T29] audit: type=1400 audit(449.566:11953): avc: denied { setattr } for pid=11572 comm="syz.7.2172" path="socket:[33032]" dev="sockfs" ino=33032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.125658][T11577] team0: entered promiscuous mode [ 190.130948][T11577] team_slave_0: entered promiscuous mode [ 190.137307][T11577] team_slave_1: entered promiscuous mode [ 190.155267][T11577] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 190.164114][T11577] team0: left promiscuous mode [ 190.169030][T11577] team_slave_0: left promiscuous mode [ 190.174866][T11577] team_slave_1: left promiscuous mode [ 190.332779][ T29] audit: type=1400 audit(449.874:11954): avc: denied { getopt } for pid=11582 comm="syz.2.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 190.532626][ T29] audit: type=1400 audit(450.052:11955): avc: denied { write } for pid=11603 comm="syz.1.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 190.559559][T11610] bond0: entered promiscuous mode [ 190.564737][T11610] bond_slave_0: entered promiscuous mode [ 190.570567][T11610] bond_slave_1: entered promiscuous mode [ 190.576420][T11610] batadv0: entered promiscuous mode [ 190.593473][T11610] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 190.609337][T11610] bond0: left promiscuous mode [ 190.614355][T11610] bond_slave_0: left promiscuous mode [ 190.619950][T11610] bond_slave_1: left promiscuous mode [ 190.625493][T11610] batadv0: left promiscuous mode [ 190.662610][T11604] bridge0: port 3(team0) entered disabled state [ 190.671101][T11604] batman_adv: batadv0: Interface deactivated: dummy0 [ 190.677979][T11604] batman_adv: batadv0: Removing interface: dummy0 [ 190.686686][ T29] audit: type=1400 audit(450.211:11956): avc: denied { ioctl } for pid=11615 comm="syz.9.2187" path="socket:[33145]" dev="sockfs" ino=33145 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.697865][T11604] bridge_slave_0: left allmulticast mode [ 190.717079][T11604] bridge_slave_0: left promiscuous mode [ 190.723036][T11604] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.750623][T11604] bridge_slave_1: left allmulticast mode [ 190.756332][T11604] bridge_slave_1: left promiscuous mode [ 190.762183][T11604] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.792725][T11604] bond0: (slave bond_slave_0): Releasing backup interface [ 190.808737][T11604] bond_slave_0: left promiscuous mode [ 190.814716][T11604] bond_slave_0: left allmulticast mode [ 190.834391][T11604] bond0: (slave bond_slave_1): Releasing backup interface [ 190.849319][T11604] bond_slave_1: left promiscuous mode [ 190.855170][T11604] bond_slave_1: left allmulticast mode [ 190.873199][T11604] team_slave_0: left promiscuous mode [ 190.878814][T11604] team_slave_0: left allmulticast mode [ 190.906467][T11604] team0: Port device team_slave_0 removed [ 190.922873][T11604] team_slave_1: left promiscuous mode [ 190.928433][T11604] team_slave_1: left allmulticast mode [ 190.948393][T11604] team0: Port device team_slave_1 removed [ 190.962565][T11604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.970083][T11604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.000964][T11604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.008618][T11604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.026818][T11604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.090329][T11625] syzkaller0: entered promiscuous mode [ 191.096064][T11625] syzkaller0: entered allmulticast mode [ 191.164795][ T29] audit: type=1326 audit(450.623:11957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.1.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19416facb9 code=0x7ffc0000 [ 191.187919][ T29] audit: type=1326 audit(450.623:11958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11631 comm="syz.1.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19416facb9 code=0x7ffc0000 [ 191.377268][ T3426] IPVS: starting estimator thread 0... [ 191.399482][T11653] 9p: Bad value for 'rfdno' [ 191.537514][T11649] IPVS: using max 2400 ests per chain, 120000 per kthread [ 191.927163][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 191.927676][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 191.950797][T11667] loop1: detected capacity change from 0 to 1024 [ 191.969620][T11670] loop7: detected capacity change from 0 to 512 [ 191.976183][T11667] EXT4-fs: Ignoring removed orlov option [ 191.986628][T11670] EXT4-fs (loop7): first meta block group too large: 589824 (group descriptor block count 1) [ 192.044474][T11667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.076888][T11675] netlink: 'syz.7.2204': attribute type 9 has an invalid length. [ 192.084788][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2204'. [ 192.096995][T11675] hsr0: entered promiscuous mode [ 192.102004][T11675] macvlan3: entered promiscuous mode [ 192.107512][T11675] macvlan3: entered allmulticast mode [ 192.112932][T11675] hsr0: entered allmulticast mode [ 192.118009][T11675] hsr_slave_0: entered allmulticast mode [ 192.146464][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2205'. [ 192.171206][T11678] wireguard0: entered promiscuous mode [ 192.176889][T11678] wireguard0: entered allmulticast mode [ 192.211979][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'. [ 192.320703][T11687] syzkaller0: entered promiscuous mode [ 192.326221][T11687] syzkaller0: entered allmulticast mode [ 192.335218][T11685] can0: slcan on ttyS3. [ 192.382024][T11685] can0 (unregistered): slcan off ttyS3. [ 192.387840][ T29] audit: type=1400 audit(451.783:11959): avc: denied { read write } for pid=11690 comm="syz.9.2209" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 192.445436][T11691] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2209'. [ 192.454682][T11691] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 192.567554][T11696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=11696 comm=syz.9.2211 [ 192.581040][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.632789][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2213'. [ 192.707855][T11712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11712 comm=syz.7.2217 [ 192.724837][T11708] loop9: detected capacity change from 0 to 2048 [ 192.738931][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'. [ 192.771754][T11233] Alternate GPT is invalid, using primary GPT. [ 192.778240][T11233] loop9: p2 p3 p7 [ 192.900847][T11708] Alternate GPT is invalid, using primary GPT. [ 192.907312][T11708] loop9: p2 p3 p7 [ 192.992745][T11721] syzkaller0: entered promiscuous mode [ 192.998354][T11721] syzkaller0: entered allmulticast mode [ 193.412077][ T7774] udevd[7774]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 193.423584][ T7773] udevd[7773]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 193.437265][T11233] udevd[11233]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 193.454418][T11727] syzkaller0: entered promiscuous mode [ 193.459945][T11727] syzkaller0: entered allmulticast mode [ 193.482302][ T7774] udevd[7774]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 193.485527][ T7773] udevd[7773]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 193.493022][T11233] udevd[11233]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 193.628140][T11734] bond0: entered promiscuous mode [ 193.634097][T11734] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 193.642998][T11734] bond0: left promiscuous mode [ 193.654002][T11732] bond0: entered promiscuous mode [ 193.659147][T11732] bond_slave_0: entered promiscuous mode [ 193.664993][T11732] bond_slave_1: entered promiscuous mode [ 193.670769][T11732] batadv0: entered promiscuous mode [ 193.692833][T11732] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 193.701574][T11732] bond0: left promiscuous mode [ 193.706421][T11732] bond_slave_0: left promiscuous mode [ 193.712003][T11732] bond_slave_1: left promiscuous mode [ 193.717479][T11732] batadv0: left promiscuous mode [ 193.728805][T11736] nfs4: Unknown parameter 'tc' [ 193.788940][T11740] loop9: detected capacity change from 0 to 1024 [ 193.887320][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 193.945112][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 193.945134][ T29] audit: type=1400 audit(453.252:11963): avc: denied { mount } for pid=11749 comm="syz.9.2229" name="/" dev="ramfs" ino=34318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 193.986665][T11754] syzkaller0: entered promiscuous mode [ 193.992200][T11754] syzkaller0: entered allmulticast mode [ 194.021577][T11750] netlink: 'syz.9.2229': attribute type 13 has an invalid length. [ 194.043222][T11750] gretap0: refused to change device tx_queue_len [ 194.061379][T11750] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 194.102024][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2232'. [ 194.160141][ T29] audit: type=1400 audit(453.457:11964): avc: denied { execute } for pid=11763 comm="syz.9.2234" name="sg#" dev="devtmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 194.182018][ T29] audit: type=1400 audit(453.457:11965): avc: denied { execute_no_trans } for pid=11763 comm="syz.9.2234" path="/dev/sg#" dev="devtmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 194.223330][T11768] nfs4: Unknown parameter 'tc' [ 194.274392][ T29] audit: type=1400 audit(453.560:11966): avc: denied { write } for pid=11769 comm="syz.7.2237" path="socket:[34358]" dev="sockfs" ino=34358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.476358][T11770] tipc: Started in network mode [ 194.481329][T11770] tipc: Node identity fffffffa, cluster identity 4711 [ 194.488155][T11770] tipc: Node number set to 4294967290 [ 195.133906][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'. [ 195.223486][T11797] tipc: Enabled bearer , priority 0 [ 195.265021][ T29] audit: type=1400 audit(454.477:11967): avc: denied { cpu } for pid=11800 comm="syz.2.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 195.284300][T11797] syzkaller0: entered promiscuous mode [ 195.289958][T11797] syzkaller0: entered allmulticast mode [ 195.318254][T11799] loop7: detected capacity change from 0 to 128 [ 195.391856][T11799] bio_check_eod: 2 callbacks suppressed [ 195.391874][T11799] syz.7.2245: attempt to access beyond end of device [ 195.391874][T11799] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 195.412369][T11797] netlink: 'syz.9.2244': attribute type 13 has an invalid length. [ 195.421399][T11799] syz.7.2245: attempt to access beyond end of device [ 195.421399][T11799] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 195.441311][T11801] bridge0: entered promiscuous mode [ 195.447271][T11801] vlan2: entered promiscuous mode [ 195.456185][T11805] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2245'. [ 195.493610][T11799] syz.7.2245: attempt to access beyond end of device [ 195.493610][T11799] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 195.508417][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2245'. [ 195.557054][T11799] syz.7.2245: attempt to access beyond end of device [ 195.557054][T11799] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 195.572330][T11799] syz.7.2245: attempt to access beyond end of device [ 195.572330][T11799] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 195.585998][T11806] tipc: Resetting bearer [ 195.592456][T11799] syz.7.2245: attempt to access beyond end of device [ 195.592456][T11799] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 195.606351][T11799] syz.7.2245: attempt to access beyond end of device [ 195.606351][T11799] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 195.620983][T11799] syz.7.2245: attempt to access beyond end of device [ 195.620983][T11799] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 195.635081][T11799] syz.7.2245: attempt to access beyond end of device [ 195.635081][T11799] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 195.648783][T11799] syz.7.2245: attempt to access beyond end of device [ 195.648783][T11799] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 195.648819][T11796] tipc: Resetting bearer [ 195.669461][T11796] tipc: Disabling bearer [ 195.720006][T11808] nfs4: Unknown parameter 'tc' [ 195.780007][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2250'. [ 195.789068][T11814] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2250'. [ 195.864009][T11824] IPVS: dh: FWM 3 0x00000003 - no destination available [ 195.871206][ C0] IPVS: dh: FWM 3 0x00000003 - no destination available [ 195.900638][T11830] loop7: detected capacity change from 0 to 136 [ 195.909377][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 195.915892][T11830] iso9660: Unknown parameter '‹Q ' [ 195.957460][T11830] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2253'. [ 195.990801][ T29] audit: type=1326 audit(455.160:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 196.014165][ T29] audit: type=1326 audit(455.160:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 196.037518][ T29] audit: type=1326 audit(455.160:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 196.060536][ T29] audit: type=1326 audit(455.160:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 196.069638][T11843] team0: entered promiscuous mode [ 196.083588][ T29] audit: type=1326 audit(455.160:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11844 comm="syz.6.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 196.111955][T11843] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 196.122811][T11843] team0: left promiscuous mode [ 196.131044][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2258'. [ 196.160317][T11848] tipc: Enabled bearer , priority 0 [ 196.170870][T11848] syzkaller0: entered promiscuous mode [ 196.176408][T11848] syzkaller0: entered allmulticast mode [ 196.184981][T11848] netlink: 'syz.1.2259': attribute type 13 has an invalid length. [ 196.196426][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.207454][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.221642][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.252949][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.278849][T11860] loop9: detected capacity change from 0 to 1024 [ 196.299166][T11856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.308757][T11856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.323148][T11860] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.350196][T11867] loop6: detected capacity change from 0 to 164 [ 196.375162][T11867] Unable to read rock-ridge attributes [ 196.395086][T11859] tipc: Resetting bearer [ 196.411385][ T7467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.433172][T11847] tipc: Resetting bearer [ 196.479786][T11847] tipc: Disabling bearer [ 196.496666][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 196.505727][T11868] bond1 (unregistering): Released all slaves [ 196.530118][T11875] IPVS: dh: FWM 3 0x00000003 - no destination available [ 196.530486][T11871] loop9: detected capacity change from 0 to 1024 [ 196.560761][T11871] EXT4-fs (loop9): bad geometry: first data block 458752 is beyond end of filesystem (512) [ 196.599588][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 196.619815][T11868] bond1 (unregistering): Released all slaves [ 196.670829][T11871] loop9: detected capacity change from 0 to 8192 [ 196.704412][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 196.728802][T11868] bond1 (unregistering): Released all slaves [ 196.739643][T11871] loop9: p1 < > p2 p3 < p5 p6 > p4 [ 196.744956][T11871] loop9: partition table partially beyond EOD, truncated [ 196.759951][T11871] loop9: p1 start 100663296 is beyond EOD, truncated [ 196.766933][T11871] loop9: p2 size 134217732 extends beyond EOD, truncated [ 196.780393][T11896] loop6: detected capacity change from 0 to 1024 [ 196.788126][T11896] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 196.806794][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 196.810949][T11871] loop9: p4 size 14876672 extends beyond EOD, truncated [ 196.816669][T11896] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 196.832943][T11868] bond1 (unregistering): Released all slaves [ 196.839806][T11871] loop9: p5 size 134217732 extends beyond EOD, truncated [ 196.847053][T11896] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: inode #32: comm syz.6.2274: iget: special inode unallocated [ 196.848448][T11871] loop9: p6 size 14876672 extends beyond EOD, truncated [ 196.867467][T11896] EXT4-fs (loop6): Remounting filesystem read-only [ 196.878350][T11896] EXT4-fs (loop6): no journal found [ 196.883751][T11896] EXT4-fs (loop6): can't get journal size [ 196.892836][T11900] loop1: detected capacity change from 0 to 1024 [ 196.906424][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 196.915814][T11868] bond1 (unregistering): Released all slaves [ 196.956240][T11896] EXT4-fs (loop6): filesystem is read-only [ 196.968734][T11896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 196.987856][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 196.996815][T11868] bond1 (unregistering): Released all slaves [ 197.071484][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 197.080563][T11868] bond1 (unregistering): Released all slaves [ 197.130156][T11920] tipc: Enabled bearer , priority 0 [ 197.142181][T11920] syzkaller0: entered promiscuous mode [ 197.147709][T11920] syzkaller0: entered allmulticast mode [ 197.161301][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 197.169842][T11868] bond1 (unregistering): Released all slaves [ 197.180355][T11920] netlink: 'syz.9.2279': attribute type 13 has an invalid length. [ 197.238383][T11868] bond1: Unable to set up delay as MII monitoring is disabled [ 197.246977][T11868] bond1 (unregistering): Released all slaves [ 197.260771][T11920] tipc: Resetting bearer [ 197.267794][T11918] tipc: Resetting bearer [ 197.275046][T11918] tipc: Disabling bearer [ 197.336386][T11927] syzkaller0: entered promiscuous mode [ 197.341996][T11927] syzkaller0: entered allmulticast mode [ 197.556577][T11957] team0: entered promiscuous mode [ 197.561723][T11957] team_slave_0: entered promiscuous mode [ 197.567764][T11957] team_slave_1: entered promiscuous mode [ 197.584238][T11957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.593449][T11957] team0: left promiscuous mode [ 197.598415][T11957] team_slave_0: left promiscuous mode [ 197.604013][T11957] team_slave_1: left promiscuous mode [ 197.677835][ T5319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.698138][T11961] syzkaller0: entered promiscuous mode [ 197.703686][T11961] syzkaller0: entered allmulticast mode [ 197.757111][T11969] tipc: Enabled bearer , priority 0 [ 197.780620][T11969] syzkaller0: entered promiscuous mode [ 197.786304][T11969] syzkaller0: entered allmulticast mode [ 197.809108][T11969] netlink: 'syz.6.2294': attribute type 13 has an invalid length. [ 197.819401][T11969] tipc: Resetting bearer [ 197.826094][T11968] tipc: Resetting bearer [ 197.834463][T11968] tipc: Disabling bearer [ 197.882859][T11979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11979 comm=syz.2.2297 [ 197.964328][T11992] xt_hashlimit: invalid interval [ 198.196976][T12003] can: request_module (can-proto-0) failed. [ 198.480067][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.506169][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.518145][T12028] set_capacity_and_notify: 1 callbacks suppressed [ 198.518164][T12028] loop9: detected capacity change from 0 to 1024 [ 198.533761][T12028] ext4: Unknown parameter 'dioread_nolockTIPCv2' [ 198.574122][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.591365][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.663663][T12052] netlink: 'syz.9.2316': attribute type 1 has an invalid length. [ 198.694536][T12058] lo: Caught tx_queue_len zero misconfig [ 198.785195][T12069] delete_channel: no stack [ 198.790122][T12069] delete_channel: no stack [ 198.795460][T12072] loop7: detected capacity change from 0 to 512 [ 198.802502][T12074] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 198.809049][T12074] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.816876][T12074] vhci_hcd vhci_hcd.0: Device attached [ 198.819159][T12072] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 198.862773][T12075] vhci_hcd: connection closed [ 198.863277][ T4936] vhci_hcd vhci_hcd.1: stop threads [ 198.873340][ T4936] vhci_hcd vhci_hcd.1: release socket [ 198.878739][ T4936] vhci_hcd vhci_hcd.1: disconnect device [ 198.885697][T12072] EXT4-fs (loop7): 1 truncate cleaned up [ 198.897873][T12072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.947835][T12072] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20001 [ 199.005393][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.029899][T12086] netlink: 'syz.2.2326': attribute type 4 has an invalid length. [ 199.113271][T12083] loop6: detected capacity change from 0 to 256 [ 199.123908][T12083] msdos: Bad value for 'uid' [ 199.128589][T12083] msdos: Bad value for 'uid' [ 199.135072][T12088] syzkaller0: entered promiscuous mode [ 199.140686][T12088] syzkaller0: entered allmulticast mode [ 199.259894][T12099] team0: entered promiscuous mode [ 199.265032][T12099] team_slave_0: entered promiscuous mode [ 199.271207][T12099] team_slave_1: entered promiscuous mode [ 199.275769][T12103] __nla_validate_parse: 29 callbacks suppressed [ 199.275902][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2331'. [ 199.293912][T12099] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.302738][T12099] team0: left promiscuous mode [ 199.307643][T12099] team_slave_0: left promiscuous mode [ 199.313436][T12099] team_slave_1: left promiscuous mode [ 199.328293][T12102] team0: entered promiscuous mode [ 199.333444][T12102] team_slave_0: entered promiscuous mode [ 199.339217][T12102] team_slave_1: entered promiscuous mode [ 199.351453][T12102] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 199.360337][T12102] team0: left promiscuous mode [ 199.365186][T12102] team_slave_0: left promiscuous mode [ 199.370751][T12102] team_slave_1: left promiscuous mode [ 199.856279][T12126] syzkaller0: entered promiscuous mode [ 199.861814][T12126] syzkaller0: entered allmulticast mode [ 199.883663][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 199.892851][T12136] loop7: detected capacity change from 0 to 512 [ 200.036614][T12147] loop6: detected capacity change from 0 to 512 [ 200.049450][T12151] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2350'. [ 200.080966][T12147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.122872][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 200.122934][ T29] audit: type=1400 audit(459.024:12038): avc: denied { create } for pid=12145 comm="syz.6.2348" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 200.151781][T12165] ip6tnl0: Caught tx_queue_len zero misconfig [ 200.194444][ T29] audit: type=1400 audit(459.033:12039): avc: denied { setopt } for pid=12166 comm="syz.2.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 200.213928][ T29] audit: type=1400 audit(459.061:12040): avc: denied { remove_name } for pid=12145 comm="syz.6.2348" name="control" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.236529][ T29] audit: type=1400 audit(459.061:12041): avc: denied { rmdir } for pid=12145 comm="syz.6.2348" name="control" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 200.283123][ T5319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.305612][T12171] lo: Caught tx_queue_len zero misconfig [ 200.337804][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2358'. [ 200.349783][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2356'. [ 200.536171][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2357'. [ 200.588260][T12186] loop9: detected capacity change from 0 to 1024 [ 200.614667][T12186] EXT4-fs: Ignoring removed orlov option [ 200.633079][T12190] tipc: Started in network mode [ 200.636112][T12186] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.638276][T12190] tipc: Node identity a266e66bb12c, cluster identity 4711 [ 200.657779][T12190] tipc: Enabled bearer , priority 0 [ 200.670907][T12190] syzkaller0: entered promiscuous mode [ 200.676529][T12190] syzkaller0: entered allmulticast mode [ 200.698606][T12190] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 200.708533][T12194] netlink: 'syz.7.2363': attribute type 3 has an invalid length. [ 200.716700][T12194] netlink: 'syz.7.2363': attribute type 3 has an invalid length. [ 200.752792][ T7467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.762501][T12190] netlink: 'syz.2.2361': attribute type 13 has an invalid length. [ 200.872527][T12201] netem: change failed [ 200.912579][T12189] tipc: Resetting bearer [ 200.930605][ T29] audit: type=1400 audit(459.781:12042): avc: denied { map } for pid=12204 comm="syz.7.2367" path="socket:[35166]" dev="sockfs" ino=35166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.953606][ T29] audit: type=1400 audit(459.781:12043): avc: denied { accept } for pid=12204 comm="syz.7.2367" path="socket:[35166]" dev="sockfs" ino=35166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.980785][T12189] tipc: Disabling bearer [ 201.024867][T12211] netlink: 'syz.9.2369': attribute type 13 has an invalid length. [ 201.041197][T12209] loop6: detected capacity change from 0 to 512 [ 201.088688][T12209] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 201.137686][T12209] EXT4-fs (loop6): 1 truncate cleaned up [ 201.144068][T12209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.220635][ T29] audit: type=1400 audit(460.043:12044): avc: denied { setattr } for pid=12208 comm="syz.6.2368" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.256296][T12116] loop1: detected capacity change from 0 to 4096 [ 201.302961][T12116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.319845][T12224] infiniband !yz!: set active [ 201.324763][T12224] infiniband !yz!: added team_slave_0 [ 201.329875][ T29] audit: type=1400 audit(460.090:12045): avc: denied { unlink } for pid=12208 comm="syz.6.2368" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.352074][ T29] audit: type=1326 audit(460.118:12046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.9.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4baf9acb9 code=0x7ffc0000 [ 201.375152][ T29] audit: type=1326 audit(460.118:12047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.9.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4baf9acb9 code=0x7ffc0000 [ 201.403115][ T5319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.420348][T12224] RDS/IB: !yz!: added [ 201.424426][T12224] smc: adding ib device !yz! with port count 1 [ 201.431356][T12224] smc: ib device !yz! port 1 has no pnetid [ 201.468780][T12116] lo: left allmulticast mode [ 201.480375][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2376'. [ 201.504160][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.588295][T12238] team0: entered promiscuous mode [ 201.595432][T12238] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 201.604588][T12238] team0: left promiscuous mode [ 201.641860][T12244] xt_hashlimit: size too large, truncated to 1048576 [ 201.651341][T12245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12245 comm=syz.6.2380 [ 201.664181][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2380'. [ 201.673172][T12245] netlink: 'syz.6.2380': attribute type 11 has an invalid length. [ 201.681029][T12245] netlink: 'syz.6.2380': attribute type 14 has an invalid length. [ 201.749075][T12249] tipc: Enabling of bearer rejected, failed to enable media [ 201.826189][T12247] netlink: 'syz.9.2382': attribute type 13 has an invalid length. [ 202.125014][T12267] syzkaller0: entered promiscuous mode [ 202.130725][T12267] syzkaller0: entered allmulticast mode [ 202.140190][T12278] IPVS: dh: FWM 3 0x00000003 - no destination available [ 202.238902][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2393'. [ 202.302971][T12300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2399'. [ 202.337973][T12300] ip6tnl1: entered allmulticast mode [ 202.559874][T12311] bond3: option arp_validate: invalid value (16777218) [ 202.579409][T12311] bond3 (unregistering): Released all slaves [ 202.633124][T12315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 202.639694][T12315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.647369][T12315] vhci_hcd vhci_hcd.0: Device attached [ 202.677257][T12309] loop7: detected capacity change from 0 to 8192 [ 202.719616][T12309] loop7: p1 p2 p3 p4 [ 202.723706][T12316] vhci_hcd: connection closed [ 202.723944][ T4936] vhci_hcd vhci_hcd.2: stop threads [ 202.734045][ T4936] vhci_hcd vhci_hcd.2: release socket [ 202.739698][ T4936] vhci_hcd vhci_hcd.2: disconnect device [ 202.739956][T12309] loop7: p1 start 13435904 is beyond EOD, truncated [ 202.752206][T12309] loop7: p2 start 4195840 is beyond EOD, truncated [ 202.758748][T12309] loop7: p3 start 458783 is beyond EOD, truncated [ 202.765320][T12309] loop7: p4 start 65537 is beyond EOD, truncated [ 202.807697][T12325] syzkaller0: entered promiscuous mode [ 202.813253][T12325] syzkaller0: entered allmulticast mode [ 202.830989][T12329] bond2 (unregistering): Released all slaves [ 202.991075][T12345] usb usb8: usbfs: process 12345 (syz.7.2415) did not claim interface 0 before use [ 203.093085][T12363] loop7: detected capacity change from 0 to 256 [ 203.100429][T12363] vfat: Unknown parameter '' [ 203.158578][T12366] ip6tnl0: Caught tx_queue_len zero misconfig [ 203.164806][T12366] sch_fq: defrate 4294967295 ignored. [ 203.206918][T12374] bond2: option miimon: invalid value (18446744073709551615) [ 203.214389][T12374] bond2: option miimon: allowed values 0 - 2147483647 [ 203.222744][T12374] bond2 (unregistering): Released all slaves [ 203.408413][T12451] syzkaller0: entered promiscuous mode [ 203.414058][T12451] syzkaller0: entered allmulticast mode [ 203.500399][T12490] bond3: option miimon: invalid value (18446744073709551615) [ 203.507873][T12490] bond3: option miimon: allowed values 0 - 2147483647 [ 203.516031][T12490] bond3 (unregistering): Released all slaves [ 203.569946][T12536] syzkaller0: entered promiscuous mode [ 203.575655][T12536] syzkaller0: entered allmulticast mode [ 203.604317][T12568] lo: Caught tx_queue_len zero misconfig [ 203.610064][T12568] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 203.698327][T12536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.789263][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.089580][T12649] set_capacity_and_notify: 1 callbacks suppressed [ 204.089602][T12649] loop9: detected capacity change from 0 to 256 [ 204.153673][T12665] loop7: detected capacity change from 0 to 128 [ 204.162267][T12649] syzkaller0: entered promiscuous mode [ 204.167854][T12649] syzkaller0: entered allmulticast mode [ 204.185550][T12665] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 204.194141][T12665] FAT-fs (loop7): Filesystem has been set read-only [ 204.219914][T12674] validate_nla: 3 callbacks suppressed [ 204.219929][T12674] netlink: 'syz.1.2458': attribute type 10 has an invalid length. [ 204.239793][T12674] bond0: left promiscuous mode [ 204.244642][T12674] vlan0: left promiscuous mode [ 204.249673][T12674] bond0: left allmulticast mode [ 204.254766][T12674] vlan0: left allmulticast mode [ 204.259736][T12674] batadv0: left allmulticast mode [ 204.476550][T12710] netlink: 'syz.2.2464': attribute type 2 has an invalid length. [ 204.644493][T12724] __nla_validate_parse: 10 callbacks suppressed [ 204.644511][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2468'. [ 204.659704][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2468'. [ 204.668715][T12724] netlink: 'syz.9.2468': attribute type 14 has an invalid length. [ 204.767216][T12737] loop9: detected capacity change from 0 to 1024 [ 204.798480][T12737] EXT4-fs: inline encryption not supported [ 204.847006][T12737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.888337][ T7467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.928182][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2473'. [ 205.161161][T12767] syzkaller0: entered promiscuous mode [ 205.166776][T12767] syzkaller0: entered allmulticast mode [ 205.476184][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 205.476202][ T29] audit: type=1326 audit(464.038:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19416f4ad7 code=0x7ffc0000 [ 205.505522][ T29] audit: type=1326 audit(464.038:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f194169c0d9 code=0x7ffc0000 [ 205.528537][ T29] audit: type=1326 audit(464.038:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19416f4ad7 code=0x7ffc0000 [ 205.551502][ T29] audit: type=1326 audit(464.038:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f194169c0d9 code=0x7ffc0000 [ 205.574541][ T29] audit: type=1326 audit(464.038:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19416f4ad7 code=0x7ffc0000 [ 205.597518][ T29] audit: type=1326 audit(464.038:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f194169c0d9 code=0x7ffc0000 [ 205.620552][ T29] audit: type=1326 audit(464.038:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19416f4ad7 code=0x7ffc0000 [ 205.629604][T12828] loop9: detected capacity change from 0 to 8192 [ 205.643928][ T29] audit: type=1326 audit(464.038:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f194169c0d9 code=0x7ffc0000 [ 205.643966][ T29] audit: type=1326 audit(464.038:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f19416f4ad7 code=0x7ffc0000 [ 205.696285][ T29] audit: type=1326 audit(464.038:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12807 comm="syz.1.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f194169c0d9 code=0x7ffc0000 [ 205.744323][T12838] netlink: 'syz.2.2486': attribute type 3 has an invalid length. [ 205.752256][T12838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 205.760309][T12828] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2482'. [ 205.936660][T12845] bridge_slave_0: left allmulticast mode [ 205.942453][T12845] bridge_slave_0: left promiscuous mode [ 205.948205][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.101524][T12845] bridge_slave_1: left allmulticast mode [ 206.107339][T12845] bridge_slave_1: left promiscuous mode [ 206.113035][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.165841][T12845] bond0: (slave bond_slave_0): Releasing backup interface [ 206.231525][T12845] bond0: (slave bond_slave_1): Releasing backup interface [ 206.337974][T12845] team0: Port device team_slave_0 removed [ 206.410187][T12845] team0: Port device team_slave_1 removed [ 206.435848][T12845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.443421][T12845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.455516][T12845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.462980][T12845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.475841][T12808] loop1: detected capacity change from 0 to 1024 [ 206.485779][T12845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.806861][T12897] loop6: detected capacity change from 0 to 1024 [ 206.813732][T12897] EXT4-fs: Ignoring removed orlov option [ 206.851285][T12897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.918119][ T5319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.975102][T12915] loop9: detected capacity change from 0 to 8192 [ 206.985601][T12923] 9p: Bad value for 'rfdno' [ 206.999237][T12915] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2500'. [ 207.051839][T12927] loop6: detected capacity change from 0 to 128 [ 207.058649][T12927] ext4: Unknown parameter 'smackfsfloor' [ 207.070459][T12927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.077695][T12927] IPv6: NLM_F_CREATE should be set when creating new route [ 207.085276][T12927] IPv6: NLM_F_CREATE should be set when creating new route [ 207.110536][T12927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.306096][T12968] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2512'. [ 207.326044][T12971] sctp: [Deprecated]: syz.2.2510 (pid 12971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.326044][T12971] Use struct sctp_sack_info instead [ 207.470242][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2517'. [ 207.630198][T12992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7272 sclass=netlink_route_socket pid=12992 comm=syz.1.2513 [ 207.921477][T13033] loop7: detected capacity change from 0 to 2048 [ 207.969654][T13033] Alternate GPT is invalid, using primary GPT. [ 207.976009][T13033] loop7: p1 p2 p3 [ 207.980144][T13033] loop7: partition table partially beyond EOD, truncated [ 208.171519][T13063] loop7: detected capacity change from 0 to 128 [ 208.205356][T11233] udevd[11233]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 208.219594][ T7774] udevd[7774]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 208.231792][ T7773] udevd[7773]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 208.256695][T13073] bridge_slave_0: entered promiscuous mode [ 208.277478][T13073] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.308922][T13064] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2531'. [ 208.368534][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 208.369093][T13089] 9p: Bad value for 'wfdno' [ 208.413431][T13104] lo: Caught tx_queue_len zero misconfig [ 208.511388][T13117] xt_CT: No such helper "netbios-ns" [ 208.796051][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.806781][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.863948][T13136] can0: slcan on ttyS3. [ 208.896538][T13136] program syz.9.2549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.003822][T13135] can0 (unregistered): slcan off ttyS3. [ 209.257180][T13190] netlink: 'syz.6.2553': attribute type 10 has an invalid length. [ 209.267238][T13190] team0: Port device geneve1 added [ 209.272896][T12780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.282603][T12780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.291457][T12780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.300532][T12780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.350664][T13196] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 209.368213][T13196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.381073][T13196] wireguard0: entered promiscuous mode [ 209.386621][T13196] wireguard0: entered allmulticast mode [ 209.429617][T13196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.451401][T13235] program syz.1.2556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.461414][T13237] set_capacity_and_notify: 1 callbacks suppressed [ 209.461434][T13237] loop7: detected capacity change from 0 to 128 [ 209.466582][T13196] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 209.470574][T13235] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 209.497895][T13196] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 209.508570][T13237] FAT-fs (loop7): error, clusters badly computed (4 != 3) [ 209.515735][T13237] FAT-fs (loop7): Filesystem has been set read-only [ 209.527814][T13237] FAT-fs (loop7): error, clusters badly computed (5 != 4) [ 209.535594][T13237] FAT-fs (loop7): error, clusters badly computed (6 != 5) [ 209.563605][T13241] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 209.574602][T13241] bridge1: entered promiscuous mode [ 209.579840][T13241] bridge1: entered allmulticast mode [ 209.717017][T13263] loop9: detected capacity change from 0 to 8192 [ 209.762697][T13280] program syz.2.2564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.520445][T13322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13322 comm=syz.9.2573 [ 210.702854][T13339] syzkaller0: entered promiscuous mode [ 210.708420][T13339] syzkaller0: entered allmulticast mode [ 210.740346][T13339] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 210.750769][T13339] netlink: 'syz.7.2577': attribute type 13 has an invalid length. [ 210.993448][T13354] ip6erspan0: entered promiscuous mode [ 211.347458][ T29] kauditd_printk_skb: 1069 callbacks suppressed [ 211.347494][ T29] audit: type=1326 audit(725.531:13405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13382 comm="syz.7.2583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334a48acb9 code=0x0 [ 211.460115][T13386] loop7: detected capacity change from 0 to 8192 [ 211.499545][T13386] __nla_validate_parse: 5 callbacks suppressed [ 211.499560][T13386] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2583'. [ 211.531517][T13394] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2585'. [ 211.552021][T13394] bond1 (unregistering): Released all slaves [ 211.725820][T13468] loop9: detected capacity change from 0 to 512 [ 211.745804][T13468] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2587: bg 0: block 255: padding at end of block bitmap is not set [ 211.751361][ T29] audit: type=1326 audit(725.905:13406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13472 comm="syz.6.2588" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a310facb9 code=0x0 [ 211.764114][T13468] EXT4-fs (loop9): Remounting filesystem read-only [ 211.789376][T13468] EXT4-fs (loop9): 1 truncate cleaned up [ 211.795666][T13468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.879596][ T7467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.942791][ T29] audit: type=1400 audit(726.083:13407): avc: denied { listen } for pid=13487 comm="syz.9.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.965202][ T29] audit: type=1400 audit(726.102:13408): avc: denied { read } for pid=13487 comm="syz.9.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 212.009000][T13491] loop9: detected capacity change from 0 to 512 [ 212.015748][T13491] EXT4-fs: Ignoring removed oldalloc option [ 212.026477][T13491] journal_path: Lookup failure for './file0' [ 212.032665][T13491] EXT4-fs: error: could not find journal device path [ 212.046267][T13491] sg_write: data in/out 178/204 bytes for SCSI command 0xfe-- guessing data in; [ 212.046267][T13491] program syz.9.2594 not setting count and/or reply_len properly [ 212.084357][T13491] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 212.165019][T13504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.240692][T12795] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.250579][T12795] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.250856][T13505] loop9: detected capacity change from 0 to 128 [ 212.309272][T12795] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.319185][T12795] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.365574][T12795] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.375481][T12795] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.437057][T12795] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.446998][T12795] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.452949][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2603'. [ 212.567130][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2603'. [ 212.657316][T13580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2608'. [ 212.829621][ T29] audit: type=1400 audit(726.916:13409): avc: denied { setopt } for pid=13579 comm="syz.6.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 212.993506][T12795] bond0 (unregistering): (slave vlan0): Releasing backup interface [ 213.001976][T12795] batadv0: left promiscuous mode [ 213.008111][T12795] bond0 (unregistering): Released all slaves [ 213.016370][T12795] bond1 (unregistering): Released all slaves [ 213.109923][T12795] tipc: Left network mode [ 213.123357][T12795] IPVS: stopping backup sync thread 6829 ... [ 213.169643][ T29] audit: type=1326 audit(727.234:13410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.2.2609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cf515acb9 code=0x0 [ 213.220635][T13643] netlink: 'syz.6.2611': attribute type 21 has an invalid length. [ 213.273212][T13643] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2611'. [ 213.334563][T12795] hsr_slave_0: left promiscuous mode [ 213.345896][T12795] hsr_slave_1: left promiscuous mode [ 213.353151][ T29] audit: type=1400 audit(727.402:13411): avc: denied { getopt } for pid=13676 comm="syz.6.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 213.375108][T12795] veth1_macvtap: left promiscuous mode [ 213.381413][T12795] veth0_macvtap: left promiscuous mode [ 213.381729][T13647] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 213.404166][ T29] audit: type=1326 audit(727.449:13412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13673 comm="syz.7.2613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334a48acb9 code=0x0 [ 213.426718][T13578] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2605'. [ 213.501486][ T29] audit: type=1326 audit(727.542:13413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13689 comm="syz.6.2617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a310facb9 code=0x0 [ 213.625964][T13520] chnl_net:caif_netlink_parms(): no params data found [ 213.689099][T13784] IPVS: dh: FWM 3 0x00000003 - no destination available [ 213.701302][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.708513][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.716370][T13520] bridge_slave_0: entered allmulticast mode [ 213.723347][T13520] bridge_slave_0: entered promiscuous mode [ 213.736229][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.743507][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.759870][T13803] IPVS: dh: FWM 3 0x00000003 - no destination available [ 213.781793][T13520] bridge_slave_1: entered allmulticast mode [ 213.792544][T13520] bridge_slave_1: entered promiscuous mode [ 213.818584][T12795] IPVS: stop unused estimator thread 0... [ 213.835343][T13823] netlink: 'syz.9.2622': attribute type 10 has an invalid length. [ 213.848124][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.861558][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.870607][T13823] team0: Port device bond0 added [ 213.877443][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.924219][T13520] team0: Port device team_slave_0 added [ 213.931044][T13520] team0: Port device team_slave_1 added [ 213.951450][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.958490][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.984523][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.996503][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.003552][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.029617][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.073711][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2623'. [ 214.089480][T13520] hsr_slave_0: entered promiscuous mode [ 214.095979][T13520] hsr_slave_1: entered promiscuous mode [ 214.102561][T13520] debugfs: 'hsr0' already exists in 'hsr' [ 214.108417][T13520] Cannot create hsr debugfs directory [ 214.189438][T13916] netlink: 'syz.2.2625': attribute type 13 has an invalid length. [ 214.252425][ T29] audit: type=1400 audit(728.244:13414): avc: denied { ioctl } for pid=13915 comm="syz.2.2625" path="socket:[38654]" dev="sockfs" ino=38654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.887832][T13956] tipc: Enabled bearer , priority 0 [ 214.910430][T12796] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.929654][T13997] IPVS: dh: FWM 3 0x00000003 - no destination available [ 214.941607][T12796] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.034144][T14023] program syz.2.2632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.059602][T12788] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.069484][T12788] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.200633][T14058] loop7: detected capacity change from 0 to 1024 [ 215.216050][T14063] bond0: entered promiscuous mode [ 215.221466][T14063] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.231030][T14063] bond0: left promiscuous mode [ 215.238306][T14058] EXT4-fs: Ignoring removed nobh option [ 215.243908][T14058] EXT4-fs: inline encryption not supported [ 215.291546][T14053] loop9: detected capacity change from 0 to 8192 [ 215.311674][T14053] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2633'. [ 215.336932][T13520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.346549][T13520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.355061][T14058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.369867][T13520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.403216][T13520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.437068][T10972] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.447137][T14041] 9p: Bad value for 'rfdno' [ 215.482161][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.490611][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.499005][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.511604][T12795] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.518741][T12795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.530476][T12795] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.537633][T12795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.659329][T13520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.803683][T13520] veth0_vlan: entered promiscuous mode [ 215.818074][T13520] veth1_vlan: entered promiscuous mode [ 215.839859][T13520] veth0_macvtap: entered promiscuous mode [ 215.848033][T13520] veth1_macvtap: entered promiscuous mode [ 215.866365][T13520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.886074][T13520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.897867][ T6941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.921375][ T6941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.962409][ T6941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.006627][ T6941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.192088][T14198] netlink: 'syz.9.2647': attribute type 2 has an invalid length. [ 216.212348][T14201] bond0: entered promiscuous mode [ 216.217542][T14201] bond_slave_0: entered promiscuous mode [ 216.223360][T14201] bond_slave_1: entered promiscuous mode [ 216.229337][T14201] batadv0: entered promiscuous mode [ 216.245757][T14201] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 216.255949][T14205] loop3: detected capacity change from 0 to 2048 [ 216.275102][T14201] bond0: left promiscuous mode [ 216.279935][T14201] bond_slave_0: left promiscuous mode [ 216.285444][T14201] bond_slave_1: left promiscuous mode [ 216.290971][T14201] batadv0: left promiscuous mode [ 216.339233][T14205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.932609][T14326] __nla_validate_parse: 6 callbacks suppressed [ 216.932690][T14326] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2657'. [ 217.038400][T14258] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2655'. [ 217.268081][T13520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.302664][T14211] chnl_net:caif_netlink_parms(): no params data found [ 217.351531][T14248] loop9: detected capacity change from 0 to 32768 [ 217.404570][T14211] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.411966][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.417130][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 217.417180][ T29] audit: type=1326 audit(731.190:13418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14383 comm="syz.3.2659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ac804acb9 code=0x0 [ 217.421283][T14211] bridge_slave_0: entered allmulticast mode [ 217.493058][T14211] bridge_slave_0: entered promiscuous mode [ 217.518439][T14420] netlink: 'syz.9.2661': attribute type 6 has an invalid length. [ 217.526398][T14211] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.533512][T14211] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.545524][T14211] bridge_slave_1: entered allmulticast mode [ 217.563217][T14211] bridge_slave_1: entered promiscuous mode [ 217.604926][T14211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.672116][T14211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.755305][T14211] team0: Port device team_slave_0 added [ 217.793335][T14211] team0: Port device team_slave_1 added [ 217.838548][T14211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.845606][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.871631][T14211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.883734][T14211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.890761][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.916747][T14211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.984366][T14211] hsr_slave_0: entered promiscuous mode [ 217.990625][T14211] hsr_slave_1: entered promiscuous mode [ 217.996707][T14211] debugfs: 'hsr0' already exists in 'hsr' [ 218.002487][T14211] Cannot create hsr debugfs directory [ 218.019512][T14543] loop9: detected capacity change from 0 to 512 [ 218.034820][T14543] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2669: inode has both inline data and extents flags [ 218.052243][T14543] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2669: couldn't read orphan inode 15 (err -117) [ 218.081492][T14543] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.163057][T14543] veth0: entered promiscuous mode [ 218.186085][T14543] veth0: left promiscuous mode [ 218.198708][T14586] team0: entered promiscuous mode [ 218.203808][T14586] team_slave_0: entered promiscuous mode [ 218.209709][T14586] geneve1: entered promiscuous mode [ 218.220384][T14586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 218.228932][T14586] team0: left promiscuous mode [ 218.233849][T14586] team_slave_0: left promiscuous mode [ 218.239366][T14586] geneve1: left promiscuous mode [ 218.247319][ T7467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.531260][T14676] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2675'. [ 218.584667][T14668] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2675'. [ 218.665063][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.672671][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.680258][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.687786][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x1 [ 218.695305][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.702749][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.710177][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.717613][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.725067][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.732498][T13976] hid-generic 0000:0000:0004.0004: unknown main item tag 0x0 [ 218.785340][T14689] netlink: 'syz.7.2677': attribute type 3 has an invalid length. [ 218.793186][T14689] netlink: 'syz.7.2677': attribute type 7 has an invalid length. [ 218.801023][T14689] netlink: 'syz.7.2677': attribute type 8 has an invalid length. [ 218.808826][T14689] netlink: 'syz.7.2677': attribute type 7 has an invalid length. [ 218.816566][T14689] netlink: 198788 bytes leftover after parsing attributes in process `syz.7.2677'. [ 218.966893][T14211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.998043][T14211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.037549][T14211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.063042][T14211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.078515][T13976] hid-generic 0000:0000:0004.0004: hidraw0: HID v0.03 Device [syz1] on syz0 [ 219.157172][T14211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.167706][T14723] fido_id[14723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 219.215772][T14211] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.281702][T14211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.292184][T14211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.380933][ T6940] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.388155][ T6940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.403223][ T29] audit: type=1326 audit(733.061:13419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14759 comm="syz.9.2684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4baf9acb9 code=0x0 [ 219.422869][ T6940] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.432678][ T6940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.092372][T14211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.217760][ T29] audit: type=1400 audit(733.828:13420): avc: denied { lock } for pid=14834 comm="syz.6.2690" path="socket:[39927]" dev="sockfs" ino=39927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 220.292653][ T29] audit: type=1400 audit(733.866:13421): avc: denied { execute } for pid=14836 comm="syz.7.2691" path="/syzcgroup/unified/syz7/cpu.stat" dev="cgroup2" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 220.445117][ T29] audit: type=1400 audit(733.969:13422): avc: denied { accept } for pid=14865 comm="syz.9.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.999292][T14883] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2696'. [ 221.009456][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2696'. [ 221.122937][T14897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2698'. [ 221.132460][T14211] veth0_vlan: entered promiscuous mode [ 221.141357][T14211] veth1_vlan: entered promiscuous mode [ 221.155877][T14897] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2698'. [ 221.189755][T14211] veth0_macvtap: entered promiscuous mode [ 221.202084][T14211] veth1_macvtap: entered promiscuous mode [ 221.225949][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2698'. [ 221.256727][T14211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.284428][ T29] audit: type=1326 audit(734.820:13423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14925 comm="syz.9.2701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4baf9acb9 code=0x0 [ 221.312537][T14211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.330617][ T6946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.396378][ T6946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.414911][ T6946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.425067][ T6946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.462650][T14978] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 221.469070][ T29] audit: type=1326 audit(734.998:13424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14975 comm="syz.6.2704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a310facb9 code=0x0 [ 221.478633][T14978] loop4: detected capacity change from 0 to 512 [ 221.499477][T14978] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 221.644627][T14997] bond3 (unregistering): Released all slaves [ 221.840755][T15076] tunl0: Caught tx_queue_len zero misconfig [ 222.008281][T15089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.018667][T15089] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.123826][T15089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.134294][T15089] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.240704][T15089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.251281][T15089] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.296706][T15122] loop3: detected capacity change from 0 to 128 [ 222.357754][T15089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.368221][T15089] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.423531][T15131] loop9: detected capacity change from 0 to 128 [ 222.434358][T15131] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 222.484851][T12796] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.493190][T12796] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.525031][ T29] audit: type=1400 audit(735.989:13425): avc: denied { mount } for pid=15150 comm="syz.3.2716" name="/" dev="hugetlbfs" ino=41176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 222.561101][T15152] __nla_validate_parse: 6 callbacks suppressed [ 222.561189][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 222.588765][T12796] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.597090][T12796] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.669333][T15175] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2720'. [ 222.684252][T12796] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.692605][T12796] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.738579][T12796] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.746872][T12796] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.792463][T15186] bond0: entered promiscuous mode [ 222.797640][T15186] bond_slave_0: entered promiscuous mode [ 222.801729][ T29] audit: type=1400 audit(736.242:13426): avc: denied { unmount } for pid=13520 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 222.803492][T15186] bond_slave_1: entered promiscuous mode [ 222.803556][T15186] batadv0: entered promiscuous mode [ 222.828146][T15186] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 222.854313][T15191] loop9: detected capacity change from 0 to 1024 [ 222.862126][T15191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.884980][T15199] loop3: detected capacity change from 0 to 512 [ 222.892526][T15199] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 222.903437][T15186] bond0: left promiscuous mode [ 222.908330][T15186] bond_slave_0: left promiscuous mode [ 222.914007][T15186] bond_slave_1: left promiscuous mode [ 222.919503][T15186] batadv0: left promiscuous mode [ 222.926669][T15199] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: comm syz.3.2724: inode #1: comm syz.3.2724: iget: illegal inode # [ 222.957734][T15191] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.984165][T15199] EXT4-fs (loop3): no journal found [ 222.989479][T15199] EXT4-fs (loop3): can't get journal size [ 223.036613][T15199] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 223.058736][T15199] EXT4-fs (loop3): failed to initialize system zone (-22) [ 223.103590][T15199] EXT4-fs (loop3): mount failed [ 223.130587][ T29] audit: type=1326 audit(736.550:13427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15221 comm="syz.7.2726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334a48acb9 code=0x0 [ 223.208260][ T29] audit: type=1326 audit(736.569:13428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.231594][ T29] audit: type=1326 audit(736.569:13429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.255429][ T29] audit: type=1326 audit(736.578:13430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.278464][ T29] audit: type=1326 audit(736.578:13431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.301526][ T29] audit: type=1326 audit(736.588:13432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.324790][ T29] audit: type=1326 audit(736.588:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.347940][ T29] audit: type=1326 audit(736.588:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.370967][ T29] audit: type=1326 audit(736.588:13435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15216 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65917cacb9 code=0x7ffc0000 [ 223.491064][T15191] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.655901][T15278] loop3: detected capacity change from 0 to 764 [ 223.682649][T15290] loop4: detected capacity change from 0 to 512 [ 223.709201][T15290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 223.718109][T15290] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.764955][T15290] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2740: Allocating blocks 41-42 which overlap fs metadata [ 223.812192][T15290] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2740: Allocating blocks 41-42 which overlap fs metadata [ 223.834806][T15290] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2740: Failed to acquire dquot type 1 [ 223.846630][T15290] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 223.861795][T15290] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2740: corrupted inode contents [ 223.876951][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2743'. [ 223.885899][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2743'. [ 223.911965][T15290] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.2740: mark_inode_dirty error [ 223.938741][T15290] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2740: corrupted inode contents [ 223.951623][T15290] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2740: mark_inode_dirty error [ 223.966697][T15311] loop9: detected capacity change from 0 to 128 [ 223.973762][T15311] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 224.002835][T15290] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2740: corrupted inode contents [ 224.015489][T15290] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 224.027730][T15290] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2740: corrupted inode contents [ 224.040677][T15290] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.2740: mark_inode_dirty error [ 224.100133][T15290] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 224.113661][T15290] EXT4-fs (loop4): 1 truncate cleaned up [ 224.119833][T15290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.171474][T14211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.207480][T15362] loop9: detected capacity change from 0 to 1024 [ 224.214865][T15362] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 224.228921][T15362] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 224.251942][T15362] EXT4-fs error (device loop9): ext4_get_journal_inode:5849: inode #32: comm syz.9.2751: iget: special inode unallocated [ 224.271244][T15362] EXT4-fs (loop9): Remounting filesystem read-only [ 224.278094][T15362] EXT4-fs (loop9): no journal found [ 224.283484][T15362] EXT4-fs (loop9): can't get journal size [ 224.309806][T15373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2753'. [ 224.333384][T15379] bond0: entered promiscuous mode [ 224.338657][T15379] bond_slave_0: entered promiscuous mode [ 224.344403][T15379] bond_slave_1: entered promiscuous mode [ 224.351870][T15379] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.363376][T15362] EXT4-fs (loop9): filesystem is read-only [ 224.372577][T15379] bond0: left promiscuous mode [ 224.377466][T15379] bond_slave_0: left promiscuous mode [ 224.378508][T15362] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.383136][T15379] bond_slave_1: left promiscuous mode [ 224.444441][T15390] loop7: detected capacity change from 0 to 1024 [ 224.498302][T15390] EXT4-fs: Ignoring removed bh option [ 224.537646][T15407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15407 comm=syz.3.2757 [ 224.563813][T15397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.565936][ T7467] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.586321][T15390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.614460][T15390] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 3) [ 224.633734][T15390] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 224.646100][T15390] EXT4-fs (loop7): This should not happen!! Data will be lost [ 224.646100][T15390] [ 224.660230][T15423] netlink: 'syz.3.2759': attribute type 5 has an invalid length. [ 224.711730][T15424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 224.743086][T14211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.772572][T15385] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 224.788216][T15424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 224.803227][T15385] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 224.866402][T15424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 224.929973][T15385] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.030360][T15424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.051438][T15424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.108283][T15424] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: block 3: comm syz.7.2754: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.138165][T15419] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.159447][T15419] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.318963][ T3655] IPVS: starting estimator thread 0... [ 225.467212][T15484] IPVS: using max 2400 ests per chain, 120000 per kthread [ 225.749360][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'. [ 225.896095][T15538] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2775'. [ 226.002981][T15559] pimreg: entered allmulticast mode [ 226.032835][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2777'. [ 226.540608][T15615] netlink: 'syz.4.2785': attribute type 46 has an invalid length. [ 226.573372][T15615] syz_tun: entered allmulticast mode [ 226.582427][T15615] ext4: Unknown parameter 'nouser_xattr' [ 226.638138][T15623] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2786'. [ 226.736185][T15631] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.745376][T15631] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 226.753657][T15631] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 226.825401][T15639] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.833643][T15639] netlink: 'syz.4.2789': attribute type 13 has an invalid length. [ 227.227797][ T9] IPVS: starting estimator thread 0... [ 227.413473][T15657] IPVS: using max 2496 ests per chain, 124800 per kthread [ 227.474453][T15676] netlink: 25 bytes leftover after parsing attributes in process `syz.6.2797'. [ 227.667929][ T6940] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 227.680462][ T6940] EXT4-fs (loop7): This should not happen!! Data will be lost [ 227.680462][ T6940] [ 227.738598][T15691] set_capacity_and_notify: 6 callbacks suppressed [ 227.738615][T15691] loop4: detected capacity change from 0 to 512 [ 227.763883][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.777050][T15691] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 227.848946][T15704] team0: entered promiscuous mode [ 227.854099][T15704] team_slave_0: entered promiscuous mode [ 227.859880][T15704] geneve1: entered promiscuous mode [ 227.865822][T15704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.874589][T15704] team0: left promiscuous mode [ 227.879395][T15704] team_slave_0: left promiscuous mode [ 227.885073][T15704] geneve1: left promiscuous mode [ 227.916599][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2801'. [ 227.929102][T15701] loop7: detected capacity change from 0 to 512 [ 227.936194][T15701] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 227.948720][T15701] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.2801: corrupted xattr entries [ 227.960491][T15701] EXT4-fs (loop7): 1 orphan inode deleted [ 227.966699][T15701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.991593][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.134373][T15733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=15733 comm=syz.3.2807 [ 228.166406][T15745] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2809'. [ 228.190715][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 228.190734][ T29] audit: type=1400 audit(741.283:13458): avc: denied { map } for pid=15728 comm="syz.3.2807" path="socket:[42081]" dev="sockfs" ino=42081 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 228.233701][T15751] loop4: detected capacity change from 0 to 1024 [ 228.266798][T15761] loop3: detected capacity change from 0 to 512 [ 228.282699][T15751] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 228.295860][T15761] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 228.305095][T15761] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 228.313339][T15761] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 228.344128][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 228.391864][T15757] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2813'. [ 228.459705][T15790] loop4: detected capacity change from 0 to 2048 [ 228.472187][T15762] loop3: detected capacity change from 0 to 128 [ 228.521083][T15790] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 228.578316][T15802] tipc: Enabled bearer , priority 0 [ 228.583959][ T29] audit: type=1400 audit(741.658:13459): avc: denied { listen } for pid=15789 comm="syz.4.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.601446][T15802] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 228.659876][T15823] netlink: 'syz.7.2819': attribute type 13 has an invalid length. [ 228.700843][T15790] loop4: detected capacity change from 0 to 8192 [ 228.793327][T15790] loop4: p1 < > p2 p3 < > p4 < p5 > [ 228.798725][T15790] loop4: partition table partially beyond EOD, truncated [ 228.938271][T15790] loop4: p1 start 100663296 is beyond EOD, truncated [ 228.945153][T15790] loop4: p2 start 201130427 is beyond EOD, truncated [ 228.951898][T15790] loop4: p3 start 4294967295 is beyond EOD, truncated [ 229.021742][T15839] tipc: Resetting bearer [ 229.081330][T15790] loop4: p5 start 201130427 is beyond EOD, truncated [ 229.109065][T15801] tipc: Disabling bearer [ 229.166878][T11233] udevd[11233]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 229.179440][T15860] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2826'. [ 229.189195][ T29] audit: type=1400 audit(742.219:13460): avc: denied { write } for pid=15856 comm="syz.4.2825" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 229.246985][T15860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.260456][T15863] IPVS: dh: FWM 3 0x00000003 - no destination available [ 229.280359][T15860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.362363][T15860] bond0 (unregistering): Released all slaves [ 229.389580][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2827'. [ 229.404121][T15875] wireguard0: entered promiscuous mode [ 229.409703][T15875] wireguard0: entered allmulticast mode [ 229.741770][T15910] geneve2: entered promiscuous mode [ 229.747173][T15910] geneve2: entered allmulticast mode [ 229.793638][T15915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=15915 comm=syz.6.2832 [ 229.888102][ T29] audit: type=1400 audit(742.874:13461): avc: denied { name_bind } for pid=15918 comm="syz.6.2834" src=19494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 229.912103][T15919] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2834'. [ 229.923441][T15919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.935578][T15919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.975543][T15919] bond0 (unregistering): Released all slaves [ 229.988901][ T29] audit: type=1400 audit(742.967:13462): avc: denied { listen } for pid=15921 comm="syz.9.2835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.989819][T15926] netlink: 'syz.9.2835': attribute type 15 has an invalid length. [ 230.015895][T15926] netlink: 25 bytes leftover after parsing attributes in process `syz.9.2835'. [ 230.052257][T15929] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2836'. [ 230.092216][T15932] loop9: detected capacity change from 0 to 512 [ 230.207108][ T29] audit: type=1400 audit(743.164:13463): avc: denied { write } for pid=15943 comm="syz.9.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.635639][T15972] loop7: detected capacity change from 0 to 1024 [ 230.645597][T15975] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.693551][T15972] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.704044][T15972] EXT4-fs (loop7): can't mount with commit=, fs mounted w/o journal [ 230.845357][ T29] audit: type=1400 audit(743.753:13464): avc: denied { accept } for pid=15980 comm="syz.9.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 230.865353][ T29] audit: type=1400 audit(743.753:13465): avc: denied { getopt } for pid=15980 comm="syz.9.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.927745][T15992] tipc: Enabled bearer , priority 0 [ 230.960025][ T29] audit: type=1400 audit(743.875:13466): avc: denied { setcheckreqprot } for pid=15997 comm="syz.9.2852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 230.961793][T15992] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 230.992932][T15992] netlink: 'syz.7.2851': attribute type 13 has an invalid length. [ 231.136081][T16011] tipc: Resetting bearer [ 231.158778][T15991] tipc: Disabling bearer [ 231.199798][T16022] loop3: detected capacity change from 0 to 128 [ 231.260703][T16034] EXT4-fs: Ignoring removed oldalloc option [ 231.277921][T16034] EXT4-fs: Ignoring removed i_version option [ 231.284079][T16034] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.309460][T16034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.328017][T16041] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2860'. [ 231.352354][T16034] EXT4-fs (loop3): 1 truncate cleaned up [ 231.358617][T16037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1552 sclass=netlink_route_socket pid=16037 comm=syz.4.2859 [ 231.383017][ T29] audit: type=1326 audit(744.277:13467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16047 comm="syz.7.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f334a48acb9 code=0x7ffc0000 [ 231.401876][T16034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.463630][T16045] EXT4-fs: test_dummy_encryption option not supported [ 231.473999][T16048] FAT-fs (loop7): Directory bread(block 64) failed [ 231.489358][T16048] FAT-fs (loop7): Directory bread(block 65) failed [ 231.505905][T16048] FAT-fs (loop7): Directory bread(block 66) failed [ 231.508253][T16034] Invalid ELF header magic: != ELF [ 231.526225][T16048] FAT-fs (loop7): Directory bread(block 67) failed [ 231.533763][T16048] FAT-fs (loop7): Directory bread(block 68) failed [ 231.540668][T16048] FAT-fs (loop7): Directory bread(block 69) failed [ 231.548012][T16048] FAT-fs (loop7): Directory bread(block 70) failed [ 231.555533][T16062] lo: Caught tx_queue_len zero misconfig [ 231.556104][T16048] FAT-fs (loop7): Directory bread(block 71) failed [ 231.568775][T16048] FAT-fs (loop7): Directory bread(block 72) failed [ 231.570514][T13520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.576230][T16048] FAT-fs (loop7): Directory bread(block 73) failed [ 231.695973][T16089] EXT4-fs: Ignoring removed orlov option [ 231.702412][T16089] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 231.752513][T16098] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 231.795963][T16089] bio_check_eod: 64 callbacks suppressed [ 231.795982][T16089] syz.7.2867: attempt to access beyond end of device [ 231.795982][T16089] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 231.817780][T16089] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 231.825742][T16089] FAT-fs (loop7): Filesystem has been set read-only [ 231.893108][T16089] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 231.925236][T16089] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 232.307287][T16112] EXT4-fs: inline encryption not supported [ 232.315896][T16112] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 232.332954][T16112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.503998][ T8534] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.871045][T16152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.986294][T16152] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2874: bg 0: block 345: padding at end of block bitmap is not set [ 233.013198][T16152] EXT4-fs (loop7): Remounting filesystem read-only [ 233.056984][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.125598][T16179] netlink: 'syz.4.2880': attribute type 4 has an invalid length. [ 233.151139][T16189] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.168578][T16186] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 233.190929][T16189] set_capacity_and_notify: 7 callbacks suppressed [ 233.190950][T16189] loop3: detected capacity change from 0 to 1024 [ 233.217066][T16189] EXT4-fs: Ignoring removed oldalloc option [ 233.223207][T16189] EXT4-fs: Ignoring removed bh option [ 233.254708][T16189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.484524][T16211] loop7: detected capacity change from 0 to 128 [ 233.493779][T16211] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.548726][ T5443] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.635025][T16254] xt_hashlimit: max too large, truncated to 1048576 [ 233.658538][T13520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.661874][T16254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.687652][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 233.687670][ T29] audit: type=1400 audit(746.428:13528): avc: denied { bind } for pid=16253 comm="syz.4.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.741646][ T29] audit: type=1400 audit(746.447:13529): avc: denied { create } for pid=16253 comm="syz.4.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 233.801266][T16283] loop4: detected capacity change from 0 to 512 [ 233.871736][T16283] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.880742][T16283] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 233.958129][T16304] tipc: Enabled bearer , priority 0 [ 233.979577][T16326] __nla_validate_parse: 3 callbacks suppressed [ 233.979593][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2895'. [ 233.995566][T16304] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 234.004834][T16304] netlink: 'syz.7.2893': attribute type 13 has an invalid length. [ 234.131031][T16219] chnl_net:caif_netlink_parms(): no params data found [ 234.186714][T16337] tipc: Resetting bearer [ 234.198940][T16283] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2890: Allocating blocks 41-42 which overlap fs metadata [ 234.283486][T16354] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16354 comm=syz.6.2895 [ 234.302383][T16301] tipc: Disabling bearer [ 234.443095][T16283] Quota error (device loop4): write_blk: dquota write failed [ 234.450567][T16283] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 234.468661][T16380] bond0: entered promiscuous mode [ 234.473891][T16380] bond_slave_0: entered promiscuous mode [ 234.479715][T16380] bond_slave_1: entered promiscuous mode [ 234.485431][T16380] batadv0: entered promiscuous mode [ 234.533368][T16283] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 234.546744][T16380] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 234.555852][T16380] bond0: left promiscuous mode [ 234.560745][T16380] bond_slave_0: left promiscuous mode [ 234.566474][T16380] bond_slave_1: left promiscuous mode [ 234.572153][T16380] batadv0: left promiscuous mode [ 234.639735][T16283] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2890: Failed to acquire dquot type 1 [ 234.667907][T16219] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.675146][T16219] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.693363][T16283] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 234.708522][T16219] bridge_slave_0: entered allmulticast mode [ 234.726652][T16219] bridge_slave_0: entered promiscuous mode [ 234.733099][T16283] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2890: corrupted inode contents [ 234.746153][ T29] audit: type=1326 audit(747.420:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16403 comm="syz.6.2898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x0 [ 234.774551][T16219] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.781696][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.792998][T16219] bridge_slave_1: entered allmulticast mode [ 234.799797][T16219] bridge_slave_1: entered promiscuous mode [ 234.811174][T16283] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.2890: mark_inode_dirty error [ 234.848274][T16219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.859791][T16283] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2890: corrupted inode contents [ 234.878686][T16219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.914936][T16283] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2890: mark_inode_dirty error [ 234.937985][T16283] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2890: corrupted inode contents [ 234.983015][T16219] team0: Port device team_slave_0 added [ 234.990109][T16219] team0: Port device team_slave_1 added [ 234.998051][T16283] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 235.021201][T16219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.028281][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.054407][T16219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.067959][T16219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.074950][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.100994][T16219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.135744][T16219] hsr_slave_0: entered promiscuous mode [ 235.142378][T16219] hsr_slave_1: entered promiscuous mode [ 235.148622][T16219] debugfs: 'hsr0' already exists in 'hsr' [ 235.154443][T16219] Cannot create hsr debugfs directory [ 235.439387][T16283] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2890: corrupted inode contents [ 235.562927][T16283] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.2890: mark_inode_dirty error [ 235.664183][T16283] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 235.718430][T16613] loop7: detected capacity change from 0 to 512 [ 235.753810][T16613] EXT4-fs: Ignoring removed i_version option [ 235.760141][T16613] EXT4-fs: Ignoring removed nobh option [ 235.785609][T16283] EXT4-fs (loop4): 1 truncate cleaned up [ 235.818265][T16283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.863085][T16613] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 235.968474][T16613] EXT4-fs (loop7): 1 truncate cleaned up [ 235.974748][T16613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.141867][T14211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.168557][ T29] audit: type=1400 audit(748.720:13531): avc: denied { watch watch_reads } for pid=16603 comm="syz.7.2906" path="/535/file0" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.906451][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.916513][T16703] loop4: detected capacity change from 0 to 128 [ 236.984479][T16219] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 237.000935][T16723] program syz.7.2913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.034166][ T29] audit: type=1400 audit(749.552:13532): avc: denied { ioctl } for pid=16713 comm="syz.3.2914" path="socket:[43744]" dev="sockfs" ino=43744 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.059896][T16718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2914'. [ 237.070961][T16219] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 237.080332][T16718] loop3: detected capacity change from 0 to 128 [ 237.127220][T16718] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.139826][T16219] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 237.172010][T16219] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 237.199049][T16718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2914'. [ 237.316519][T16219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.356807][T13520] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.372008][T16219] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.403128][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.410264][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.874605][ T6941] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.881760][ T6941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.905213][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 237.920789][T16735] all: renamed from bridge_slave_0 (while UP) [ 237.940121][ T29] audit: type=1400 audit(750.404:13533): avc: denied { firmware_load } for pid=16781 comm="syz.3.2919" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 238.038276][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 238.042309][ T29] audit: type=1400 audit(750.478:13534): avc: denied { connect } for pid=16795 comm="syz.6.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.047469][T16803] netlink: 'syz.4.2922': attribute type 12 has an invalid length. [ 238.155266][T16219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.195208][T12795] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.204672][T12795] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.213583][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 238.222649][T16803] netlink: 'syz.4.2922': attribute type 12 has an invalid length. [ 238.250780][T12778] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.260524][T12778] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.387554][T16855] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2930'. [ 238.425569][T16858] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2931'. [ 238.527755][T16219] veth0_vlan: entered promiscuous mode [ 238.540325][T16219] veth1_vlan: entered promiscuous mode [ 238.567681][T16219] veth0_macvtap: entered promiscuous mode [ 238.582598][T16219] veth1_macvtap: entered promiscuous mode [ 238.614010][T16219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.630489][T16219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.644388][T12795] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.682219][T12795] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.717520][T12795] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.760636][T12795] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.903970][T16930] 8021q: VLANs not supported on ip6_vti0 [ 239.060844][T16938] loop8: detected capacity change from 0 to 512 [ 239.095227][T16938] EXT4-fs: Ignoring removed nobh option [ 239.201228][T16938] EXT4-fs (loop8): 1 orphan inode deleted [ 239.236295][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2942'. [ 239.259572][T16938] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.305581][T16954] netlink: 'syz.3.2943': attribute type 10 has an invalid length. [ 239.324385][T16938] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.528275][T17000] loop7: detected capacity change from 0 to 512 [ 239.571888][T17008] loop3: detected capacity change from 0 to 512 [ 239.669647][T17000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.683163][T17008] EXT4-fs: Ignoring removed bh option [ 239.689749][T17008] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 239.699975][T17008] EXT4-fs (loop3): 1 truncate cleaned up [ 239.706100][T17008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.724511][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 239.724529][ T29] audit: type=1326 audit(1008.071:13539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 239.757053][ T29] audit: type=1326 audit(1008.109:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 239.791051][T17024] loop4: detected capacity change from 0 to 1024 [ 239.818239][ T29] audit: type=1400 audit(1008.146:13541): avc: denied { append } for pid=16999 comm="syz.7.2950" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.820981][T17024] EXT4-fs: Ignoring removed bh option [ 239.842472][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.869533][T17033] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2954'. [ 239.870831][ T29] audit: type=1326 audit(1008.211:13542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 239.903225][ T29] audit: type=1326 audit(1008.221:13543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 239.928734][ T29] audit: type=1326 audit(1008.268:13544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 239.951907][ T29] audit: type=1400 audit(1008.268:13545): avc: denied { write } for pid=17025 comm="syz.6.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.973968][T17042] loop7: detected capacity change from 0 to 128 [ 239.982836][ T29] audit: type=1326 audit(1008.324:13546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 239.985704][T17026] netlink: 'syz.6.2953': attribute type 2 has an invalid length. [ 240.006085][ T29] audit: type=1326 audit(1008.324:13547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 240.036807][ T29] audit: type=1326 audit(1008.324:13548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.6.2953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a310facb9 code=0x7ffc0000 [ 240.071202][T17024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.089761][T17024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.100505][T17042] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.112749][T17050] loop8: detected capacity change from 0 to 512 [ 240.120477][T17042] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:375: inode #2: comm syz.7.2955: No space for directory leaf checksum. Please run e2fsck -D. [ 240.135877][T17042] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.2955: checksumming directory block 0 [ 240.149468][T17050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.194647][T17050] EXT4-fs error (device loop8): __ext4_iget:5426: inode #11: block 1: comm syz.8.2956: invalid block [ 240.215526][T17061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2959'. [ 240.222330][ T5443] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.233637][T17050] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2956: couldn't read orphan inode 11 (err -117) [ 240.261033][T17061] bond1: option ad_actor_sys_prio: invalid value (0) [ 240.267834][T17061] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 240.276713][T17050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.290407][T17061] bond1 (unregistering): Released all slaves [ 240.314287][T17050] EXT4-fs error (device loop8): htree_dirblock_to_tree:1051: inode #2: comm syz.8.2956: Directory hole found for htree leaf block 0 [ 240.347652][T16219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.416709][T17148] loop7: detected capacity change from 0 to 1024 [ 240.542992][T13520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.545768][T17148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.878583][ T5443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.165354][T17233] loop7: detected capacity change from 0 to 1024 [ 241.191146][T17233] EXT4-fs: Ignoring removed bh option [ 241.210673][T17233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.233488][T17233] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.429562][T17271] bond0: entered promiscuous mode [ 241.434666][T17271] bond_slave_0: entered promiscuous mode [ 241.440593][T17271] bond_slave_1: entered promiscuous mode [ 241.461440][T17271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 241.470273][T17278] loop4: detected capacity change from 0 to 512 [ 241.471082][T17271] bond0: left promiscuous mode [ 241.481369][T17271] bond_slave_0: left promiscuous mode [ 241.485659][T17278] EXT4-fs: Ignoring removed bh option [ 241.487254][T17271] bond_slave_1: left promiscuous mode [ 241.494932][T17278] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 241.507752][T17278] EXT4-fs (loop4): 1 truncate cleaned up [ 241.520482][T17281] loop7: detected capacity change from 0 to 512 [ 241.523027][T17278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.549329][T17281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 241.568500][T17281] EXT4-fs: Mount option(s) incompatible with ext3 [ 241.660706][T17311] macvtap1: entered promiscuous mode [ 241.666225][T17311] macvtap1: entered allmulticast mode [ 241.683913][T17311] dummy0: entered allmulticast mode [ 241.697813][T17311] dummy0: entered promiscuous mode [ 241.703690][T17311] team0: Device macvtap1 failed to register rx_handler [ 241.716972][T17311] dummy0: left allmulticast mode [ 241.731930][T17311] dummy0: left promiscuous mode [ 242.230810][T17368] syz.3.2987 (17368): /proc/17363/oom_adj is deprecated, please use /proc/17363/oom_score_adj instead. [ 242.446809][T14211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.481276][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.499568][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.513318][T17391] ip6gre0: entered promiscuous mode [ 242.515521][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.529461][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.536672][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.565960][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.566120][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.566269][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.581587][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.581807][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.581909][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.582045][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.582193][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.582345][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.582454][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.582569][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.583095][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.583224][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.583377][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.583527][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.583695][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.583969][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.584170][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.584381][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.591388][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.591495][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.591642][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.591743][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.591928][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.592025][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.592143][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.592467][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.592645][T17381] xt_cgroup: xt_cgroup: no path or classid specified [ 242.647989][T17401] EXT4-fs: Ignoring removed oldalloc option [ 242.751490][T17424] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2995'. [ 242.769720][T17427] EXT4-fs: Ignoring removed bh option [ 242.777308][T17427] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 242.782012][T17427] EXT4-fs (loop8): 1 truncate cleaned up [ 242.816297][T17401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.833687][T17427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.927657][T17443] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz.4.2994: directory missing '..' [ 242.974395][T17415] syzkaller0: entered promiscuous mode [ 242.985385][T17415] syzkaller0: entered allmulticast mode [ 242.991374][T17401] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz.4.2994: directory missing '..' [ 243.023810][T14211] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.068234][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2997'. [ 243.159193][T16219] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.170298][T17472] netlink: 'syz.7.3003': attribute type 2 has an invalid length. [ 243.455298][T17494] msdos: Bad value for 'tz' [ 243.467757][T13985] ================================================================== [ 243.475905][T13985] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 243.484639][T13985] [ 243.486998][T13985] read-write to 0xffff8881005f1e78 of 8 bytes by task 11233 on cpu 0: [ 243.495181][T13985] delete_from_page_cache_batch+0x553/0x740 [ 243.501125][T13985] truncate_inode_pages_range+0x1fe/0x7e0 [ 243.506895][T13985] truncate_inode_pages+0x24/0x30 [ 243.511991][T13985] blkdev_flush_mapping+0xa4/0x1a0 [ 243.517150][T13985] bdev_release+0x2bf/0x3d0 [ 243.521693][T13985] blkdev_release+0x15/0x20 [ 243.526247][T13985] __fput+0x29b/0x650 [ 243.530265][T13985] fput_close_sync+0xad/0x190 [ 243.534992][T13985] __x64_sys_close+0x55/0xf0 [ 243.539630][T13985] x64_sys_call+0x2c25/0x3000 [ 243.544345][T13985] do_syscall_64+0xc0/0x2a0 [ 243.548880][T13985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.554800][T13985] [ 243.557160][T13985] read to 0xffff8881005f1e78 of 8 bytes by task 13985 on cpu 1: [ 243.565067][T13985] nr_blockdev_pages+0x7e/0xd0 [ 243.569862][T13985] si_meminfo+0x87/0xd0 [ 243.574042][T13985] update_defense_level+0x47/0x5d0 [ 243.579185][T13985] defense_work_handler+0x1f/0x80 [ 243.584333][T13985] process_scheduled_works+0x4cd/0x9d0 [ 243.589823][T13985] worker_thread+0x581/0x770 [ 243.594484][T13985] kthread+0x488/0x510 [ 243.598588][T13985] ret_from_fork+0x148/0x280 [ 243.603206][T13985] ret_from_fork_asm+0x1a/0x30 [ 243.608006][T13985] [ 243.610361][T13985] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 243.617507][T13985] [ 243.619875][T13985] Reported by Kernel Concurrency Sanitizer on: [ 243.626053][T13985] CPU: 1 UID: 0 PID: 13985 Comm: kworker/1:15 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.637630][T13985] Tainted: [W]=WARN [ 243.641459][T13985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.651550][T13985] Workqueue: events_long defense_work_handler [ 243.657675][T13985] ==================================================================