last executing test programs: 3m22.046702881s ago: executing program 32 (id=428): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m15.082407661s ago: executing program 33 (id=510): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b7, &(0x7f0000000a40)="$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") bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d0000000000000700000010000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) open_tree(r0, &(0x7f0000000040)='./file7\x00', 0x8100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open$dir(&(0x7f0000000400)='./file1\x00', 0x181101, 0x44) renameat(r2, &(0x7f00000004c0)='./file7\x00', r0, &(0x7f0000000500)='./file7\x00') sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file7\x00', 0x60) 3m11.85385634s ago: executing program 34 (id=557): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000440)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev2(r2, &(0x7f0000001480)=[{&(0x7f0000000e00)="19", 0x1}], 0x1, 0x80000000, 0x8, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="08cc0700f1440405d415522bb7f5d6330eef7b2ab866754f0172a1db9f127765604fc604ffe604f7595403b4c3b6147dbe0bf7e54be3f685f6f32abccdb6371be155a48b0a0f6b40de1941cd89bc9152805928542a64c11bb010a1fa79", @ANYRES16=r3, @ANYBLOB="000429bd7000fddbdf250800000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000044000000"], 0x28}, 0x1, 0x0, 0x0, 0x40890}, 0x801) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000e40)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000380), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x8000}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff, 0x2, 0x8, {@mac=@random="ec0b7e96b0ec", {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x8, 0x1, 0x7ff, 0xd, 0x3, 0x7, 'netpci0\x00', 'vxcan1\x00', {}, {0xff}, 0x0, 0x110}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', {0xf8}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f00000001c0)='oom_score\x00') kcmp(r4, 0x0, 0x0, r1, r2) 2m29.544274437s ago: executing program 6 (id=1387): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) 2m29.523621987s ago: executing program 6 (id=1388): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m29.430701999s ago: executing program 6 (id=1389): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 2m29.367480271s ago: executing program 6 (id=1390): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) symlink(&(0x7f0000000e00)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000f00)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(r0, &(0x7f0000000040)='du', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)=@newtaction={0x108, 0x30, 0x53b, 0x8000, 0x0, {}, [{0xf4, 0x1, [@m_skbmod={0xf0, 0x19, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8, 0x5, 0x200, 0xfffffffe}, 0x3}}]}, {0x56, 0x6, "210eb6ce88e35521361c82fe6cdd548238e71621920b128c1f22daf845f5c812c7297b33e672015ab6682e39381c714b37c70bfe80b08f9d54dfc2122e91819df90d6c79fdd2e0c1208a98c4a8a6b195558c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x108}}, 0x8000010) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) write(r2, &(0x7f00000020c0)="45041a82eaec4743f56c0568fbc48e64307e18f0f65eb3b67e620374164f57cf681c7e5dc5e9915bda9a640eaaa49fd4a659b7ea896cc21a0251387897", 0x3d) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r2, 0x0) ioctl(r2, 0x1, &(0x7f0000000000)="b0850f2a84f887f9d21cc2e2b5adfe233113ac102eecbd41906946e8203e52569e3d084c3173e7ec78f97fa7e90d3f2b40b2df9cdd8aad6cf4b62d06b70cb4cc797892f748025339eb220696548ca59b32986c930815ebec8d50ffff548e98dc2664a7ec58bc1e9e6492890fda1b7cf68e8c2df053cd52d0d53ea8ae3def55207d05a0d17093a6aa430a1d2fc3d64845d48396a7b42d1ac6de0c91079398e3caf12be2c53a86b816baaf0ab0e0b4bab3b5") ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'pim6reg\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) (async) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) (async) openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) (async) symlink(&(0x7f0000000e00)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000f00)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') (async) write(r0, &(0x7f0000000040)='du', 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)=@newtaction={0x108, 0x30, 0x53b, 0x8000, 0x0, {}, [{0xf4, 0x1, [@m_skbmod={0xf0, 0x19, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8, 0x5, 0x200, 0xfffffffe}, 0x3}}]}, {0x56, 0x6, "210eb6ce88e35521361c82fe6cdd548238e71621920b128c1f22daf845f5c812c7297b33e672015ab6682e39381c714b37c70bfe80b08f9d54dfc2122e91819df90d6c79fdd2e0c1208a98c4a8a6b195558c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x108}}, 0x8000010) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@nobarrier}, {@inode_readahead_blks}, {@usrjquota}, {@block_validity}, {@noblock_validity}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.current\x00', 0x275a, 0x0) (async) write(r2, &(0x7f00000020c0)="45041a82eaec4743f56c0568fbc48e64307e18f0f65eb3b67e620374164f57cf681c7e5dc5e9915bda9a640eaaa49fd4a659b7ea896cc21a0251387897", 0x3d) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r2, 0x0) (async) ioctl(r2, 0x1, &(0x7f0000000000)="b0850f2a84f887f9d21cc2e2b5adfe233113ac102eecbd41906946e8203e52569e3d084c3173e7ec78f97fa7e90d3f2b40b2df9cdd8aad6cf4b62d06b70cb4cc797892f748025339eb220696548ca59b32986c930815ebec8d50ffff548e98dc2664a7ec58bc1e9e6492890fda1b7cf68e8c2df053cd52d0d53ea8ae3def55207d05a0d17093a6aa430a1d2fc3d64845d48396a7b42d1ac6de0c91079398e3caf12be2c53a86b816baaf0ab0e0b4bab3b5") (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'pim6reg\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) (async) 2m28.738889167s ago: executing program 6 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) socket$kcm(0x10, 0x2, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0xc, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@init_itable}, {@nobh}, {@auto_da_alloc}], [{@hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@flag='rw'}, {@dont_measure}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x3, 0x46c, &(0x7f0000000dc0)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c11}, 0x48000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xa, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2m28.422570274s ago: executing program 6 (id=1403): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@init_itable}, {@grpid}, {@quota}]}, 0x2, 0x554, &(0x7f0000000cc0)="$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") 2m28.396805135s ago: executing program 35 (id=1403): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000140)={[{@init_itable}, {@grpid}, {@quota}]}, 0x2, 0x554, &(0x7f0000000cc0)="$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") 46.088260551s ago: executing program 4 (id=2966): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_clone3(0x0, 0x0) 45.972720234s ago: executing program 4 (id=2967): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000000000"], 0x122}}, 0x400c000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) perf_event_open(&(0x7f0000000480)={0x0, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r2, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x61, 0x800000000004}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x0, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8940, &(0x7f0000000080)) sync_file_range(r1, 0x102b69cc, 0xbb, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x1, @perf_config_ext={0x5}, 0x0, 0x934, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x64, 0x0, 0x6c, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 45.826577697s ago: executing program 4 (id=2969): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713d2", 0x33}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1e409dcf247c0e5", 0x61}, {&(0x7f0000000680)="396b0b2d92a081c10b34f3708c065b93255ae169ced3036d77380fdfb4a44fcdf0", 0x21}, {&(0x7f0000000740)="8fd7e1a2dae37ddf36b42888adb33b24", 0x10}], 0x4}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a", 0x2}], 0x1}}], 0x2, 0x40080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008048, 0x0, 0x11) 45.782559478s ago: executing program 4 (id=2970): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) mlockall(0x1) mlockall(0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}, 0x20) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000240)={{0x8, 0x9}, {0x3, 0x6}, 0x2, 0x7, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x2, 0xbaf, &(0x7f0000002f00)="$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") fallocate(r5, 0x20, 0x4000, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 43.833493576s ago: executing program 4 (id=2990): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) read(r1, &(0x7f0000000c00)=""/4096, 0x1000) gettid() getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syslog(0x3, 0xfffffffffffffffe, 0x13) sendmsg$nl_route_sched(r1, 0x0, 0x80) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='/%\x00', 0x880a80, &(0x7f0000000100)={@align=0x7, {0xf90b, 0x8, 0x5, 0x7}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xf}) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x12bb41) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') pread64(r5, &(0x7f0000001280)=""/200, 0xc8, 0x17a7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x7800, 0x10, 0x8, 0x7, {{0x28, 0x4, 0x2, 0x1f, 0xa0, 0x67, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@ssrr={0x89, 0x13, 0x6e, [@rand_addr=0x64010101, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x5}]}, @cipso={0x86, 0x50, 0x0, [{0x5, 0xd, 'sGfV\fpir]@*'}, {0x7, 0xf, "fc142e55858a7ae523d079de5f"}, {0x7, 0xe, "86346a27df975771d76fe5ef"}, {0x1, 0x2}, {0x1, 0xb, "5389d44deb0fb91505"}, {0x6, 0x6, "afec7c42"}, {0x7, 0xd, "dd52acab021bd0950f1cf2"}]}, @timestamp_prespec={0x44, 0x4, 0x21}, @lsrr={0x83, 0xb, 0x44, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setsockopt$inet6_mreq(r6, 0x29, 0x0, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r7}, 0x14) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x15, "fee8a2ab78fc179f51f8a0e9a1af1e0b91c2f0fd967ab7f890020000000003002b78cc33a55f4c0c0000000000000000000000000000001b00", "28095397ba01177d02458dac00", "908f000e00000000000000000000001a00020000001900", [0x4, 0x80000001]}}) write$tun(r6, &(0x7f0000000700)=ANY=[], 0x5c8) ioctl$LOOP_CHANGE_FD(r3, 0x4c07, 0xffffffffffffffff) socket$inet6(0xa, 0x4, 0x8) sendmsg$nl_route_sched(r2, 0x0, 0x40) syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002ebe55440b8071a406d190102030109022d0001ae052009090475b8032d2c260309050fa55d59430e020800100a0709050b001000400108"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r8 = socket$key(0xf, 0x3, 0x2) getpeername(r8, &(0x7f0000000040)=@ieee802154, &(0x7f00000000c0)=0x80) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 43.041510815s ago: executing program 4 (id=3001): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") unshare(0x100000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(0xffffffffffffffff, &(0x7f00000021c0)=""/59, 0x3b) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x60100, 0x32) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4074, 0xffaf}], 0x1b, 0x3, 0x2, 0x1f) 26.91967969s ago: executing program 36 (id=3001): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") unshare(0x100000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(0xffffffffffffffff, &(0x7f00000021c0)=""/59, 0x3b) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x60100, 0x32) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4074, 0xffaf}], 0x1b, 0x3, 0x2, 0x1f) 26.672129676s ago: executing program 8 (id=3163): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0xa, 0x1, 0x100, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) 26.371148544s ago: executing program 8 (id=3165): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x2, 0x7fff0000}]}) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006be000/0x4000)=nil, &(0x7f00006be000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000721000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0xfc6b}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xa, &(0x7f0000000040)={0x0, 0xdaa9, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000080)={0x24, r3, 0x101, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000000c0), 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 25.933630275s ago: executing program 8 (id=3168): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) set_mempolicy(0x4000, &(0x7f00000001c0)=0x7ff, 0x6) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000005480)={0x0, 0x1dc, 0x3cdb, {0x0, 0x10000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x200, 0x6, 0x1, 0x20}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400022208000200050001002c000000eab556a705251e61c9c100000000000ffed000032e301bb4d89b4af300ffffc6c9533e7d873c5397", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c880) 25.818139587s ago: executing program 8 (id=3169): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ff0f", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x100, 0x0, 0x3}}}}}}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x4000000) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000380)=""/214, &(0x7f0000000540)=0xd6) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r4, 0xb, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80400d4}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r5, 0x40104d00, &(0x7f0000000900)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x34, r7, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x24000084) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 25.482445276s ago: executing program 8 (id=3173): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) mlockall(0x1) mlockall(0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000240)={{0x8, 0x9}, {0x3, 0x6}, 0x2, 0x7, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x2, 0xbaf, &(0x7f0000002f00)="$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") fallocate(r5, 0x20, 0x4000, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 25.249912421s ago: executing program 8 (id=3177): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xc54, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/8, 0x8}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x1}], 0x10, 0x4000000}, 0x4000000) 25.209356472s ago: executing program 37 (id=3177): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xc54, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/8, 0x8}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x1}], 0x10, 0x4000000}, 0x4000000) 18.046667187s ago: executing program 2 (id=3218): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x21, 0x2, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xc, 0x8, 0x0, 0x8000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x0, 0x806}, @void, @llc={@llc={0xdc, 0x4, "1e", "51c5ffda9f1a4cadb1b5fd2e062f840307c536e947a4fba39c17d937e305134fdcef67af727287fad51b36d4aae65c0e74c7a800ec5e334e3520dcb083846aa5ddffb7d401cbf47fa7cb44bedf2c0e522b808faa43167981586493e92300542ba50a439923705c18ed6da801b778e4c2826066e77b5ab63f1fc53eff2067027a0fbcaf6f6a8777e31a4f64a4c882ee8eace711a00d4eedba87b4b60c539399716a6bb7659074d8913fadcc9dc46f6ac9da"}}}, 0xb8) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100fe2010ff"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@restrict={0xf, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x61, 0x30]}}, 0x0, 0x2a}, 0xfe12) openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1e001, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000140)=0x200, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509000000000000639af0ff00000000b509000000000000db9af0ff41000000bf8200000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_pidfd_open(r1, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x200088c0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 17.603686769s ago: executing program 2 (id=3221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x6}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 17.473228992s ago: executing program 2 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="04002dbd7000fddbdfcf020000200800110005e7ecd52218879144cfe7ba000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42c284e6bec7473b}, 0x14044040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) recvfrom(r0, &(0x7f00000003c0)=""/184, 0xb8, 0x100, &(0x7f0000000480)=@rc={0x1f, @any, 0x1a}, 0x80) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000300)=ANY=[@ANYBLOB]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x1, 0xf8, 0x9, 0x0, 0x0, 0xae3, 0x268, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb243, 0x1, @perf_config_ext={0xc9fd}, 0x4000, 0x1, 0x86e1, 0x2, 0x3ba0, 0xffffffff, 0x8, 0x0, 0xffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0xfff, 0x7fff}, 0x0, 0xff6fbffffffffffc, r5, 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b08"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x30) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@gettfilter={0x6c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x8, 0xfff1}, {0x0, 0xc}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x57}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0xc3b}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xa222}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x7, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000001340)={0x0, 0xfffffffffffffff8, @start={0x0, 0x0, "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", "04c75f4abeaf5f97886b3c318d8875d0daf7bd49bbf98539275d0837890d05b5b68552a938386be51610295d74115cdd8db098cabf7ea63fed1df59c37e80078f6bb3634ebaa425765f733af15846f285b77b7051432e7b874a5bb84199ead28eff8ececf4d1bb9a6d5fab9326452a45d197bb0b470ddc05ef4eeeff4785d79e6d428c919c655470ec5bcae7d12ef3bf099dc75e8f4d597d98bd3ca1438fad4523542843fc34b076b898080cb6223ca746bcd8d5710b9c590b6aa0a819129f98b24a91a452b5eeebeeb85c813dcc3c8218d3cc73776e3a8b49ea1d2d866e11e4a7e7f042e586f8e1eb2c2e74a3c58ecd068db0478b22555599a61f9e7bbbe173099a9581378433643d35c07cc2910ff5227347097963f5e0212be67b298e6a6a3fe5cb9fbfb3da5705991ddc82d508ede9267e328988fad3f48fb5f95e520569a862b1ec7e2cbae944de92189e4e7108e897647d4feefa751e4ea8e82fa098736f1436eea080e58844cf255dbc1ae41dd26aaedd16d31b87c8182131964db4365ffc343a0e43b08e53759aa7242742198b41a706200543e93e47e739bd07856267c97bfe6050971b1daafeaa25e2395d1a8fdb4f65c6657d21cd287dd3f5f5a07ddbac6880d4b9e5bf549a0fa43dbdc415a4608e2abb610dca5da69b8a3ec498421c0ceeab5a889a2216749739bba11353acb5d1c2ddec3f2132161554cd8dea04bf46953da0d7c0d61b6bd41fc2767830952ec782b6d8df951b08e630acc8df6c4f7bbc780f44152d67d9a822e75d8e640ba108bf3d405b0a6e63f765cfb03c555e2d03c3aee1e30d6f3dc6fb20b7faf5732b54d82b031af6649353e3cb2875d047e2222cae8682e15a7f3670a470726b2d5ef2e725ba0ce64d06af6bc2cf9ba32414e71582b83197f1769643f32b42e7f7c6f3b8b4839dac4912d28f259f39d5c17593b0625ca8e172f6fcbd2c2fe0da1ecf903147080bc0d92f1749d20a2855067ccf212060d3dccc614ec3fe3ac73839e7f4765cd9a934ae54e1947cdc2b07a136fcf37e2c4d68944577c97efecd350a7b9b3b04d721575eb8b826e601c4677cf0b2067253a5d72a3ecd389174d4a7dc94b8a0d9f9e32a76c384e6bf5a29c2c23a807d70a1c798f19d45b26c2fe0b239c2f32ab29b8e004b94601633cc0576544d868fb71e2b8738e206bdf39db7c906a6b82519037b892c0eb981dd94c0958af463d80b90414fb7e156e4f2c04ae917515b86228fa7adc8d5a9c5db0faf5736cd1da6c27cbfa50329898574afb8c122579e6f0f55acc04debd5e9485cd3a599e34520739ec77b3f61b020012e88d0393fc581aad87af78a5a259c55a09ff5110d6f1016d04ddae636eb322ef0dc9304e393a33ca728ecfefef79c773599c36c73f53826eb2d1ecf557908d796676cafa8570136676a9450cd027e4ee16597"}, [0x8, 0x2, 0x8000000000000001, 0xfff, 0x401, 0x9, 0x6, 0x3, 0x30, 0x80000001, 0x81, 0x1, 0x7, 0x7, 0x3, 0x1, 0x3, 0x2, 0x1b5, 0x5, 0x6, 0xff, 0x57, 0x101, 0x0, 0x1000, 0x1, 0x3, 0x4, 0x2, 0x5, 0xfff, 0x9, 0x0, 0x7, 0x401, 0x8, 0x8, 0x3, 0x7fffffff, 0x8, 0x80000001, 0x2, 0x7, 0x4, 0x800, 0xfffffffffffffffc, 0x100000000, 0x3, 0xfb, 0x1d, 0x10001, 0x5, 0x1, 0xc, 0x4, 0xfffffffffffffff7, 0x7, 0x6, 0x9, 0x3, 0xd, 0x400, 0xbd]}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x8001}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) 17.234327778s ago: executing program 2 (id=3226): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x80086603) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 17.032866443s ago: executing program 2 (id=3231): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3fffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff80000000, 0x1000}, 0x100009, 0x0, 0x983, 0x7, 0xbe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x20000010) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x2, 0xe, 0x10, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0xffffffffffffffff, r4, r4], &(0x7f0000000540)=[{0x3, 0x2, 0x0, 0xc}, {0x2, 0x5, 0xc, 0xa}, {0x1, 0x3, 0x1, 0x8}, {0x4, 0x2, 0x5, 0x5}, {0x5, 0x4, 0xf, 0xb}, {0x3, 0x1, 0x9, 0xc}, {0x3, 0x3, 0x3, 0x7}, {0x1, 0x4, 0xa, 0x1}]}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f00000000c0)=r5, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x9081}], 0x1, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x6}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 16.228678122s ago: executing program 2 (id=3238): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000000c0)=0x80000003, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000004}) 16.206888563s ago: executing program 38 (id=3238): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000000c0)=0x80000003, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe0000004}) 13.277384835s ago: executing program 3 (id=3258): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x2000, 0x1) getdents(r2, 0x0, 0x58) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0xe, 0x0, 0x80000003, 0x608, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x8002, 0x9, 0x7, 0x1, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2004}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setresuid(0x0, 0xee00, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = dup2(r0, r0) writev(r6, &(0x7f0000000900)=[{&(0x7f0000000480)="f6a7e0dd2a", 0x5}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=r6], 0x6c}}, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xd018}, 0x4000, 0x0, 0x0, 0x9, 0x2000000, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x8025) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 13.138340018s ago: executing program 3 (id=3259): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 12.964736862s ago: executing program 3 (id=3260): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x5064, 0x8, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_format(r3, &(0x7f0000000080)='-1\x00', 0x3) openat$vcs(0xffffffffffffff9c, 0x0, 0x200602, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000540)={'#! ', './file0', [{0x20, '/dev/ppp\x00'}]}, 0x15) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x5, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) 12.672590469s ago: executing program 3 (id=3262): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ff0f", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x100, 0x0, 0x3}}}}}}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r3, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x4000000) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000380)=""/214, &(0x7f0000000540)=0xd6) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r4, 0xb, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80400d4}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r5, 0x40104d00, &(0x7f0000000900)) 12.412710966s ago: executing program 3 (id=3263): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000003480)=[{&(0x7f0000003500)="994a7bb7b5", 0x5}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x102, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0xcf5) ppoll(&(0x7f0000000080)=[{r1, 0x2000}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) fchdir(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x6, 0xfffffffd, 0x1}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a40)={r7, @in6={{0xa, 0x4e20, 0x1, @empty, 0x6}}, 0x3, 0x3, 0x7fff, 0x881, 0x0, 0x85e, 0xf}, &(0x7f0000000b00)=0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004084) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) 11.870355289s ago: executing program 3 (id=3273): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000900)) 11.849923989s ago: executing program 39 (id=3273): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d00, &(0x7f0000000900)) 6.452098382s ago: executing program 7 (id=3318): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000", @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f00000018c0)=""/4115, 0x1013) 1.666440929s ago: executing program 9 (id=3385): lsetxattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="757365722e23009dbf575e776140349652b28ab8514b1ba9da6b180c77df417dc395ea750c6b74baf731db06789b526587d2a4f8594d3d4041069e5a8a7365076d1b898b9b64a8ba83dd8a91b45981b9411af6a00a"], 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000055003d0926bd70000200000007000000", @ANYRES32, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00010200000000000000000000000000000000008edd000020000100"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1.518371852s ago: executing program 9 (id=3386): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1.474243444s ago: executing program 9 (id=3387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close(r0) 1.453537124s ago: executing program 7 (id=3338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="04002dbd7000fddbdfcf020000200800110005e7ecd52218879144cfe7ba000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42c284e6bec7473b}, 0x14044040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) recvfrom(r0, &(0x7f00000003c0)=""/184, 0xb8, 0x100, &(0x7f0000000480)=@rc={0x1f, @any, 0x1a}, 0x80) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000300)=ANY=[@ANYBLOB]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x1, 0xf8, 0x9, 0x0, 0x0, 0xae3, 0x268, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb243, 0x1, @perf_config_ext={0xc9fd}, 0x4000, 0x1, 0x86e1, 0x2, 0x3ba0, 0xffffffff, 0x8, 0x0, 0xffff}, 0x0, 0xa, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0xfff, 0x7fff}, 0x0, 0xff6fbffffffffffc, r5, 0x1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b08"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4014) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@gettfilter={0x6c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x8, 0xfff1}, {0x0, 0xc}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x57}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0xc3b}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xa222}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.421945285s ago: executing program 9 (id=3388): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ff0f", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x100, 0x0, 0x3}}}}}}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r0, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x4000000) 1.370654986s ago: executing program 7 (id=3389): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/4096, 0x1000) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000a710000108000000000000", @ANYRES32=0x0, @ANYBLOB="800001000000010014", @ANYRES32, @ANYBLOB="08001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r3 = getuid() setreuid(0x0, r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001500)=ANY=[@ANYBLOB="a0000000210001000000000008000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc010000000000000000000000000001fc010000000000000000000000000000ac1414aa000000000000000000000000fe88000000000000000000000000ff013c000000000000000a000a007efc0e44217b31ddf836e6bcd49ffa2cf768a7767cca6b98c94d69191bf342f0df51ca167b17c7e068b395de987aacfc98c9c9dfe68779e8c77b92bb687cae4b2d832ee7b34c16a3f8fcd04c86e216b4321e582641c4a637bb17900f948aafb3bc2082e65d6d4c2318f327da12803988"], 0xa0}}, 0x0) fchdir(0xffffffffffffffff) sendmsg$NFT_BATCH(r2, 0x0, 0x4001) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x28) 1.265916599s ago: executing program 7 (id=3392): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="8b", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={r2, @in6={{0xa, 0x4e23, 0x2, @private1, 0x80}}, 0x20000, 0xf401, 0xe457, 0xfffffffc, 0x4c, 0x6, 0x2}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000000c0)={0xb, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x11424a, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x40000000015, 0x5, 0xfeb9) mkdir(0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/4096, 0x1000) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)=ANY=[@ANYBLOB="3c0000a710000108000000000000", @ANYRES32=0x0, @ANYBLOB="3204950fb24159c17ce60b875606befb0d4b374ce4fb8119236363ff9262c3580c3b312b0217204d04a1a8159c375531d0b936a7c97ad9d4a3b6e2a5508ed254dcfbc9c94c5119aa924bba2f", @ANYRES32=0x0, @ANYBLOB="08001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) r6 = getuid() setreuid(0x0, r6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001500)=ANY=[@ANYBLOB="a0000000210001000000000008000000fc0100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc010000000000000000000000000001fc010000000000000000000000000000ac1414aa000000000000000000000000fe88000000000000000000000000ff013c000000000000000a000a007efc0e44217b31ddf836e6bcd49ffa2cf768a7767cca6b98c94d69191bf342f0df51ca167b17c7e068b395de987aacfc98c9c9dfe68779e8c77b92bb687cae4b2d832ee7b34c16a3f8fcd04c86e216b4321e582641c4a637bb17900f948aafb3bc2082e65d6d4c2318f327da12803988"], 0xa0}}, 0x0) r7 = syz_io_uring_complete(0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x400, 0x70bd2a, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000080) fchdir(0xffffffffffffffff) sendmsg$NFT_BATCH(r5, 0x0, 0x4001) 1.261386079s ago: executing program 9 (id=3393): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) 1.19444154s ago: executing program 9 (id=3394): syz_usbip_server_init(0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000010000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) setns(0xc9, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000001c0)={0x7fffffffffffffff, 0x5, 0x4, 0x1, 0x1, 0x0, [{0xfb4f, 0x7fff, 0x13, '\x00', 0xe}]}) write(r1, &(0x7f00000003c0)='1', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) socket$kcm(0x10, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0001ffffcd8bff7549a8485410ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000002"], 0x50) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r4, 0x58, &(0x7f0000000600)}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x5, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e0179832927deecf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236749b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ff7944f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990604b9f12033688caa0b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d600"}, @TCA_GRED_PARMS={0x38, 0x1, {0x2ec, 0x2, 0x0, 0xc, 0x7, 0x5, 0x16, 0x9, 0x9, 0x5, 0x12, 0x20, 0x54, 0x5, 0x9, 0x1}}]}}]}, 0x170}}, 0x24040004) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) msync(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x6) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 967.546686ms ago: executing program 5 (id=3397): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1a0, 0x0, &(0x7f0000000100)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=@delqdisc={0x24, 0x25, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0xffff, 0xffe0}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x4008880) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = getpid() capset(&(0x7f0000000400)={0x20071026, r4}, &(0x7f00000006c0)={0x9, 0x6, 0x80000000, 0x0, 0x1ff, 0x1}) setuid(0xee00) mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=prefer=']) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x5f0a, &(0x7f0000000380)={0x0, 0x8287, 0x20, 0x2, 0x9e}, &(0x7f0000000680), &(0x7f0000000440), &(0x7f0000000480)) syz_io_uring_setup(0x1ac, &(0x7f0000000540)={0x0, 0x9ab2, 0x1000, 0x3, 0x178, 0x0, r5}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) r6 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='dir0\x00', &(0x7f0000000300)={0x94000, 0x61, 0x9}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x401}}, 'dir0/per_cpu/cpu0/trace_pipe\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) 858.589479ms ago: executing program 5 (id=3398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close(r0) 850.830319ms ago: executing program 5 (id=3399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) 830.547379ms ago: executing program 0 (id=3400): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x20180d8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_INPUT(r1, &(0x7f00000001c0)={0x8, {"8a8a6ed6477dafcf4f287d4a6fa4fdb80e44e7ab98508046040f14d6dec0b57867a4d7245adfdcda9ade27e57845a5409f2b1f3a24bde8314d294725e1de7a56a8a770dc0f769b951b819ff1919394262aac9e92395c2650889f462fb0684dfc4a5a02e8395c4fc3da908f1220c6aa3dda5c8d98a6893352ba9c09ba1b4bb99f6c4c25a35252c354fe26f3a597b0f50b51d69b91f102cec8ee81999724b268a9b50d1bfe86669445fd5255ce3bb4e67e77b10e4a9e3dd366d8b2e473db9aad6016bb43f378adbf9bde1de4427432b806859d0725f98ead4c684c6709322e08aea76a5ac3ba630c18311b4ec3bd858c9550f72932aa443a0209bf9db04b9c88bce1c41c77c79a96f0c66339b081994749750290061f0f91eb04f3ead3715f96cee031297ea6ae3f4eb8e76091016bf3a3433ae98b3e2a8cbecf2ff9a4396778c20c563eb488c4b8441db1f35e29f694169d9f7843e7a01455461131315120733f7d3a9837ba307eecf93bfe0a51985e284a8b5128a60f2814adcaf669bb95553564cd03091a3afdb805e0dfaa0571aa4230f83d9ab3d16780a0102ca1ef53a26077ce72aab19a00bec770bf578072cd9bea5265523b6e12576891659664fa55687450ff21ccc07311add200c7c2ec1733b1236db7d1132fedd841378862916e4805b72e42161a08e9c439b8f7ede15220f0bb0f06a50a573df74dc21e67e9f5dcebbe9b0ff6a46d11dae41c514318e2bcca30c6ed8d074d900f2be4d0acf433e28e4f1ce0068eac932a670f24359445bd7df689f24df6613f8e6b95fce0bc366eb15de71647df008fabb5cd7c84772c1c7a8c144535b464de2d2b59183199861fa10b76bfc0976f647ec35ca0d64ed8828365e531883a7782fc0e12dccb0611c5cd22afab0882eac3f3d5af6faf61d5f461830827c6036b4be14c05c0897fc853e9a0d54c114e6683024001bd34837acd0c1660ab07d7eb895e0ea06fc0ce6e17f5ed3a9fae8b32ede7f7a4855d0f382fc501e9a5aaff132eaeb78c1b127b8c847fd6c7bf0994682d14cbe6ce38589dbf1ea1482045e5e3f76b5ed0dca9558b082d0bba966c394f54904c1cfdd34d686c8efa083a4dca0a45c4be57f7ebf078f9780d233e9b4ca32caef46d580264fab97f9574166fb3da14e0917042533d43ec28d7b94455590e935adc2e53816c528766da8f915a81e20a4f486619190c340de09603dbe0cca52b4267dcdab178e2fc21321195cf528273586896ce006c1db9b4ade48be0c88930695c9f1347beaa5400b6adedd69440b9f3ed7ae9d72724e24a9f3791eb7e4788fcd4ab2fb71d9665f361e4bded26a4ad94337152dea8c3f807a54d1adc85c4e5c55c19f1081ef6b9a34616e0afd79fe0b7de61601bb2459cfdc80b04e0a8b8180f8d62928dbdbebc7cbd717b917115093d406dd622dbb8148e914cf9ba45a3ab672ab5514f76f0765a935df5047e91b7e6f5e380f828b6ddbd8d1bd5fbc1dbb818c48619e40324291de6c4f452ca3a7b6de57dd0ea71adff70aed88b30779d9f4e98885d23a55d33a837de5e4eac9606e11dfb963d77493e4501ea8636c893bcee6c9aa931fcc9fe3ea68390e32e5db556263788cee55b704b3e1318237ce6acdb688ccc6345299baf3e9f31824107179bff5980d07e2c5bb1e7cdf5cdd624ec6fc069fe6103449e6e5ee56d46505d75b455eddcc83d3d38706921a5545d8a2370f0d447a1b62a465eecd7d6545307c1f3d738e4f81ae4c3db52f21e63999a93b6664d11c1f0a7a62005efd2074cf39965154deb115611a75d510a82c9f8f417493efea15a9ca8c42aee3c53d1a5cf01b90899751fbd8de56395330c81366b78af8a7b419030587bdfa733c6d50ef08970a5df98957087a400e5a5ce89bbf74e4754b3b6288730cca0b8ce1d70136e08fd1e7531b3aead8b3f62ce4a989e012753fd1bcee3a6e4d7384e3c3850400d577b4664859aa9f5420c61e41edd865a0ba9c37e3aedc99edb06bf5482ccfe91c63e4caae009a63251736882f48a91d562f4ca53dbed2306933641792776afe17335d5d9830b95102434723ac539eb7ca0dc90309f55ab395e6a82fff1f8d6d0e38b06bfd4b4bf70dff34278b79edd84711e93ea80a2a26fe57a8840c8b2a3538e8030502439e5d3f1455797db504fd4f06e10440509a8bb0409410ef7a96ea5894bba91dc4a1d95b06a770818d9958b945dd2faa2941676312c7a76e2e32116235611ea96f3d5cd5544ebab136f8d26ff16d2376d55532c04617260373f9fc4348fb42ad592e09bbf5decb2896214bed633b370c4a8a324081f9d58d3c92956e81d367e13f79a84a164542437f92bf9261b015f4889bed31228d05637e81802c7f0279469ab9ac80f89de4b84fa6a9ddf5ec6a9ce8567dadb8951c7d1a12197b680ef60915236614c9520c7b0ef0a6cd0dfcf7f0a7fd5934fcab8031df396a1d2c61319fe84b01c849c7d9b236dde83ac4b18d2221add5b1f1d9374fbf9a6f51f717813bbffcffd21cd477e0e9fd790c34eea2eb1277d8442502bc5dd2caec489465bed0d4246e02c6d2be763543391157a1f0232937463f39d414d5d6ce1577e6b96b6f2bd79da52831e98d97b7eb4cc89a422ac879a7ced5b34bdb35f63278c1464be49c366fb8a566bf52a2f34b70d738e5685723ba5c5ad9940832f321578dfcc2990823689889d52a9d90935a2057298770e444f166448971af945e9b569cbfb9af5b91062d3f7ce9fe0f2df66491ca3ddbcf0dc6669c858fbbb9869729bfed4f85d7d33f2193d589c606fa249eab39bbd4437370e999ad15817f0fd61e716435419b475179fb0afd6e1a44ea14a96454d07c7238b2244f0006721fea4c1f8f6f8dcc84d2fce889f88fe8ccf09e9eac55300de05623362466ff4be804ac599286d3a4638a1b8b48bf0fec9a84ea11a76fb42b87ca54baf6c1cdf3925171d1c39f4b6f20353573615f9ec3bf0527511561659942c5e54dac4e74b7dcf0c34fddac95b925a8cc245f2100e023453959c5969c8f17f6b05cb65639e98d5bd02c8046aa0a207eb0f3db6b21919bac6734ad96fbea6f967b60314348cfa2058f9175d2f6be411a45a4ff4ab8a876ce9cc3c0268f048e515c4455705df7fb614f5fe47796f9d8c9bc3567ae15ed05740a64e6e98a001a23b12b6962b658ac58a662131aeb4dfbcd972eebf095243e9237de9768cded887883f7007e7bff9a61692722aaef8a2903315008f75fbd1bede0388a2c47e43a228b92050702920248589d94a56a6363f51f8542af65eff2a512a941833ed0fda886c70b8a8e4956a7b15b4347580f3d50042c84a908abdbcd16236ee5b0e944d2371ebaa11f2923010c4ed25111529924d2b9c58d386230d925a1f2b8bf1d8169cdded0ad03cbcc7be99f18966ac0fd1acd830b3c8b8d22aea3822ca37fe1506fb88518b131efa7138320901cb2c37804bebd49cedb00baeede29d390ab60660fe008f0ca70aedaef8fd30fb4c2c57446f6b303b81351336c4878455ccebaa4251485d96fd1090e5d01f7277fe1ad68b2bd9645f6f349a2ccbfdfe9940f304f520210a09b84f3bf953ef78836b45ef3b5b7f0d0fe7d99f60f032354fe79ed408fafb6dfc4b0e64445adcd780ff42b236bc6511bcb0e0cc690f3924978f8edd45d9ecc9ad42e75c6012686ee932e7622779381c479a4d3237b5115a023b3da37ef74533c9b2b189617ec9582fca235bc31cac1073a99dc19b1afa894125ef1b8cc5b0720c4d91076ed32b838c66d22a7ace5168de0999e40b68d810edcc1f28b41d5c454d9201dee948067117812902695e319e4a784e0f4de64a88205b605996d526b0bbe76b7f17e3eabc67959c11922344f29f1aaa3f404495579ac33dabc2493bd094d91a0ad1398c8ceef56ef295528ffe0fb017ca57591af9e236a5143e412eed99ec6a55f326e25b2e042404a84f6f16b5933fbb24c58ff2e173b42b0400a1d713ee6690b356ef79aebe842a6fcc50754e5a1b66a4eaa84b6f2100e4ee4872fb3c223aa557cf316bd34b6e4ab6b7c7abd3ff86d180ddfbdefac70a6fea66ea40030694f449c9273c09fbddced694f8d4a8c483706764066b1dae0ec6847d3cfc819dc9c24724f345e0e85c2f6c841ada696b4cbc58986744b67975acb2e73f0a11c29f045f201d0c856dbff529f6e5a6d5d750beaf4c7ef5cc25157725da49dcaf3d0a7f1f12d4709a3584f2a6c2727f83420b791272021648586eb2ad70104ec3dbd771fdda361fbe47d20f579b79ef984cab45f5095b57c4ed0b74ed1ea31b122eaa880389621cc40f6d265f2915cadb49f71943d5c41c66e40b8503a9df7bbdc080eeb422f68a3e0dcbf89b6f30dc5948029d543bda44459a69c67cb82ae7735feb0136c45d204a8af88c0fc7add26b71bd677054cecaabc64f636ad8c2d064223b7f256f567f4a3fb646cb6a74fa27dda6f4e47bff7723a7cfe6c8d201f420b729c8ca433c876b5f604482e98ef9ad616933d180498ad56ec5a108594ec71d51c7adcec10751769ddc9c26ea0387a45ef5d6ba717b2047c3113eec6e29af598760b13c79a4adc0f081d993d2ebbc854dffa69a199c1695895011b857347ecd1549794c3df58f7d1a82e881ffd8ee575dc0e2dad6ea23ebdd70872cb3e0c7819a2a958dfb7b72d8eeef74d21fbdee93613df86f4e118378256804fc85d9d1b246c80ffc2e922bb102f69da8479b7e966800c1334979914e7bb98d41d640c4b67452d4d6e1c8c93ab48cff190cb739978a2a425a51bd4056f09f36cd3eb546bfd5c7b08d53b0fccfd0cbf8b3daef7864a4de6044b46137f3fe6bba466c4288e88e6d594ad3f5ae35a7d23fb31847504f3b1ecdb2728faca96c444e8df5e5cb1be807c00202eb1cd643b97c59d00521c6a322478acaa00119810dc603102b078e38523ea0e1ad841b2591e7d2e543d274dcf7c71643e5c25bceb70656cfcf6c594e0f46cb8e5f7cfef2b9bd95d2329ee91ad1a212b481ab09f2c734d0c109e9b1f6612003f8e27090aad3997e125ab69ed158dae10bf14798ed65154f1cfb6d2c9ee15c0a43beabb8fc180fc66e045c13bdbfda81ff45da8320b5a40db9965f596dd9fd9c696937d8218b1128bbc5d81161b948dd32388cb646297a1dbd28ca6842132dcbbd6d824fc416fe60e309908fb7ef0a86517016e1da55cfa19255ad38e49292833b3fa045bef6062a76499bd0eb2bc29525183b489f6e4ff8dd00bab03a3c54921093d936a2f854163ac8513dd8507815d0cd97e326a724551ba16943022247b7e049ea41cfc7d830780b52e5342d37baa058d12ceb0b59bad4d9638a9da5c10b52cb5022bc133af0e5c97dcec381e1c7141934ebc394c117e39a4fefb1c7a0631905f849e58fed1fd449ae48a6cd1b927e182a33a1e9bf08a8c2b43dfe83955486b9b1381ac7f8e83ad980ba2c447b76a65a5435090ed166fbedd1725d370b18768fc2f4060936a3e6a8edbc1a50b4d3868c541548a8b7c5098247723bf6474358a5117aa6bafb9adbacbb2ba53a827cdd40e5a7b7c8128339b4bbd658c6eb39187c2219d778fe163d11ec1539a6c5dcfccc8d1cff4c38dc6a3bff1023bf02a45dee53efd59e885cb0179845da7c97a54f50eac9d5d9c592cc8087270489ddcbc6cd9d67ae1f5bfe4493050d216267fc19183ce8ac8a0d447201f3e0538e780baf4f8e79ff2bbe720125289fa86b57349bfe74bc660ba030d5b0e465d58384e4b331ef77a540ed921c05", 0x104f}}, 0x1006) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001200)={@private1, 0x10001, 0x1, 0x3, 0xc, 0x7, 0x29f}, &(0x7f0000001240)=0x20) write$UHID_CREATE2(r1, 0x0, 0x119) 781.75215ms ago: executing program 5 (id=3401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@ipmr_getroute={0x1c, 0x1a, 0x4, 0x70bd2d, 0x25dfdbff, {0x80, 0x80, 0x0, 0x4, 0xff, 0x4, 0xff, 0x4, 0x1000}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 781.45931ms ago: executing program 0 (id=3402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x134}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 781.306461ms ago: executing program 5 (id=3403): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ff0f", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x100, 0x0, 0x3}}}}}}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r0, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x4000000) 728.339722ms ago: executing program 0 (id=3404): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) 693.136883ms ago: executing program 0 (id=3405): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x40, 0x0, 0x1, 0xe0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x4, 0xa1, 0x9b9b, 0x8, 0x0, 0x9, 0x0, 0xc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0xfeffffffffffffff, 0x3fc}, 0x0, r3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00a30000440c00001c0012800b0001006d616373656300000c000280050003000b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={0x0, &(0x7f0000003680)=""/4096, 0x3d, 0x1000, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="760a00000000000161119800000000001800000000000000000000000000000095000000000000000f186379c97c7fa1b1"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 593.465955ms ago: executing program 5 (id=3406): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) mlockall(0x1) mlockall(0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DPORT={0x6, 0x1d, 0x4e23}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r3 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000240)={{0x8, 0x9}, {0x3, 0x6}, 0x2, 0x7, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x2, 0xbaf, &(0x7f0000002f00)="$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") fallocate(r5, 0x20, 0x4000, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) 593.190355ms ago: executing program 0 (id=3407): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1}, 0x0, 0x35, 0x6, 0x1, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 518.780897ms ago: executing program 0 (id=3408): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r3, &(0x7f0000000a00)="c7", 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="23000000040000000400000007", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x50) sendfile(r3, r2, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r3, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r0}, &(0x7f0000001240), &(0x7f0000001280)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) 467.985469ms ago: executing program 1 (id=3409): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) recvmsg$unix(r2, &(0x7f0000000e40)={&(0x7f0000000340), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f0000000b40)=""/27, 0x1b}, {&(0x7f0000000b80)=""/53, 0x35}], 0x3, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x2) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) fcntl$addseals(r6, 0x409, 0x2f) ftruncate(r6, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000001c0), &(0x7f00000003c0)='./file0\x00', 0x8, 0x2) (async) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000001c0), &(0x7f00000003c0)='./file0\x00', 0x8, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0xa, 0xa0531, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1072c0, 0x10002, 0x20da, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0xa, 0xa0531, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1072c0, 0x10002, 0x20da, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setresuid(0x0, 0xee01, 0xffffffffffffffff) (async) setresuid(0x0, 0xee01, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x4) 253.711833ms ago: executing program 7 (id=3410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close(r0) 186.334965ms ago: executing program 1 (id=3411): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x10, 0x0, 0x0, 0x40, 0x0, 0x1, 0xe0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x4, 0xa1, 0x9b9b, 0x8, 0x0, 0x9, 0x0, 0xc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00a30000440c00001c0012800b0001006d616373656300000c000280050003000b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={0x0, &(0x7f0000003680)=""/4096, 0x3d, 0x1000, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1a, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="760a00000000000161119800000000001800000000000000000000000000000095000000000000000f186379c97c7fa1b1"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 182.729165ms ago: executing program 7 (id=3412): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680), 0x1, 0x5a5, &(0x7f00000006c0)="$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") r0 = socket$tipc(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setregid(0x0, 0xee01) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) openat(r3, &(0x7f0000000080)='./file1\x00', 0x101040, 0xd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 140.225406ms ago: executing program 1 (id=3413): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = gettid() (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40440d0}, 0x40080) (async) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x61}, r5}, 0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) (rerun: 64) connect$can_bcm(r3, &(0x7f00000002c0)={0x1d, r6}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)}], 0x3) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond0\x00'}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000580)=r2, 0x4) (async) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000600)={0x0, 0x0, "bb95ba42574fee1eb42209f4df20eba1"}) (async) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000640)=0x1, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, 0x0) (async) write$P9_RFSYNC(r7, &(0x7f0000000680)={0x7, 0x33, 0x1}, 0x7) (async) r8 = memfd_secret(0x0) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000000700)={0x0, @isdn={0x22, 0xd, 0xf2, 0x19, 0xd}, @nl=@unspec, @hci={0x1f, 0x0, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)='veth0_to_team\x00', 0x0, 0x0, 0x8}) (async) sendmsg(r4, &(0x7f0000000ac0)={&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0xffff}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)="01403ea755aa9babae801de71e3e708301d4990db1477d4755d9da9d8ea1b9d003a7c86d08e304192fe2a5b7f69eb103994c43ccd96dec637fd5f509266c92b6280c470af618250527f9b3cd4a2ceed4e26e677a7ca47a8ea809b3b6a2b44ebd642554ff763a8528fe2827ce153f69679ac6151630c965cc83117608a9e39c9836782d56316bd3005eabf56018985caf993457242c0effaa3be32d5dc776dc8f9d112341760661e279a9849981eb917bb55f72749179100a08cccf09c30d4970fb7b26c1f2f090aea79cc5b42e02de453d136f9325c10e35671568d1ea873e4c86d5c4814abb4016d43edaf4", 0xec}, {&(0x7f0000000900)="c291e75b26e9b664299899a9a2159dd622962e9df6965ac5cba27169a8d6e300bfca21f01a374dee2cb4af17563de51aa8bea7253fb0852765754a4fe2e0a36b8297d3349a7dde78230a1c213b6f85a5552caa19615e0fe9a171a39ec36a0a8d75c9ba7f6a247455fe761fa3034f6d8ba0918c2477287ff2fa4abf8a62564d5f6373a5f9158b9e889c938b466cae4691356c74c425bf5cd468b6734239da7c5b5784afc05397cf37ed32eaa3ce0e", 0xae}, {&(0x7f00000009c0)="455376ae741b2db3cd44d80c7eb2183f107c73edc88fb11c", 0x18}, {&(0x7f0000000a00)="dd95532a7542a46961ff4748838fa4c5c2c8a2dd3b64f171b7a739bdba47d6c334c03cf949a0d0ab04971b363a29f19a5304c95661fd746eb0da292993405aaf675a8fc76df794f506de8be51af6656012acbb0ba36f26c789577c78ce16756f51e57d053da735de61d30d70740ad9bbd4e05b0e2e567d7593552c2d8861d254", 0x80}], 0x4}, 0x34004093) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000b00)={0x9, 0x7, 0x1, 0xfffffffa, 0x0, [0x5, 0x6, 0x4, 0x1]}) (async) r9 = open(&(0x7f0000000b40)='./file0\x00', 0x208040, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1a, 0x2, 0xa, 0x5, 0x20, r9, 0x5, '\x00', 0x0, r4, 0x3, 0x5, 0x2}, 0x50) (async, rerun: 64) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x44, 0xf, 0x6, 0xcb36f017c65961e7, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000d40)) openat(r4, &(0x7f0000000d80)='./file0\x00', 0x202020, 0x4) open(&(0x7f0000000dc0)='./file0\x00', 0x208c02, 0x50) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r10, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, 0x3e9, 0x8, 0x70bd27, 0x25dfdbff, {0x8, 0x1, 0x2, r1, 0x7, 0x9, 0xd, 0x8, 0x0, 0xd, 0x800}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) 62.293358ms ago: executing program 1 (id=3414): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x6f7599aaa593efcc) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) setresuid(0x0, 0xee01, 0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010428bd7000fedbdf251600000718000180140002006e657464657673696d300000000000000500040000000000050002"], 0x3c}}, 0x14008040) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000680), 0x1, 0x5a5, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 58.183008ms ago: executing program 1 (id=3415): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, 0x0, 0x0) 0s ago: executing program 1 (id=3416): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ff0f", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x100, 0x0, 0x3}}}}}}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x3ff, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r0, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x4000000) kernel console output (not intermixed with test programs): 10844][T11860] EXT4-fs (loop4): 1 truncate cleaned up [ 206.429143][T11860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.470675][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.585632][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 206.839307][T11934] syzkaller0: entered promiscuous mode [ 206.845131][T11934] syzkaller0: entered allmulticast mode [ 206.991090][T11945] loop4: detected capacity change from 0 to 4096 [ 207.082799][T11945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.175924][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.235103][T11958] loop2: detected capacity change from 0 to 512 [ 207.291980][T11958] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 207.301457][T11958] EXT4-fs (loop2): 1 truncate cleaned up [ 207.307936][T11958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.444832][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2815'. [ 207.753901][T11964] syzkaller0: entered promiscuous mode [ 207.786121][T11964] syzkaller0: entered allmulticast mode [ 208.143910][ T46] smc: removing ib device syz1 [ 208.410362][T11991] bond_slave_0: entered promiscuous mode [ 208.428963][T11991] bond_slave_0: left promiscuous mode [ 208.722282][T12000] loop4: detected capacity change from 0 to 1764 [ 208.758308][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.784016][T12002] loop8: detected capacity change from 0 to 1024 [ 208.929793][T12002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.964532][T12005] bridge3: port 1(erspan0) entered blocking state [ 208.971080][T12005] bridge3: port 1(erspan0) entered forwarding state [ 208.987514][T12005] bridge0: left promiscuous mode [ 208.993430][T12005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.001471][T12005] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.008854][ T28] kauditd_printk_skb: 117 callbacks suppressed [ 209.008868][ T28] audit: type=1400 audit(1785275179.014:3565): avc: denied { write } for pid=12001 comm="syz.8.2827" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 209.011763][T12005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.078473][T12005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.086831][T12005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.096840][T12005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.107196][T12005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.121837][T12005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.130151][T12005] 8021q: adding VLAN 0 to HW filter on device eth0 [ 209.138412][T12005] 8021q: adding VLAN 0 to HW filter on device eth1 [ 209.146892][T12005] 8021q: adding VLAN 0 to HW filter on device eth2 [ 209.154777][T12005] 8021q: adding VLAN 0 to HW filter on device eth3 [ 209.162446][T12005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.195630][T12005] loop4: detected capacity change from 0 to 4096 [ 209.202545][T12005] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.210400][ T9765] bridge0: entered promiscuous mode [ 209.222788][ T40] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.241966][T12005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.288108][ T40] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.333673][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.340778][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.371953][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.379048][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.402303][ T40] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.420605][ T40] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.436654][ T40] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.458261][ T40] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.480869][ T40] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.506114][ T40] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.623510][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.672895][T11972] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.700840][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.722124][T11972] bridge_slave_0: entered allmulticast mode [ 209.736081][T11972] bridge_slave_0: entered promiscuous mode [ 209.743987][T11972] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.751179][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.751999][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.766078][T11972] bridge_slave_1: entered allmulticast mode [ 209.781375][T11972] bridge_slave_1: entered promiscuous mode [ 209.859445][T11972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.890457][T11972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.965112][T12057] loop8: detected capacity change from 0 to 512 [ 209.974004][T11972] team0: Port device team_slave_0 added [ 209.977828][T12057] EXT4-fs: Invalid want_extra_isize 9 [ 209.999241][T11972] team0: Port device team_slave_1 added [ 210.027905][T11972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.040113][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.070755][T11972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.084712][T11972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.092487][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.118807][T11972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.168629][T12067] loop4: detected capacity change from 0 to 1024 [ 210.208476][T11972] hsr_slave_0: entered promiscuous mode [ 210.216132][T11972] hsr_slave_1: entered promiscuous mode [ 210.222010][T11972] debugfs: 'hsr0' already exists in 'hsr' [ 210.227893][T11972] Cannot create hsr debugfs directory [ 210.268718][T12067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.289731][ T28] audit: type=1400 audit(1785275180.212:3566): avc: denied { write } for pid=12066 comm="syz.4.2844" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.180272][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.404765][T12088] loop4: detected capacity change from 0 to 2048 [ 211.434343][T11972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.461754][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.471782][T11972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.495495][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.506371][T12088] Alternate GPT is invalid, using primary GPT. [ 211.512842][T11972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.519892][T12088] loop4: p2 p3 p7 [ 211.528477][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.560090][T11972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.592098][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.650853][ T4297] udevd[4297]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 211.663720][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 211.675483][T12108] loop8: detected capacity change from 0 to 1024 [ 211.718017][T12108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.730673][T11972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.751211][T11972] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.761510][ T28] audit: type=1400 audit(1785275181.579:3567): avc: denied { write } for pid=12107 comm="syz.8.2858" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.784909][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.791990][ T5207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.820455][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.827577][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.855857][T11972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.990265][T12134] FAULT_INJECTION: forcing a failure. [ 211.990265][T12134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.056296][T12134] CPU: 0 UID: 0 PID: 12134 Comm: syz.4.2863 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 212.056546][T12134] Tainted: [W]=WARN [ 212.056553][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.056564][T12134] Call Trace: [ 212.056572][T12134] [ 212.056579][T12134] __dump_stack+0x1d/0x30 [ 212.056605][T12134] dump_stack_lvl+0x95/0xd0 [ 212.056628][T12134] dump_stack+0x15/0x1b [ 212.056647][T12134] should_fail_ex+0x25e/0x270 [ 212.056713][T12134] should_fail+0xb/0x20 [ 212.056769][T12134] should_fail_usercopy+0x1a/0x20 [ 212.056867][T12134] copy_fpstate_to_sigframe+0x61a/0x7b0 [ 212.056895][T12134] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 212.056924][T12134] ? x86_task_fpu+0x36/0x60 [ 212.057000][T12134] get_sigframe+0x34f/0x470 [ 212.057021][T12134] ? _raw_spin_unlock_irq+0x9/0x30 [ 212.057079][T12134] x64_setup_rt_frame+0xa7/0x4e0 [ 212.057104][T12134] arch_do_signal_or_restart+0x27c/0x480 [ 212.057136][T12134] exit_to_user_mode_loop+0x15d/0x8c0 [ 212.057217][T12134] do_syscall_64+0x23c/0x3c0 [ 212.057238][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.057257][T12134] RIP: 0033:0x7fe915f5de97 [ 212.057274][T12134] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 212.057294][T12134] RSP: 002b:00007fe9149b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 212.057376][T12134] RAX: 0000000000000116 RBX: 00007fe9161e5fa0 RCX: 00007fe915f5de99 [ 212.057392][T12134] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 000000000000000a [ 212.057407][T12134] RBP: 00007fe9149b7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.057422][T12134] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000001 [ 212.057435][T12134] R13: 00007fe9161e6038 R14: 00007fe9161e5fa0 R15: 00007ffc6950e388 [ 212.057457][T12134] [ 212.302688][T11972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.320828][T12145] loop4: detected capacity change from 0 to 2048 [ 212.327254][ T28] audit: type=1400 audit(1785275182.112:3568): avc: denied { write } for pid=12146 comm="syz.2.2866" path="socket:[34641]" dev="sockfs" ino=34641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.382632][T12145] Alternate GPT is invalid, using primary GPT. [ 212.389308][T12145] loop4: p2 p3 p7 [ 212.465982][ T4297] udevd[4297]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 212.467036][ T4298] udevd[4298]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 212.478903][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 212.519135][T12158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39780 sclass=netlink_route_socket pid=12158 comm=syz.2.2870 [ 212.542295][T11972] veth0_vlan: entered promiscuous mode [ 212.553242][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.588162][T11972] veth1_vlan: entered promiscuous mode [ 212.641123][T12163] syzkaller0: entered promiscuous mode [ 212.646840][T12163] syzkaller0: entered allmulticast mode [ 212.657414][T11972] veth0_macvtap: entered promiscuous mode [ 212.669874][T11972] veth1_macvtap: entered promiscuous mode [ 212.675025][T12155] loop4: detected capacity change from 0 to 512 [ 212.682702][T11972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.702684][T12155] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 212.714156][T11972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.733480][ T360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.743057][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.756748][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.765590][T12168] loop8: detected capacity change from 0 to 1024 [ 212.792149][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.795473][T12168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.832100][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2868'. [ 212.857779][ T28] audit: type=1400 audit(1785275182.599:3569): avc: denied { mount } for pid=11972 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 212.880874][ T28] audit: type=1400 audit(1785275182.608:3570): avc: denied { write } for pid=12167 comm="syz.8.2873" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.056205][T12174] loop2: detected capacity change from 0 to 512 [ 213.147358][T12182] loop4: detected capacity change from 0 to 2048 [ 213.147633][T12174] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.173526][T12174] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.207744][T12174] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 213.223490][T12174] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 213.231094][T12174] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2875: bad orphan inode 768 [ 213.241747][T12174] loop2: lost filesystem error report for type 5 error -117 [ 213.249209][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 213.262937][ C1] EXT4-fs (loop2): initial error at time 1785275182: ext4_orphan_get:1425 [ 213.271450][ C1] EXT4-fs (loop2): last error at time 1785275182: ext4_orphan_get:1425 [ 214.195548][T12174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.481966][ T28] audit: type=1400 audit(1785275184.124:3571): avc: denied { watch watch_reads } for pid=12173 comm="syz.2.2875" path="/570/file1/file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 214.708491][ T28] audit: type=1400 audit(1785275184.171:3572): avc: denied { ioctl } for pid=12173 comm="syz.2.2875" path="/570/file1/file2" dev="loop2" ino=16 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.130134][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.201942][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.262574][ T28] audit: type=1400 audit(1785275184.863:3573): avc: denied { setattr } for pid=12205 comm="syz.2.2883" name="SCTPv6" dev="sockfs" ino=35868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.329222][T12212] syzkaller0: entered promiscuous mode [ 215.348263][T12212] syzkaller0: entered allmulticast mode [ 215.419777][T12193] loop4: detected capacity change from 0 to 4096 [ 215.437256][T12193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.616246][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.676826][T12231] loop3: detected capacity change from 0 to 2048 [ 215.688462][T12231] EXT4-fs error (device loop3): ext4_quota_enable:7232: inode #4: comm syz.3.2890: iget: checksum invalid [ 215.700069][T12231] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 215.700302][T12231] EXT4-fs (loop3): Remounting filesystem read-only [ 215.709334][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 215.709354][ C0] EXT4-fs (loop3): initial error at time 1785275185: ext4_quota_enable:7232: inode 4 [ 215.709386][ C0] EXT4-fs (loop3): last error at time 1785275185: ext4_quota_enable:7232: inode 4 [ 215.741502][T12231] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 215.756330][T12231] EXT4-fs (loop3): mount failed [ 215.758656][T12236] loop4: detected capacity change from 0 to 8192 [ 215.772694][T12236] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.817836][ T3296] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 215.831479][T12238] loop3: detected capacity change from 0 to 512 [ 215.832446][ T3296] FAT-fs (loop4): Filesystem has been set read-only [ 215.861168][T12238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.881055][T12238] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.915559][ T28] audit: type=1400 audit(1785275185.471:3574): avc: denied { write } for pid=12237 comm="syz.3.2894" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 215.939507][ T28] audit: type=1400 audit(1785275185.471:3575): avc: denied { write } for pid=12237 comm="syz.3.2894" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.028342][ T28] audit: type=1400 audit(1785275185.565:3576): avc: denied { write } for pid=12237 comm="syz.3.2894" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.051693][T12256] syzkaller0: entered promiscuous mode [ 216.057288][T12256] syzkaller0: entered allmulticast mode [ 216.083812][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.173116][T12264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.227612][ T28] audit: type=1400 audit(1785275185.724:3577): avc: denied { write } for pid=12263 comm="syz.4.2902" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.499891][T12276] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.318847][ T28] audit: type=1400 audit(1785275186.754:3578): avc: denied { accept } for pid=12261 comm="syz.3.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 218.805444][T12303] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 218.815115][T12303] bridge1: entered promiscuous mode [ 219.687410][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.864202][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2926'. [ 219.875304][T12331] usb usb4: usbfs: process 12331 (syz.4.2925) did not claim interface 0 before use [ 220.015322][T12335] usb usb4: usbfs: process 12335 (syz.3.2927) did not claim interface 0 before use [ 220.204727][T12353] set_capacity_and_notify: 2 callbacks suppressed [ 220.204744][T12353] loop4: detected capacity change from 0 to 1024 [ 220.334649][T12353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.352267][T12354] loop2: detected capacity change from 0 to 8192 [ 220.416750][ T28] audit: type=1400 audit(1785275189.683:3579): avc: denied { write } for pid=12352 comm="syz.4.2935" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.499803][T12354] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.952946][T12369] loop3: detected capacity change from 0 to 4096 [ 220.966089][T12369] EXT4-fs: Ignoring removed orlov option [ 221.070700][T12369] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.279902][T12369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.337694][ T28] audit: type=1400 audit(1785275190.544:3580): avc: denied { write } for pid=12362 comm="syz.3.2937" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.538451][T12388] loop8: detected capacity change from 0 to 512 [ 222.603620][T12388] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 222.701163][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2944'. [ 222.798500][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.830613][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.990312][T12390] loop2: detected capacity change from 0 to 512 [ 223.024807][T12390] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 223.082844][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 223.305169][ T28] audit: type=1401 audit(1785275192.368:3581): op=setxattr invalid_context=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 [ 223.401100][T12411] bridge0: port 3(syz_tun) entered blocking state [ 223.510877][T12411] bridge0: port 3(syz_tun) entered disabled state [ 223.525068][T12411] syz_tun: entered allmulticast mode [ 223.531149][T12411] syz_tun: entered promiscuous mode [ 223.536609][T12411] bridge0: port 3(syz_tun) entered blocking state [ 223.543287][T12411] bridge0: port 3(syz_tun) entered forwarding state [ 223.658139][T12424] loop2: detected capacity change from 0 to 1024 [ 223.694880][T12424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.713189][ T28] audit: type=1400 audit(1785275192.771:3582): avc: denied { write } for pid=12423 comm="syz.2.2957" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.874558][T12431] netlink: 'syz.8.2959': attribute type 4 has an invalid length. [ 223.894881][T12431] netlink: 'syz.8.2959': attribute type 7 has an invalid length. [ 223.926283][T12431] netlink: 'syz.8.2959': attribute type 8 has an invalid length. [ 223.949657][ T28] audit: type=1400 audit(1785275192.986:3583): avc: denied { cmd } for pid=12430 comm="syz.8.2959" path="socket:[35520]" dev="sockfs" ino=35520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 223.952138][T12431] netlink: 'syz.8.2959': attribute type 7 has an invalid length. [ 223.989327][T12431] netlink: 125384 bytes leftover after parsing attributes in process `syz.8.2959'. [ 224.262331][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.321120][T12438] loop8: detected capacity change from 0 to 512 [ 224.352502][T12438] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 224.410155][T12438] EXT4-fs (loop8): 1 truncate cleaned up [ 224.433205][T12438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.501821][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.606246][ T28] audit: type=1326 audit(1785275193.604:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.2971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6e8de99 code=0x7ffc0000 [ 224.611276][T12463] loop4: detected capacity change from 0 to 1024 [ 224.699332][ T28] audit: type=1326 audit(1785275193.604:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.2971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6e8de99 code=0x7ffc0000 [ 224.732690][T12467] usb usb4: usbfs: process 12467 (syz.8.2972) did not claim interface 0 before use [ 224.753371][T12463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.770554][ T28] audit: type=1326 audit(1785275193.604:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.2971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6e8de99 code=0x7ffc0000 [ 224.796482][ T28] audit: type=1326 audit(1785275193.604:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.2971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6e8de99 code=0x7ffc0000 [ 224.822278][ T28] audit: type=1326 audit(1785275193.604:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12461 comm="syz.3.2971" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fcef6e8de99 code=0x7ffc0000 [ 224.877341][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2974'. [ 224.954474][T12475] loop3: detected capacity change from 0 to 1024 [ 224.981142][T12475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.741752][T12492] loop2: detected capacity change from 0 to 512 [ 225.769866][T12492] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 225.795576][T12492] EXT4-fs (loop2): 1 truncate cleaned up [ 225.812707][T12492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.893025][T12508] futex_wake_op: syz.8.2984 tries to shift op by 144; fix this program [ 225.919046][T12508] loop8: detected capacity change from 0 to 2048 [ 226.000213][T12508] loop8: p3 < > p4 < > [ 226.004490][T12508] loop8: partition table partially beyond EOD, truncated [ 226.011995][T12508] loop8: p3 start 4284289 is beyond EOD, truncated [ 226.071985][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.437804][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.535177][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.569520][T12520] loop4: detected capacity change from 0 to 2 [ 226.577822][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.596997][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.600461][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.607472][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.616612][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.631191][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.645507][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 226.645520][ T28] audit: type=1400 audit(1785275195.503:3596): avc: denied { getattr } for pid=12519 comm="syz.4.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.665226][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.681453][T12526] loop2: detected capacity change from 0 to 512 [ 226.701076][ T28] audit: type=1400 audit(1785275195.513:3597): avc: denied { create } for pid=12519 comm="syz.4.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 226.731127][T12526] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.744056][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.746281][T12529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2993'. [ 226.753589][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.769161][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.777190][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2994'. [ 226.795687][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.800820][ T28] audit: type=1400 audit(1785275195.522:3598): avc: denied { sys_admin } for pid=12519 comm="syz.4.2990" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 226.809068][ T3289] Buffer I/O error on dev loop4, logical block 0, async page read [ 226.829838][T12526] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2992: bad orphan inode 13 [ 226.852706][T12526] loop2: lost filesystem error report for type 5 error -117 [ 226.852840][T12526] ext4_test_bit(bit=12, block=18) = 1 [ 226.865609][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 226.865625][ C0] EXT4-fs (loop2): last error at time 1785275195: ext4_orphan_get:1425 [ 226.897863][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 226.907125][ T28] audit: type=1400 audit(1785275195.681:3599): avc: denied { read } for pid=12535 comm="syz.8.2995" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.928919][T12526] is_bad_inode(inode)=0 [ 226.934667][T12526] NEXT_ORPHAN(inode)=0 [ 226.935010][ T28] audit: type=1400 audit(1785275195.681:3600): avc: denied { open } for pid=12535 comm="syz.8.2995" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 226.938795][T12526] max_ino=32 [ 226.938803][T12526] i_nlink=1 [ 226.939373][T12526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 226.966488][ T28] audit: type=1400 audit(1785275195.737:3601): avc: denied { ioctl } for pid=12535 comm="syz.8.2995" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 227.011883][ T28] audit: type=1326 audit(1785275195.737:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153f6dde99 code=0x7ffc0000 [ 227.037928][ T28] audit: type=1326 audit(1785275195.737:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153f6dde99 code=0x7ffc0000 [ 227.064083][ T28] audit: type=1326 audit(1785275195.737:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153f6dde99 code=0x7ffc0000 [ 227.095414][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 227.107081][ T28] audit: type=1326 audit(1785275195.737:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12535 comm="syz.8.2995" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f153f6dde99 code=0x7ffc0000 [ 227.143442][T12540] loop8: detected capacity change from 0 to 512 [ 227.207627][T12540] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.220489][T12540] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.264547][T12548] loop3: detected capacity change from 0 to 1024 [ 227.295026][T12548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.319528][T12552] serio: Serial port ptm0 [ 227.339667][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.519490][T12561] netlink: 'syz.8.3004': attribute type 4 has an invalid length. [ 227.595547][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3004'. [ 227.623531][T12564] netlink: 'syz.8.3004': attribute type 1 has an invalid length. [ 227.750916][ T5207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.764094][ T5207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.898730][ T5207] bond0: (slave netdevsim2): Releasing backup interface [ 227.915444][ T5207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.934936][ T5207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.985980][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.029077][ T5207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.049458][ T5207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.130917][ T5207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.157409][ T5207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.206093][T12563] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.213359][T12563] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.261915][T12563] bridge_slave_0: entered allmulticast mode [ 228.272628][T12563] bridge_slave_0: entered promiscuous mode [ 228.296301][T12594] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 228.308785][T12563] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.315933][T12563] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.329356][T12563] bridge_slave_1: entered allmulticast mode [ 228.337406][T12563] bridge_slave_1: entered promiscuous mode [ 228.358419][T12596] loop3: detected capacity change from 0 to 512 [ 228.394702][T12596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.431540][T12563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.457689][T12596] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.472341][T12563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.489806][ T5207] pim6reg: left allmulticast mode [ 228.497356][ T5207] bridge0: left allmulticast mode [ 228.574683][ T5207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.585044][ T5207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.595727][ T5207] bond0 (unregistering): Released all slaves [ 228.623283][T12563] team0: Port device team_slave_0 added [ 228.631905][T12563] team0: Port device team_slave_1 added [ 228.643237][ T5207] hsr_slave_0: left promiscuous mode [ 228.649590][ T5207] hsr_slave_1: left promiscuous mode [ 228.661117][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.677976][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.703325][ T5207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.718577][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.727654][ T5207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.761953][ T5207] veth1_macvtap: left promiscuous mode [ 228.775001][ T5207] veth0_macvtap: left promiscuous mode [ 228.976881][ T5207] team0 (unregistering): Port device team_slave_1 removed [ 228.987854][ T5207] team0 (unregistering): Port device team_slave_0 removed [ 229.110402][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 229.136460][T12563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.143543][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.170233][T12563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.194494][T12563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.201593][T12563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.241285][T12563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.299619][T12563] hsr_slave_0: entered promiscuous mode [ 229.302999][T12648] loop3: detected capacity change from 0 to 512 [ 229.311024][T12563] hsr_slave_1: entered promiscuous mode [ 229.326062][T12648] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3020: bg 0: block 393: padding at end of block bitmap is not set [ 229.332452][T12563] debugfs: 'hsr0' already exists in 'hsr' [ 229.360547][T12648] loop3: lost filesystem error report for type 5 error -117 [ 229.360689][T12648] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 229.368063][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 229.368086][ C0] EXT4-fs (loop3): initial error at time 1785275198: ext4_validate_block_bitmap:441 [ 229.368127][ C0] EXT4-fs (loop3): last error at time 1785275198: ext4_validate_block_bitmap:441 [ 229.381332][T12563] Cannot create hsr debugfs directory [ 229.412365][T12648] loop3: lost filesystem error report for type 5 error -117 [ 229.416117][T12648] EXT4-fs (loop3): 2 truncates cleaned up [ 229.450730][T12648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.469401][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 229.534076][ T5207] IPVS: stop unused estimator thread 0... [ 229.542738][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.812656][T12563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.827679][T12563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 229.839126][T12563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.858216][T12563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 229.869123][T12563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.885685][T12563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 229.896446][T12563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.913670][T12563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.989408][T12563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.013695][T12710] loop8: detected capacity change from 0 to 128 [ 230.021549][T12563] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.049377][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.056454][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.078158][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.085300][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.206917][T12727] loop8: detected capacity change from 0 to 512 [ 230.246248][T12727] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.261708][T12727] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.384346][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.407151][T12563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.570406][T12563] veth0_vlan: entered promiscuous mode [ 230.593745][T12563] veth1_vlan: entered promiscuous mode [ 230.636960][T12563] veth0_macvtap: entered promiscuous mode [ 230.649564][T12563] veth1_macvtap: entered promiscuous mode [ 230.668816][T12723] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 230.679718][T12563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.713541][T12563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.728212][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3025'. [ 230.745991][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.756287][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.786294][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.806148][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.966540][T12773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.994407][T12775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12775 comm=syz.7.3034 [ 231.078048][T12788] syzkaller0: entered promiscuous mode [ 231.102644][T12788] syzkaller0: entered allmulticast mode [ 231.207686][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3043'. [ 231.219051][T12796] 9p: Bad value for 'rfdno' [ 231.236751][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.294978][T12801] set_capacity_and_notify: 2 callbacks suppressed [ 231.294990][T12801] loop2: detected capacity change from 0 to 1024 [ 231.317246][T12801] EXT4-fs: Ignoring removed bh option [ 231.344707][T12801] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 231.357419][T12804] loop3: detected capacity change from 0 to 512 [ 231.373959][T12804] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 231.385365][T12801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.429464][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3046'. [ 231.559560][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.743687][T12827] loop3: detected capacity change from 0 to 1024 [ 231.750177][T12818] loop2: detected capacity change from 0 to 512 [ 231.795668][T12827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.817021][T12818] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.3050: Unrecognised inode hash code 255 [ 231.864473][T12818] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3050: Corrupt directory, running e2fsck is recommended [ 231.938798][T12818] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 231.979228][T12818] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.3050: corrupted in-inode xattr: e_name out of bounds [ 232.019549][T12818] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.021747][T12818] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3050: couldn't read orphan inode 15 (err -117) [ 232.031282][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 232.031344][ C1] EXT4-fs (loop2): initial error at time 1785275200: ext4_iget_extra_inode:5180: inode 15 [ 232.031493][ C1] EXT4-fs (loop2): last error at time 1785275200: ext4_iget_extra_inode:5180: inode 15 [ 232.090180][T12818] loop2: lost filesystem error report for type 5 error -117 [ 232.096152][T12818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.328149][T12818] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.3050: Unrecognised inode hash code 255 [ 232.354338][T12818] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.3050: Corrupt directory, running e2fsck is recommended [ 232.420266][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.474986][T12852] loop2: detected capacity change from 0 to 2048 [ 232.538775][T12852] Alternate GPT is invalid, using primary GPT. [ 232.562454][T12852] loop2: p2 p3 p7 [ 232.893281][T12871] syzkaller0: entered promiscuous mode [ 232.904313][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.906160][T12871] syzkaller0: entered allmulticast mode [ 232.941980][T12871] simple: bas]9oς>Q/ic_1 [ 232.946868][T12871] simple: bas]9oς>Q/ic_2 [ 232.951738][T12871] simple: bas]9oς>Q/ic_3 [ 232.956644][T12871] simple: bas]9oς>Q/ic_4 [ 232.961501][T12871] simple: bas]9oς>Q/ic_5 [ 232.966430][T12871] simple: bas]9oς>Q/ic_6 [ 232.971273][T12871] simple: bas]9oς>Q/ic_7 [ 232.976130][T12871] simple: bas]9oς>Q/ic_8 [ 232.981019][T12871] simple: bas]9oς>Q/ic_9 [ 232.985911][T12871] simple: bas]9oς>Q/ic_10 [ 232.990868][T12871] simple: bas]9oς>Q/ic_11 [ 232.995654][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3061'. [ 232.995858][T12871] simple: bas]9oς>Q/ic_12 [ 232.995871][T12871] simple: bas]9oς>Q/ic_13 [ 232.995882][T12871] simple: bas]9oς>Q/ic_14 [ 232.995893][T12871] simple: bas]9oς>Q/ic_15 [ 232.995904][T12871] simple: bas]9oς>Q/ic_16 [ 233.029463][T12871] simple: bas]9oς>Q/ic_17 [ 233.034397][T12871] simple: bas]9oς>Q/ic_18 [ 233.039333][T12871] simple: bas]9oς>Q/ic_19 [ 233.044352][T12871] simple: bas]9oς>Q/ic_20 [ 233.049289][T12871] simple: bas]9oς>Q/ic_21 [ 233.054252][T12871] simple: bas]9oς>Q/ic_22 [ 233.059230][T12871] simple: bas]9oς>Q/ic_23 [ 233.064188][T12871] simple: bas]9oς>Q/ic_24 [ 233.069120][T12871] simple: bas]9oς>Q/ic_25 [ 233.074068][T12871] simple: bas]9oς>Q/ic_26 [ 233.079035][T12871] simple: bas]9oς>Q/ic_27 [ 233.084125][T12871] simple: bas]9oς>Q/ic_28 [ 233.089063][T12871] simple: bas]9oς>Q/ic_29 [ 233.094078][T12871] simple: bas]9oς>Q/ic_30 [ 233.099169][T12871] simple: bas]9oς>Q/ic_31 [ 233.104233][T12871] simple: bas]9oς>Q/ic_32 [ 233.109167][T12871] TC_ACT_REPEAT abuse ? [ 233.116694][T12876] xt_NFQUEUE: number of total queues is 0 [ 233.675223][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 233.675238][ T28] audit: type=1400 audit(1785275202.091:3661): avc: denied { setattr } for pid=12902 comm="syz.8.3079" name="/" dev="configfs" ino=1055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 234.555802][ T28] audit: type=1400 audit(1785275202.905:3662): avc: denied { create } for pid=12913 comm="syz.8.3082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.596536][ T28] audit: type=1400 audit(1785275202.905:3663): avc: denied { ioctl } for pid=12913 comm="syz.8.3082" path="socket:[37548]" dev="sockfs" ino=37548 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.627504][T12918] loop8: detected capacity change from 0 to 512 [ 234.640324][T12918] EXT4-fs: Invalid want_extra_isize 9 [ 235.034823][T12948] FAULT_INJECTION: forcing a failure. [ 235.034823][T12948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.048885][T12948] CPU: 1 UID: 0 PID: 12948 Comm: syz.8.3095 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 235.048952][T12948] Tainted: [W]=WARN [ 235.048959][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 235.048969][T12948] Call Trace: [ 235.048975][T12948] [ 235.048982][T12948] __dump_stack+0x1d/0x30 [ 235.049003][T12948] dump_stack_lvl+0x95/0xd0 [ 235.049023][T12948] dump_stack+0x15/0x1b [ 235.049052][T12948] should_fail_ex+0x25e/0x270 [ 235.049160][T12948] should_fail+0xb/0x20 [ 235.049180][T12948] should_fail_usercopy+0x1a/0x20 [ 235.049205][T12948] _copy_from_user+0x1c/0xb0 [ 235.049224][T12948] __copy_msghdr+0x242/0x300 [ 235.049295][T12948] ___sys_sendmsg+0x10c/0x1e0 [ 235.049332][T12948] __x64_sys_sendmsg+0xd4/0x160 [ 235.049427][T12948] x64_sys_call+0x194c/0x3020 [ 235.049459][T12948] do_syscall_64+0x136/0x3c0 [ 235.049485][T12948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.049504][T12948] RIP: 0033:0x7f153f6dde99 [ 235.049518][T12948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.049535][T12948] RSP: 002b:00007f153e137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.049580][T12948] RAX: ffffffffffffffda RBX: 00007f153f965fa0 RCX: 00007f153f6dde99 [ 235.049595][T12948] RDX: 0000000000000880 RSI: 0000200000000600 RDI: 0000000000000003 [ 235.049621][T12948] RBP: 00007f153e137090 R08: 0000000000000000 R09: 0000000000000000 [ 235.049635][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.049648][T12948] R13: 00007f153f966038 R14: 00007f153f965fa0 R15: 00007ffc015ecbd8 [ 235.049667][T12948] [ 235.277687][T12954] loop8: detected capacity change from 0 to 1024 [ 235.307722][T12954] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 235.330565][T12954] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 235.373322][T12954] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.3097: Failed to acquire dquot type 0 [ 235.402687][T12954] loop8: lost filesystem error report for type 5 error -117 [ 235.403135][T12954] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 235.424842][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 235.424863][ C0] EXT4-fs (loop8): initial error at time 1785275203: ext4_acquire_dquot:7041 [ 235.424890][ C0] EXT4-fs (loop8): last error at time 1785275203: ext4_acquire_dquot:7041 [ 235.484057][T12954] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #13: comm syz.8.3097: corrupted inode contents [ 235.519449][T12954] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.521190][T12954] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #13: comm syz.8.3097: mark_inode_dirty error [ 235.565920][T12954] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.567450][T12954] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #13: comm syz.8.3097: corrupted inode contents [ 235.596734][T12954] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.598275][T12954] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #13: comm syz.8.3097: mark_inode_dirty error [ 235.625140][T12954] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.625872][T12954] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #13: comm syz.8.3097: corrupted inode contents [ 235.657930][T12954] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.658145][T12954] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 235.693056][T12954] loop8: lost filesystem error report for type 5 error -117 [ 235.693242][T12954] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #13: comm syz.8.3097: corrupted inode contents [ 235.711736][T12964] syzkaller0: entered promiscuous mode [ 235.719701][T12964] syzkaller0: entered allmulticast mode [ 235.737817][T12954] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.738018][T12954] EXT4-fs error (device loop8): ext4_truncate:4691: inode #13: comm syz.8.3097: mark_inode_dirty error [ 235.763686][T12954] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 235.763907][T12954] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 235.797381][T12954] loop8: lost filesystem error report for type 5 error -117 [ 235.797905][T12954] EXT4-fs (loop8): 1 truncate cleaned up [ 235.820398][T12954] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.859222][T12967] loop2: detected capacity change from 0 to 1024 [ 235.905745][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.926640][T12967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.971948][ T28] audit: type=1400 audit(1785275204.216:3664): avc: denied { write } for pid=12966 comm="syz.2.3102" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.264878][T12982] loop8: detected capacity change from 0 to 1764 [ 236.431994][T12988] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 236.509991][T12989] loop8: detected capacity change from 0 to 764 [ 236.639647][T12989] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.709735][T12989] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.727222][ T28] audit: type=1400 audit(1785275204.936:3665): avc: denied { write } for pid=12981 comm="syz.8.3106" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.884902][ T28] audit: type=1400 audit(1785275204.936:3666): avc: denied { write } for pid=12981 comm="syz.8.3106" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.079585][T12995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3110'. [ 237.105171][T12995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3110'. [ 237.892994][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.918746][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3113'. [ 237.937103][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.960650][T12999] set_capacity_and_notify: 1 callbacks suppressed [ 237.960689][T12999] loop3: detected capacity change from 0 to 256 [ 237.978118][T12999] msdos: Unknown parameter '18446744073709551615%_A~*:EjaʽC [ 237.978118][T12999] 1:!$$x-xmaIQra*Zwrj%*ś).>>5I}}{Yh\#6v>' [ 237.992350][T13003] loop2: detected capacity change from 0 to 1024 [ 238.094866][T13010] tun0: tun_chr_ioctl cmd 2147767511 [ 238.626286][T13024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3120'. [ 238.661714][T13024] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3120'. [ 238.933790][T13038] syzkaller0: entered promiscuous mode [ 238.952190][T13038] syzkaller0: entered allmulticast mode [ 239.739893][ T28] audit: type=1400 audit(1785275207.753:3667): avc: denied { write } for pid=13002 comm="syz.2.3115" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.857528][ T28] audit: type=1400 audit(1785275207.753:3668): avc: denied { create } for pid=13002 comm="syz.2.3115" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 240.167774][T12563] EXT4-fs unmount: 1 callbacks suppressed [ 240.167791][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.232724][T13057] loop2: detected capacity change from 0 to 1024 [ 240.273124][T13057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.324670][ T28] audit: type=1400 audit(1785275208.305:3669): avc: denied { write } for pid=13056 comm="syz.2.3132" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.464172][ T28] audit: type=1401 audit(1785275208.417:3670): op=setxattr invalid_context=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 [ 240.938885][T13073] syzkaller0: entered promiscuous mode [ 241.086681][T13073] syzkaller0: entered allmulticast mode [ 241.101793][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.141199][ T28] audit: type=1400 audit(1785275209.082:3671): avc: denied { create } for pid=13077 comm="syz.2.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 241.206554][ T28] audit: type=1400 audit(1785275209.100:3672): avc: denied { write } for pid=13077 comm="syz.2.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 241.391480][T13087] loop3: detected capacity change from 0 to 1024 [ 241.419829][T13087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.438014][ T28] audit: type=1400 audit(1785275209.353:3673): avc: denied { write } for pid=13086 comm="syz.3.3144" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.687550][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3145'. [ 241.826741][T13094] loop8: detected capacity change from 0 to 512 [ 241.853618][T13094] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 241.904689][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3146'. [ 242.370967][T13110] syzkaller0: entered promiscuous mode [ 242.388833][T13110] syzkaller0: entered allmulticast mode [ 242.522665][ T28] audit: type=1401 audit(1785275210.336:3674): op=setxattr invalid_context=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 [ 242.580590][ T28] audit: type=1400 audit(1785275210.420:3675): avc: denied { write } for pid=13113 comm="syz.8.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.748443][ T28] audit: type=1400 audit(1785275210.579:3676): avc: denied { read append } for pid=13116 comm="syz.8.3155" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 242.777808][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.866407][T13120] sg_write: process 862 (syz.8.3155) changed security contexts after opening file descriptor, this is not allowed. [ 243.644184][T13124] loop3: detected capacity change from 0 to 512 [ 243.675856][T13124] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 243.734698][T13145] loop8: detected capacity change from 0 to 512 [ 243.762842][T13145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.765719][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 243.807405][T13131] loop2: detected capacity change from 0 to 512 [ 243.820263][T13145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.857629][T13145] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.857957][T13131] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 243.929400][T13131] EXT4-fs (loop2): 1 truncate cleaned up [ 243.947076][T13131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.989099][ T7895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.013962][T13155] syzkaller0: entered promiscuous mode [ 244.021084][T13155] syzkaller0: entered allmulticast mode [ 244.086192][T13132] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.110747][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.140060][T13132] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.187552][T13132] bridge_slave_0: entered allmulticast mode [ 244.207651][T13132] bridge_slave_0: entered promiscuous mode [ 244.230534][T13132] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.256998][T13132] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.278900][T13132] bridge_slave_1: entered allmulticast mode [ 244.297707][T13132] bridge_slave_1: entered promiscuous mode [ 244.366085][T13132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.388864][T13132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.436504][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.462061][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.502698][T13132] team0: Port device team_slave_0 added [ 244.526073][T13132] team0: Port device team_slave_1 added [ 244.558621][T13132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.565774][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.565910][T13170] loop8: detected capacity change from 0 to 512 [ 244.594178][T13132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.633907][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.644100][T13170] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 244.653039][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.665242][T13132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.672930][T13132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.700024][T13132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.712688][T13170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.727275][T13170] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.747612][T13170] netlink: 'syz.8.3169': attribute type 11 has an invalid length. [ 244.767668][T13170] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3169'. [ 244.777883][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.787896][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.803229][T13132] hsr_slave_0: entered promiscuous mode [ 244.809553][T13132] hsr_slave_1: entered promiscuous mode [ 244.815620][T13132] debugfs: 'hsr0' already exists in 'hsr' [ 244.822231][T13132] Cannot create hsr debugfs directory [ 244.849874][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.875697][ T7895] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 244.889951][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.903753][ T7895] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 244.986242][T12859] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.022395][T13189] syzkaller0: entered promiscuous mode [ 245.028718][T13189] syzkaller0: entered allmulticast mode [ 245.092356][ T12] bridge_slave_1: left allmulticast mode [ 245.099166][ T12] bridge_slave_1: left promiscuous mode [ 245.114423][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.138587][ T12] bridge_slave_0: left allmulticast mode [ 245.149014][ T12] bridge_slave_0: left promiscuous mode [ 245.159493][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.171154][T13192] loop3: detected capacity change from 0 to 512 [ 245.177825][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3174'. [ 245.190392][ T12] erspan0: left allmulticast mode [ 245.193499][T13192] EXT4-fs: Invalid want_extra_isize 9 [ 245.199401][ T12] erspan0: left promiscuous mode [ 245.206193][ T12] bridge3: port 1(erspan0) entered disabled state [ 245.230222][ T12] pim6reg: left allmulticast mode [ 245.394415][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.404076][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.413288][ T12] bond0 (unregistering): Released all slaves [ 245.429180][ T12] bond1 (unregistering): Released all slaves [ 245.463531][T13132] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 245.479784][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.488532][T13132] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 245.498694][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.507571][T13132] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 245.517491][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.530766][ T12] tipc: Left network mode [ 245.536165][T13132] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 245.562057][T13132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.578962][ T12] hsr_slave_0: left promiscuous mode [ 245.591001][ T12] hsr_slave_1: left promiscuous mode [ 245.592800][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 245.592813][ T28] audit: type=1400 audit(1785275213.237:3682): avc: denied { write } for pid=13210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.603564][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.644764][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.652416][ T28] audit: type=1400 audit(1785275213.293:3683): avc: denied { write } for pid=13224 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.676084][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.684906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.696255][T13208] infiniband syz1: set active [ 245.702264][T13208] infiniband syz1: added syz_tun [ 245.716253][T13208] RDS/IB: syz1: added [ 245.720360][T13208] smc: adding ib device syz1 with port count 1 [ 245.726882][T13208] smc: ib device syz1 port 1 has no pnetid [ 245.737150][ T12] team0 (unregistering): Port device team_slave_1 removed [ 245.750373][ T12] team0 (unregistering): Port device team_slave_0 removed [ 245.785028][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 245.846690][T13132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.870163][T13132] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.881288][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.888450][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.902732][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.909827][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.950342][ T28] audit: type=1400 audit(1785275213.574:3684): avc: denied { write } for pid=13234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.002452][ T28] audit: type=1400 audit(1785275213.630:3685): avc: denied { write } for pid=13247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.019403][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 246.228639][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.250959][ T28] audit: type=1400 audit(1785275213.864:3686): avc: denied { write } for pid=13254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.303341][T13132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.350403][ T28] audit: type=1400 audit(1785275213.938:3687): avc: denied { write } for pid=13289 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.388695][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.429866][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 246.484708][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.595851][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.653452][T13311] loop2: detected capacity change from 0 to 512 [ 246.672289][T13311] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 246.700888][T13311] EXT4-fs (loop2): 1 truncate cleaned up [ 246.708135][ T28] audit: type=1400 audit(1785275214.275:3688): avc: denied { write } for pid=13303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.732883][T13311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.748676][T13196] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.756199][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.763519][T13196] bridge_slave_0: entered allmulticast mode [ 246.777261][T13196] bridge_slave_0: entered promiscuous mode [ 246.781459][ T28] audit: type=1400 audit(1785275214.350:3689): avc: denied { write } for pid=13281 comm="syz.2.3188" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.786438][T13196] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.809197][T13291] loop3: detected capacity change from 0 to 512 [ 246.821131][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.828381][T13196] bridge_slave_1: entered allmulticast mode [ 246.829037][T13196] bridge_slave_1: entered promiscuous mode [ 246.829946][ T28] audit: type=1400 audit(1785275214.360:3690): avc: denied { write } for pid=13323 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.846766][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 246.868770][T13291] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 246.923866][T13132] veth0_vlan: entered promiscuous mode [ 246.931125][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3189'. [ 246.945961][T13196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.973819][T13196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.988858][T12563] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.042409][T13132] veth1_vlan: entered promiscuous mode [ 247.057412][T13196] team0: Port device team_slave_0 added [ 247.083083][ T12] bridge_slave_1: left allmulticast mode [ 247.088786][ T12] bridge_slave_1: left promiscuous mode [ 247.094692][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.145059][ T12] bridge_slave_0: left allmulticast mode [ 247.154351][ T12] bridge_slave_0: left promiscuous mode [ 247.160382][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.175254][ T12] pim6reg: left allmulticast mode [ 247.423375][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.452258][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.465781][ T12] bond0 (unregistering): Released all slaves [ 247.479721][ T12] bond1 (unregistering): Released all slaves [ 247.505684][T13132] veth0_macvtap: entered promiscuous mode [ 247.513509][T13196] team0: Port device team_slave_1 added [ 247.538421][T13132] veth1_macvtap: entered promiscuous mode [ 247.568891][T13196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.596063][T13196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.655960][ T28] audit: type=1400 audit(1785275215.174:3691): avc: denied { write } for pid=13356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.662519][T13196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.725500][ T12] hsr_slave_0: left promiscuous mode [ 247.731288][ T12] hsr_slave_1: left promiscuous mode [ 247.737226][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.754877][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.765877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.773273][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.799679][ T12] veth1_macvtap: left promiscuous mode [ 247.805656][ T12] veth0_macvtap: left promiscuous mode [ 247.811627][ T12] veth1_vlan: left promiscuous mode [ 247.817165][ T12] veth0_vlan: left promiscuous mode [ 247.941647][ T12] team0 (unregistering): Port device team_slave_1 removed [ 247.959508][ T12] team0 (unregistering): Port device team_slave_0 removed [ 248.000517][T13196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.008863][T13196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.035657][T13196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.078443][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 248.095232][T13132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.126766][T13196] hsr_slave_0: entered promiscuous mode [ 248.132956][T13196] hsr_slave_1: entered promiscuous mode [ 248.140557][T13132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.151779][ T310] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.162652][ T5207] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.172069][ T5207] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.214953][ T5207] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.274422][T13376] loop2: detected capacity change from 0 to 512 [ 248.298661][T13376] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 248.349692][T13376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3201'. [ 248.605221][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 248.845223][T13430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13430 comm=syz.2.3210 [ 248.858887][T13196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.869374][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.877665][T13426] loop3: detected capacity change from 0 to 512 [ 248.882022][T13443] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 3, id = 0 [ 248.899698][T13196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.915113][T13426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 248.964436][T13426] EXT4-fs (loop3): 1 truncate cleaned up [ 248.973196][T13426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.284863][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.294174][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 251.303139][T13449] veth0: entered promiscuous mode [ 251.311809][T13450] veth0: left promiscuous mode [ 251.316704][T13196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.941658][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.954681][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.972256][T13196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.995756][T13196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.103254][T13471] syzkaller0: entered promiscuous mode [ 252.112932][T13471] syzkaller0: entered allmulticast mode [ 252.143921][T13196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.161605][T13196] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.171126][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.178211][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.210917][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.218019][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.225683][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 252.225759][ T28] audit: type=1400 audit(1785275219.441:3709): avc: denied { write } for pid=13474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.266119][ T28] audit: type=1400 audit(1785275219.460:3710): avc: denied { write } for pid=13485 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.288122][T13196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.288147][T13196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.317113][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 252.428533][T13502] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3220'. [ 252.487210][ T28] audit: type=1400 audit(1785275219.694:3711): avc: denied { write } for pid=13495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.508118][T13196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.569888][ T28] audit: type=1400 audit(1785275219.759:3712): avc: denied { write } for pid=13516 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.672057][T13459] loop9: detected capacity change from 0 to 512 [ 252.702037][T13459] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 252.706093][T13196] veth0_vlan: entered promiscuous mode [ 252.732968][T13196] veth1_vlan: entered promiscuous mode [ 252.790326][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3213'. [ 252.792414][T13196] veth0_macvtap: entered promiscuous mode [ 252.808851][T13196] veth1_macvtap: entered promiscuous mode [ 252.816589][ T28] audit: type=1400 audit(1785275220.002:3713): avc: denied { write } for pid=13521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.850582][T13196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.862096][ T28] audit: type=1400 audit(1785275220.040:3714): avc: denied { write } for pid=13537 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.887961][ T28] audit: type=1400 audit(1785275220.049:3715): avc: denied { mounton } for pid=13538 comm="syz.2.3222" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 252.906952][T13539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=13539 comm=syz.2.3222 [ 252.917431][T13196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.942145][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.955687][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.002114][ T310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.014375][ T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.099581][ T28] audit: type=1400 audit(1785275220.274:3716): avc: denied { write } for pid=13543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.139116][T13564] loop2: detected capacity change from 0 to 128 [ 253.170329][ T28] audit: type=1400 audit(1785275220.330:3717): avc: denied { write } for pid=13565 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.195157][T13564] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.245708][T13564] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.290560][ T28] audit: type=1400 audit(1785275220.452:3718): avc: denied { write } for pid=13562 comm="syz.2.3226" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.326428][T12563] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 253.369219][T12563] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 253.416692][T12563] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 253.463477][T12563] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 253.485477][T12563] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 253.509915][T12563] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 253.533618][T12563] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 253.551482][T12563] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 253.580770][T12563] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 253.605075][T12563] EXT4-fs error (device loop2): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 253.919868][T13616] loop0: detected capacity change from 0 to 512 [ 253.960979][T13616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.012420][T13616] EXT4-fs (loop0): 1 truncate cleaned up [ 254.035327][T13616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.082287][T12563] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.133275][T13649] loop9: detected capacity change from 0 to 512 [ 254.168700][T13196] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.207526][T13649] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3237: Failed to acquire dquot type 1 [ 254.273156][T13649] loop9: lost filesystem error report for type 5 error -117 [ 254.283318][T13649] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3237: Failed to acquire dquot type 1 [ 254.294325][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 254.308460][ C0] EXT4-fs (loop9): last error at time 1785275221: ext4_acquire_dquot:7041 [ 254.315210][T13663] loop0: detected capacity change from 0 to 256 [ 254.336261][T13649] loop9: lost filesystem error report for type 5 error -117 [ 254.342071][T13649] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3237: bg 0: block 248: padding at end of block bitmap is not set [ 254.366990][T13649] loop9: lost filesystem error report for type 5 error -117 [ 254.368213][T13649] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 254.384693][T13649] loop9: lost filesystem error report for type 5 error -117 [ 254.392156][T13649] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3237: Failed to acquire dquot type 1 [ 254.425456][T13649] loop9: lost filesystem error report for type 5 error -117 [ 254.427215][T13649] EXT4-fs (loop9): 1 orphan inode deleted [ 254.455465][T13649] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.482006][T13649] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.561406][T13689] loop0: detected capacity change from 0 to 128 [ 254.592087][T13689] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 254.608382][T13689] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.641461][T13679] loop3: detected capacity change from 0 to 8192 [ 254.651202][T13679] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.664869][T13132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.860872][T13196] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.882515][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.941013][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.983631][T13670] bridge_slave_0: entered allmulticast mode [ 256.010497][T13670] bridge_slave_0: entered promiscuous mode [ 256.040973][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.075468][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.110782][T13670] bridge_slave_1: entered allmulticast mode [ 256.141055][T13670] bridge_slave_1: entered promiscuous mode [ 256.215179][T13670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.257146][T13670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.344308][T13670] team0: Port device team_slave_0 added [ 256.365780][T13741] loop0: detected capacity change from 0 to 512 [ 256.376984][T13670] team0: Port device team_slave_1 added [ 256.423426][T13741] EXT4-fs: dax option not supported [ 256.454722][T13670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.495074][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.551334][T13670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.563425][T13670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.570385][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.598161][T13670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.664204][T13670] hsr_slave_0: entered promiscuous mode [ 256.672447][T13670] hsr_slave_1: entered promiscuous mode [ 256.682414][T13670] debugfs: 'hsr0' already exists in 'hsr' [ 256.691343][T13670] Cannot create hsr debugfs directory [ 256.758731][T13762] netlink: 'syz.7.3252': attribute type 15 has an invalid length. [ 256.920374][T13746] loop3: detected capacity change from 0 to 512 [ 256.948862][T13746] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 257.029077][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3248'. [ 257.162452][T13670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 257.178636][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.203371][T13670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 257.211345][T13815] loop3: detected capacity change from 0 to 512 [ 257.226548][T13815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3259: bg 0: block 393: padding at end of block bitmap is not set [ 257.241591][T13815] loop3: lost filesystem error report for type 5 error -117 [ 257.241730][T13815] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 257.249059][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 257.249079][ C0] EXT4-fs (loop3): initial error at time 1785275224: ext4_validate_block_bitmap:441 [ 257.249099][ C0] EXT4-fs (loop3): last error at time 1785275224: ext4_validate_block_bitmap:441 [ 257.254579][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.258106][T13815] loop3: lost filesystem error report for type 5 error -117 [ 257.291328][T13815] EXT4-fs (loop3): 2 truncates cleaned up [ 257.291391][T13670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 257.299165][T13815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.337704][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.345722][T13670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 257.356941][T13670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.393808][T11972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.601769][T13670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.622859][T13670] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.646847][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.653955][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.675736][T13859] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.680655][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 257.680670][ T28] audit: type=1400 audit(1785275224.550:3905): avc: denied { write } for pid=13847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.716636][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.723715][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.735089][T13845] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 257.760237][T13859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.774605][T13859] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.784936][T13845] EXT4-fs (loop9): 1 truncate cleaned up [ 257.789892][T13670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.801083][T13670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.811632][ T28] audit: type=1400 audit(1785275224.672:3906): avc: denied { write } for pid=13865 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.814169][T13845] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.855602][T13859] netlink: 'syz.3.3262': attribute type 11 has an invalid length. [ 257.868051][T13859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3262'. [ 257.904396][ T28] audit: type=1400 audit(1785275224.756:3907): avc: denied { write } for pid=13858 comm="syz.3.3262" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.949907][T13132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.959339][T11972] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 257.975220][ T28] audit: type=1400 audit(1785275224.812:3908): avc: denied { write } for pid=11972 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.010544][T11972] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 258.023641][ T28] audit: type=1400 audit(1785275224.850:3909): avc: denied { write } for pid=13868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.081445][ T28] audit: type=1400 audit(1785275224.887:3910): avc: denied { write } for pid=13884 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.106289][T13888] set_capacity_and_notify: 2 callbacks suppressed [ 258.106304][T13888] loop9: detected capacity change from 0 to 164 [ 258.143101][T12316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.233494][T13670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.272491][T12316] bridge0: port 3(syz_tun) entered disabled state [ 258.295026][T12316] syz_tun (unregistering): left allmulticast mode [ 258.312488][T12316] syz_tun (unregistering): left promiscuous mode [ 258.324742][ T28] audit: type=1400 audit(1785275225.159:3911): avc: denied { ioctl } for pid=13922 comm="syz.7.3271" path="socket:[41526]" dev="sockfs" ino=41526 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 258.325627][T12316] bridge0: port 3(syz_tun) entered disabled state [ 258.365142][ T28] audit: type=1400 audit(1785275225.187:3912): avc: denied { write } for pid=13895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.414943][ T28] audit: type=1400 audit(1785275225.243:3913): avc: denied { write } for pid=13929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.458891][T13670] veth0_vlan: entered promiscuous mode [ 258.470134][T13670] veth1_vlan: entered promiscuous mode [ 258.487930][T13670] veth0_macvtap: entered promiscuous mode [ 258.495955][T13670] veth1_macvtap: entered promiscuous mode [ 258.504274][ T28] audit: type=1400 audit(1785275225.318:3914): avc: denied { mount } for pid=13932 comm="syz.7.3272" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 258.513037][T13670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.539063][T13670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.559554][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.568406][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.580823][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.592198][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.678220][T13953] syzkaller0: entered promiscuous mode [ 258.688079][T13953] syzkaller0: entered allmulticast mode [ 258.938990][T13948] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.946261][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.953633][T13948] bridge_slave_0: entered allmulticast mode [ 258.961702][T13948] bridge_slave_0: entered promiscuous mode [ 258.980868][T13948] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.992690][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.000126][T13948] bridge_slave_1: entered allmulticast mode [ 259.012974][T13948] bridge_slave_1: entered promiscuous mode [ 259.050274][T13948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.061573][T13948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.094261][T13948] team0: Port device team_slave_0 added [ 259.100914][T13948] team0: Port device team_slave_1 added [ 259.137794][T13948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.145160][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.171420][T13948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.182791][T13948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.189833][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.217382][T13948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.258750][T13948] hsr_slave_0: entered promiscuous mode [ 259.265179][T13948] hsr_slave_1: entered promiscuous mode [ 259.271238][T13948] debugfs: 'hsr0' already exists in 'hsr' [ 259.277439][T13948] Cannot create hsr debugfs directory [ 260.262381][T14157] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3283'. [ 260.286758][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3283'. [ 262.081763][T13989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.093097][T13948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 262.115701][T13948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 262.123428][T13948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 262.132796][T13948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 262.145421][T13948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 262.154717][T14283] loop9: detected capacity change from 0 to 512 [ 262.168975][T14283] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3291: bg 0: block 393: padding at end of block bitmap is not set [ 262.185720][T13948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 262.190024][T14283] loop9: lost filesystem error report for type 5 error -117 [ 262.202180][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 262.215941][ C0] EXT4-fs (loop9): initial error at time 1785275228: ext4_validate_block_bitmap:441 [ 262.225348][ C0] EXT4-fs (loop9): last error at time 1785275228: ext4_validate_block_bitmap:441 [ 262.225464][T14283] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 262.238498][T14292] netlink: 'syz.0.3293': attribute type 11 has an invalid length. [ 262.251331][T13948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 262.258235][T14292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3293'. [ 262.267748][T14283] loop9: lost filesystem error report for type 5 error -117 [ 262.268039][T14283] EXT4-fs (loop9): 2 truncates cleaned up [ 262.269730][T13948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 262.288766][T14283] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.361922][T13948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.375221][T13948] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.392292][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.399402][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.421699][T14310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.431603][T14310] team0: Port device bond1 added [ 262.439671][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.446765][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.462103][T13132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.481175][T13948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.501986][T13948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.522368][T14321] loop0: detected capacity change from 0 to 164 [ 262.557223][T14321] rock: corrupted directory entry. extent=32, offset=720896, size=2048 [ 262.566696][T14321] ISOFS: unable to read i-node block [ 262.572001][T14321] isofs_fill_super: get root inode failed [ 262.879431][T14355] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 263.087133][T13948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.276528][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 263.276541][ T28] audit: type=1400 audit(1785275229.791:3965): avc: denied { write } for pid=14356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.346630][T14378] ref_ctr increment failed for inode: 0x76 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104c1f000 [ 263.349514][ T28] audit: type=1400 audit(1785275229.856:3966): avc: denied { write } for pid=14375 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.418424][ T28] audit: type=1400 audit(1785275229.922:3967): avc: denied { shutdown } for pid=14377 comm="syz.9.3308" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.470756][T14391] loop9: detected capacity change from 0 to 512 [ 263.488846][T14391] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3310: bg 0: block 393: padding at end of block bitmap is not set [ 263.503528][T14391] loop9: lost filesystem error report for type 5 error -117 [ 263.504942][T14391] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 263.512392][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 263.512410][ C0] EXT4-fs (loop9): initial error at time 1785275229: ext4_validate_block_bitmap:441 [ 263.512429][ C0] EXT4-fs (loop9): last error at time 1785275229: ext4_validate_block_bitmap:441 [ 263.545860][T13948] veth0_vlan: entered promiscuous mode [ 263.559923][T14391] loop9: lost filesystem error report for type 5 error -117 [ 263.560312][T14391] EXT4-fs (loop9): 2 truncates cleaned up [ 263.598675][T13948] veth1_vlan: entered promiscuous mode [ 263.633084][T14391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.665217][T13948] veth0_macvtap: entered promiscuous mode [ 263.676711][ T28] audit: type=1400 audit(1785275230.165:3968): avc: denied { ioctl } for pid=14407 comm="syz.7.3314" path="socket:[42814]" dev="sockfs" ino=42814 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.680386][T13132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.713319][T13948] veth1_macvtap: entered promiscuous mode [ 263.741199][T13948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.750231][T13948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.767948][ T3464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.792038][ T3464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.805144][ T3464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.823486][ T3464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.860663][T14416] netlink: 'syz.7.3317': attribute type 11 has an invalid length. [ 263.874517][T14416] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3317'. [ 264.031594][T14432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3321'. [ 264.049588][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3321'. [ 264.049689][ T28] audit: type=1400 audit(1785275230.511:3969): avc: denied { map } for pid=14433 comm="syz.0.3322" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 264.049719][ T28] audit: type=1400 audit(1785275230.511:3970): avc: denied { execute } for pid=14433 comm="syz.0.3322" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 264.077118][T14421] tmpfs: Bad value for 'mpol' [ 264.126685][T14437] loop5: detected capacity change from 0 to 512 [ 264.137421][T14437] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3324: bg 0: block 393: padding at end of block bitmap is not set [ 264.154402][T14437] loop5: lost filesystem error report for type 5 error -117 [ 264.154714][T14437] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 264.162741][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 264.162767][ C0] EXT4-fs (loop5): initial error at time 1785275230: ext4_validate_block_bitmap:441 [ 264.162792][ C0] EXT4-fs (loop5): last error at time 1785275230: ext4_validate_block_bitmap:441 [ 264.191358][T14421] loop1: detected capacity change from 0 to 2048 [ 264.199873][T14437] loop5: lost filesystem error report for type 5 error -117 [ 264.203532][T14437] EXT4-fs (loop5): 2 truncates cleaned up [ 264.255625][T14421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.277379][T14438] loop0: detected capacity change from 0 to 8192 [ 264.279258][T14421] EXT4-fs error (device loop1): __ext4_new_inode:1081: comm syz.1.3319: reserved inode found cleared - inode=1 [ 264.284243][ T28] audit: type=1400 audit(1785275230.727:3971): avc: denied { write } for pid=14420 comm="syz.1.3319" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.299198][T14438] vfat: Unknown parameter 'q/ +5g-XB5fE$tY [ 264.299198][T14438] u5o&ZjsbZ TAsnh%U|' [ 264.320188][T14437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.368790][ T28] audit: type=1400 audit(1785275230.802:3972): avc: denied { write } for pid=14420 comm="syz.1.3319" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.416848][T13948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.462267][T14448] syzkaller0: entered promiscuous mode [ 264.469499][T14448] syzkaller0: entered allmulticast mode [ 264.483572][T14450] loop5: detected capacity change from 0 to 1024 [ 264.503319][T14452] macvlan0: entered promiscuous mode [ 264.509490][T14452] netlink: 'syz.1.3328': attribute type 1 has an invalid length. [ 264.518756][T14452] netlink: 'syz.1.3328': attribute type 2 has an invalid length. [ 264.528607][T14450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.533281][T14452] scsi_dev_info_list_add_str: bad dev info string '"G' '' '' [ 264.551344][ T28] audit: type=1400 audit(1785275230.989:3973): avc: denied { write } for pid=14449 comm="syz.5.3326" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.686112][ T28] audit: type=1400 audit(1785275231.110:3974): avc: denied { bind } for pid=14467 comm="syz.1.3333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 264.753087][T14474] loop9: detected capacity change from 0 to 512 [ 264.772390][T14474] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3336: bg 0: block 393: padding at end of block bitmap is not set [ 264.773604][T14476] loop0: detected capacity change from 0 to 512 [ 264.799323][T14474] loop9: lost filesystem error report for type 5 error -117 [ 264.799466][T14474] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 264.815508][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 264.815529][ C1] EXT4-fs (loop9): initial error at time 1785275231: ext4_validate_block_bitmap:441 [ 264.815564][ C1] EXT4-fs (loop9): last error at time 1785275231: ext4_validate_block_bitmap:441 [ 264.840756][T14474] loop9: lost filesystem error report for type 5 error -117 [ 264.843976][T14474] EXT4-fs (loop9): 2 truncates cleaned up [ 264.862971][T14476] EXT4-fs: Ignoring removed i_version option [ 264.870287][T14476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043e01c, mo2=0002] [ 264.878277][T14476] System zones: 1-12 [ 264.882745][T14476] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3337: invalid indirect mapped block 8 (level 2) [ 264.895985][T14476] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 264.897607][T14476] EXT4-fs (loop0): 1 truncate cleaned up [ 264.906791][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 264.906808][ C1] EXT4-fs (loop0): initial error at time 1785275231: ext4_free_branches:1023: inode 11 [ 264.906884][ C1] EXT4-fs (loop0): last error at time 1785275231: ext4_free_branches:1023: inode 11 [ 264.910361][T14474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.913691][T14476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.044679][T14476] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 5: comm syz.0.3337: lblock 0 mapped to illegal pblock 5 (length 1) [ 265.082062][T14476] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.3337: error -EUCLEAN reading directory block [ 265.088080][T13132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.114605][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3337'. [ 265.127964][ T40] smc: removing ib device syz1 [ 265.178431][ T9765] syz1: Port: 1 Link DOWN [ 265.199903][T13196] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.625569][T13948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.993430][T14484] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.028472][T14484] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.055100][T14484] bridge_slave_0: entered allmulticast mode [ 266.069844][T14484] bridge_slave_0: entered promiscuous mode [ 266.082828][T14484] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.097286][T14484] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.104757][T14484] bridge_slave_1: entered allmulticast mode [ 266.114564][T14484] bridge_slave_1: entered promiscuous mode [ 266.196991][T14484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.219533][T14484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.241801][T14484] team0: Port device team_slave_0 added [ 266.248420][T14484] team0: Port device team_slave_1 added [ 266.273705][T14484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.291742][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.353491][T14484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.368764][T14484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.377039][T14484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.405893][T14484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.425666][T14559] loop0: detected capacity change from 0 to 512 [ 266.432340][T14559] EXT4-fs: dax option not supported [ 266.532094][T14484] hsr_slave_0: entered promiscuous mode [ 266.552816][T14484] hsr_slave_1: entered promiscuous mode [ 266.562761][T14484] debugfs: 'hsr0' already exists in 'hsr' [ 266.571981][T14484] Cannot create hsr debugfs directory [ 266.584529][T14570] ip6erspan0: entered allmulticast mode [ 266.743247][ T46] pim6reg: left allmulticast mode [ 266.831106][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.855002][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.883130][ T46] bond0 (unregistering): Released all slaves [ 266.891891][ T46] bond1 (unregistering): Released all slaves [ 267.039278][ T46] hsr_slave_0: left promiscuous mode [ 267.079966][ T46] hsr_slave_1: left promiscuous mode [ 267.085763][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.102985][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.162805][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3364'. [ 267.232202][ T46] team0 (unregistering): Port device team_slave_1 removed [ 267.264589][ T46] team0 (unregistering): Port device team_slave_0 removed [ 267.273305][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 267.440735][T14484] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.548829][T14484] bond0: (slave netdevsim2): Releasing backup interface [ 267.560590][T14484] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.661303][T14484] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.733720][T14484] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.765749][ T46] IPVS: stop unused estimator thread 0... [ 267.865539][T14484] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 267.888081][T14484] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 267.909497][T14484] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 267.920988][T14484] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.955323][T14484] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.968408][T14484] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.976283][T14484] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.992727][T14484] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 268.098807][T14397] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 268.107582][T14484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.135673][T14484] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.149741][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.156833][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.181842][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.188935][ T5207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.231635][T14484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.252164][T14484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.459548][T14484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.495024][ T1040] kernel read not supported for file /vga_arbiter (pid: 1040 comm: kworker/1:2) [ 268.522799][T14666] loop5: detected capacity change from 0 to 1024 [ 268.563193][T14666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.578077][T14674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=882 sclass=netlink_route_socket pid=14674 comm=syz.0.3381 [ 268.724344][T14484] veth0_vlan: entered promiscuous mode [ 268.732493][T14484] veth1_vlan: entered promiscuous mode [ 268.748642][T14484] veth0_macvtap: entered promiscuous mode [ 268.760794][T14484] veth1_macvtap: entered promiscuous mode [ 268.777260][T14484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.792828][T14484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.808507][ T310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.818992][ T310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.840443][ T310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.849290][ T310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.890905][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3387'. [ 268.944257][T14697] loop9: detected capacity change from 0 to 512 [ 268.957592][T14697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 268.991177][T14697] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.021171][T14697] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.062022][T14706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3391'. [ 269.096178][T13132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.176775][T14714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 269.189671][T14715] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 269.196204][T14715] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 269.205080][T14715] vhci_hcd vhci_hcd.0: Device attached [ 269.318658][T13948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.404861][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 269.404891][ T28] audit: type=1400 audit(1785275235.527:3986): avc: denied { write } for pid=14723 comm="syz.5.3397" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 269.408860][T14724] program syz.5.3397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.472402][T14726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3398'. [ 269.491290][ T9763] usb 20-1: SetAddress Request (2) to port 0 [ 269.497391][ T9763] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 269.579495][T14737] loop5: detected capacity change from 0 to 512 [ 269.588670][T14737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 269.641456][T14737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.666377][T14737] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.680665][T14743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14743 comm=syz.0.3405 [ 269.721596][T13948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.762751][T14747] loop5: detected capacity change from 0 to 1024 [ 269.780152][T14747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.795465][ T28] audit: type=1400 audit(1785275235.892:3987): avc: denied { write } for pid=14746 comm="syz.5.3406" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.993742][T14716] vhci_hcd: connection reset by peer [ 270.088851][ T360] vhci_hcd vhci_hcd.9: stop threads [ 270.096707][ T360] vhci_hcd vhci_hcd.9: release socket [ 270.109036][ T360] vhci_hcd vhci_hcd.9: disconnect device [ 270.123601][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3410'. [ 270.180221][T14765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14765 comm=syz.1.3411 [ 270.199533][T14764] loop7: detected capacity change from 0 to 1024 [ 270.233638][T14764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 270.259364][T14764] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.298989][ T28] audit: type=1400 audit(1785275236.360:3988): avc: denied { write } for pid=14762 comm="syz.7.3412" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.361708][T14751] ================================================================== [ 270.369825][T14751] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 270.378432][T14751] [ 270.380747][T14751] write to 0xffff888103640e20 of 8 bytes by task 14757 on cpu 0: [ 270.388448][T14751] shmem_file_splice_read+0x401/0x590 [ 270.393829][T14751] splice_direct_to_actor+0x261/0x680 [ 270.399199][T14751] do_splice_direct+0x119/0x1a0 [ 270.404045][T14751] do_sendfile+0x37d/0x640 [ 270.408464][T14751] __x64_sys_sendfile64+0x105/0x150 [ 270.413670][T14751] x64_sys_call+0x2dc4/0x3020 [ 270.418352][T14751] do_syscall_64+0x136/0x3c0 [ 270.422942][T14751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.428835][T14751] [ 270.431151][T14751] write to 0xffff888103640e20 of 8 bytes by task 14751 on cpu 1: [ 270.438871][T14751] shmem_file_splice_read+0x401/0x590 [ 270.444261][T14751] splice_direct_to_actor+0x261/0x680 [ 270.449640][T14751] do_splice_direct+0x119/0x1a0 [ 270.454498][T14751] do_sendfile+0x37d/0x640 [ 270.458919][T14751] __x64_sys_sendfile64+0x105/0x150 [ 270.464114][T14751] x64_sys_call+0x2dc4/0x3020 [ 270.468801][T14751] do_syscall_64+0x136/0x3c0 [ 270.473400][T14751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.479295][T14751] [ 270.481605][T14751] value changed: 0x00000000000025b2 -> 0x00000000000025b4 [ 270.488696][T14751] [ 270.491006][T14751] Reported by Kernel Concurrency Sanitizer on: [ 270.497159][T14751] CPU: 1 UID: 0 PID: 14751 Comm: syz.0.3408 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 270.508097][T14751] Tainted: [W]=WARN [ 270.511887][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 270.521927][T14751] ================================================================== [ 270.597781][T14484] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 270.886803][T13948] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.651313][ T28] audit: type=1400 audit(1785275237.633:3989): avc: denied { write } for pid=14782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.674473][ T28] audit: type=1400 audit(1785275237.642:3990): avc: denied { write } for pid=14793 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.837149][ T28] audit: type=1400 audit(1785275237.801:3991): avc: denied { write } for pid=14796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.864137][ T28] audit: type=1400 audit(1785275237.820:3992): avc: denied { write } for pid=14807 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.410004][ T28] audit: type=1400 audit(1785275238.344:3993): avc: denied { write } for pid=14810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.433230][ T28] audit: type=1400 audit(1785275238.344:3994): avc: denied { write } for pid=14821 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.227963][ T28] audit: type=1400 audit(1785275239.102:3995): avc: denied { write } for pid=14824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.939832][ T9763] usb 20-1: device descriptor read/8, error -110 [ 275.057382][ T9763] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 275.079428][ T9763] usb 20-1: enqueue for inactive port 0 [ 275.085013][ T9763] usb 20-1: enqueue for inactive port 0 [ 275.090697][ T9763] usb 20-1: enqueue for inactive port 0 [ 276.200970][ T9763] usb usb20-port1: attempt power cycle [ 278.156909][ T9763] usb usb20-port1: unable to enumerate USB device