last executing test programs: 1m42.589712219s ago: executing program 32 (id=31): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r2, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.381413613s ago: executing program 33 (id=50): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000010000000000000200000a20000000020a010100000000000000000a0000030900010200797a310000000014000000110001000000000000000000000a0000"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) 1m4.013322584s ago: executing program 34 (id=371): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xfc, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) sendmsg$nl_route(r3, 0x0, 0x440088c4) pipe(&(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/options/bin\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000d40)=[{&(0x7f00000005c0)="94be", 0x2}, {0x0}], 0x2, 0xd, 0x401) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002, 0x2003, @rand_addr, 0x3}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x1, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x174491, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x9}, 0x7025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000b, 0x4000011, r7, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3fc0000000, 0xc}, 0x0, 0x0, 0x0, 0x1, 0x7, 0x4, 0x5854}, 0x0, 0xffefffffffffffff, r7, 0x3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) 1m3.713833548s ago: executing program 35 (id=382): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3d, 0xffffff7f}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 1m3.133118612s ago: executing program 36 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2a, 0x2, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {@lazytime}, {@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40712, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x5}, 0x204, 0x200, 0x43a1bd76, 0x3, 0x9, 0x6, 0xff, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x81000) renameat2(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (fail_nth: 8) 1m2.509090297s ago: executing program 37 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}, @mpls={[{0x300}], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x39, 0x3a, 0x0, @mcast2, @private1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [{0x0, 0x2, "b0dcc4a3616748a199e53d96e28516"}]}}}}}, 0x73) 50.244793305s ago: executing program 1 (id=470): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x2}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffffc}}, 0x0, 0x3, [{{0xa, 0x4e22, 0x2, @loopback, 0x1}}, {{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x27}, 0xb}}, {{0xa, 0x4e21, 0x6, @private1, 0x400003}}]}, 0x210) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000001540)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x108) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x1000000, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x80000, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x3f, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x2284, &(0x7f00000003c0)) 47.782581147s ago: executing program 7 (id=478): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000001000000004e20004ff7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000000000000000000800000000000000000fcffffff000000000000030100000000c4000500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb00000000320000000200000000000000000000000000000000000001fdffffff0403000000080000000800"/251], 0x17c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 47.706523379s ago: executing program 7 (id=479): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) setpgid(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) 47.659698032s ago: executing program 7 (id=480): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xffffffffffffffff, 0x40020000}, 0x102229, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005800800024000000002080001"], 0x2d4}}, 0x4048010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) r4 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) 46.580972155s ago: executing program 7 (id=486): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r1, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 46.253802227s ago: executing program 1 (id=488): socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd7080faffffff0218ef00", @ANYRES32=r4, @ANYBLOB="08000100ffffffff0800040064000100080002007f00000108000400fffffffb08000a000400000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 46.142849088s ago: executing program 7 (id=493): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) capset(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) 46.1014678s ago: executing program 2 (id=494): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x8c84, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 45.940915235s ago: executing program 2 (id=498): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32=r2, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r3, &(0x7f0000000040)="31fb2d", 0x3) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) 45.931452578s ago: executing program 7 (id=499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) 44.792031838s ago: executing program 38 (id=498): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32=r2, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r3, &(0x7f0000000040)="31fb2d", 0x3) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) 44.74917683s ago: executing program 39 (id=499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) 44.665534804s ago: executing program 1 (id=502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000001000000004e20004ff7ff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000000000000000000800000000000000000fcffffff000000000000030100000000c4000500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb00000000320000000200000000000000000000000000000000000001fdffffff0403000000080000000800"/251], 0x17c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 44.605714951s ago: executing program 1 (id=504): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r1, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 44.385237272s ago: executing program 1 (id=508): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x8c84, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 44.229190317s ago: executing program 1 (id=510): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x84}}}], 0x40, 0x7ffffff7}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x14, 0xc, 0x5c}, 0x2c) dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71) ftruncate(r3, 0x200002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@private1}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 44.228344197s ago: executing program 40 (id=510): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x84}}}], 0x40, 0x7ffffff7}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x14, 0xc, 0x5c}, 0x2c) dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71) ftruncate(r3, 0x200002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@private1}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 24.782192253s ago: executing program 3 (id=644): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000170081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x20004000) 24.730764538s ago: executing program 3 (id=645): sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0xc0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa8}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000680), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r6, 0x7}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r8, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe81abc5c9638b3c6}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x74}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @jmp={0x5, 0x0, 0xc, 0x4, 0x5, 0x40}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xc, 0x0, 0xfffffffe}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4000}, @generic={0x85, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.727082699s ago: executing program 3 (id=648): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 24.645312662s ago: executing program 3 (id=649): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) lseek(r0, 0x403, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="20000000290001"], 0x20}], 0x1, 0x0, 0x0, 0x40014}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0x0, r3, 0x0) close(0x3) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r4 = gettid() setpriority(0x1, r4, 0x0) write(r2, &(0x7f00000004c0)='common_pid > \'', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 24.285289163s ago: executing program 3 (id=652): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x446c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x4000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ptrace(0x10, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001440)=[{&(0x7f00000017c0)=""/43, 0x2b}], 0x1, 0x36, 0x7) recvfrom$inet6(r3, 0x0, 0xffffffffffffff3b, 0x10000, 0x0, 0x0) 23.917131656s ago: executing program 3 (id=658): r0 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) (async) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) cachestat(r0, &(0x7f0000000140)={0xd5, 0x1}, &(0x7f0000000180), 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) pipe(&(0x7f00000000c0)) 23.916841447s ago: executing program 41 (id=658): r0 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) (async) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}}], 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) cachestat(r0, &(0x7f0000000140)={0xd5, 0x1}, &(0x7f0000000180), 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) pipe(&(0x7f00000000c0)) 19.643340918s ago: executing program 8 (id=708): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (fail_nth: 4) 19.563130561s ago: executing program 8 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0xc, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000440)=0x634, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdf252e000000080003", @ANYRES32=r8, @ANYBLOB="500051804c0000800500020005000000090001004f23b93436063020ef000000130004008f9c97606876743f0107cf50fb217c0009000100ab40c43d1c000000090001002a886fa317000000040006000400060019003400cde6a37c987aac6a3ead48604d971afe9a0cca0dd100000004000101bdc1090f443e726bdc806f101b64b31d4e1876cffc6c6362c426e9df0d2c643ddc652df8cae8022fc7698272d938556d99bad95327fdca49e6e4e3dc0f61f0a58d377479c38bdc9517633f83a9a83ae064e8a89deb8fde8c"], 0x8c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) recvmsg$inet_nvme(r10, &(0x7f0000002300)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/60, 0x3c}, {&(0x7f0000000840)=""/1, 0x1}, {&(0x7f0000000b40)=""/164, 0xa4}, {&(0x7f0000000940)=""/110, 0x6e}, {0xfffffffffffffffd}, {&(0x7f00000009c0)=""/36, 0x24}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/219, 0xdb}], 0xa, &(0x7f0000001300)=""/4096, 0x1000}, 0x40000002) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb) r11 = socket$inet(0x2, 0x1, 0x6) bind$inet(r11, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r11, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) 19.337309894s ago: executing program 8 (id=713): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x18, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 19.265414975s ago: executing program 8 (id=715): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001c000100040000000000000007000000", @ANYRES32, @ANYBLOB="5100f2040a0002000180c2000002000004000e"], 0x2c}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) personality(0xfe47fef9f5ff7379) io_setup(0x8f0, &(0x7f0000002400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) write(r1, &(0x7f0000000040)="31fb2d", 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 18.816200681s ago: executing program 8 (id=719): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x141) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0xc040480) mkdir(0x0, 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 17.709426902s ago: executing program 8 (id=726): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r0 = socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @rand_addr=0x74010102, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}, {{@arp={@remote, @local, 0x0, 0xff000000, 0x1, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0xfff8, 0xfff7, 0x1, 0x6, 0x3, 0x5, 'gretap0\x00', 'dvmrp1\x00', {0x7f}, {0xff}, 0x0, 0x5}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @private=0xa010100, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x20001) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f00000002c0)={{0xe}, {0x5, 0xc}, 0x2, 0x1, 0x8}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x9d, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setrlimit(0xa, &(0x7f0000000040)={0x40, 0x1c000000000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) socket$inet6(0xa, 0x4, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000370400008000fedbdf2500000000", @ANYRES32, @ANYBLOB="cb04050000000000240012800b00010069703667726500009e603bdd44085270dbc9fe6145140002", @ANYRES32, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES64=r7], 0x44}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) 17.707485482s ago: executing program 42 (id=726): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r0 = socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @loopback, @rand_addr=0x74010102, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}, {{@arp={@remote, @local, 0x0, 0xff000000, 0x1, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0xfff8, 0xfff7, 0x1, 0x6, 0x3, 0x5, 'gretap0\x00', 'dvmrp1\x00', {0x7f}, {0xff}, 0x0, 0x5}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @private=0xa010100, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x20001) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f00000002c0)={{0xe}, {0x5, 0xc}, 0x2, 0x1, 0x8}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x9d, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) setrlimit(0xa, &(0x7f0000000040)={0x40, 0x1c000000000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) socket$inet6(0xa, 0x4, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000370400008000fedbdf2500000000", @ANYRES32, @ANYBLOB="cb04050000000000240012800b00010069703667726500009e603bdd44085270dbc9fe6145140002", @ANYRES32, @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES64=r7], 0x44}, 0x1, 0x0, 0x0, 0xc8d4}, 0x0) 7.478000678s ago: executing program 5 (id=796): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000180001801400020076657468305f6d61637674617000000008000280ab"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc810) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000180)}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) 7.422456133s ago: executing program 5 (id=798): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) 7.36543114s ago: executing program 5 (id=799): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="143cede28499", @ANYRES64=r4], 0xb2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x20, &(0x7f0000000a80)=ANY=[@ANYRES16=r0, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="18f29b71b851e874778dd9d0bcff650024c7a9798345142d2da2833cbc816771d5b630977049d4f6fe50f2dce5ba37e27048f7f4a24000f1eeb712fa620fa87175574ab450a5cb06bc16143ad4e3af607ca246e09e995b1b8590c01b0c71ab0894ffe41aa5340af831b9f90781f5aecc63560ab83933712db23d6d62a014ad308ab8724f934648eb002be580a0dcee3d76289465c1a871ccdd67476cf82ba16ab8025a57c7b140f233163d6f1fc615f15281908081c9007a79305a3abecb52ebf8df1970aef5f2464ccae0017398824939f6", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) close(r3) r6 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r7 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f00000001c0)=0x401) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) 7.294685089s ago: executing program 5 (id=800): mkdir(&(0x7f0000000780)='./file0\x00', 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00') (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000700)={@private0, 0x0, 0x1, 0xff, 0x3, 0x1, 0x10}, &(0x7f0000000740)=0x20) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x48, 0x1165, 0x0, 0x2, 0x1, 0x0, @remote, @remote}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x6, 0x1f, {0xb, 0x4, 0x3, 0x16, 0x7ff, 0x68, 0x1ce5, 0xd9, 0x2f, 0xe5c, @multicast1, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x6, 0x9, "000022eb000000"}, {0x1, 0x2}]}, @rr={0x7, 0x7, 0x5b, [@broadcast]}]}}}}}}}, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000080) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file1\x00', 0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0xc, 0x5}, &(0x7f0000000880)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000008c0)={r2, @in={{0x2, 0x4e21, @empty}}, [0x3, 0x5, 0x3, 0x9, 0x800, 0x8, 0x1, 0x3, 0xffffffff, 0x6, 0x5, 0x7, 0x5, 0x7fffffffffffffff]}, &(0x7f00000009c0)=0x100) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff86}}, './file1\x00'}) (async) pipe(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2084ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) (async) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, &(0x7f0000000640)='./cgroup.cpu/cgroup.procs\x00') (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x526, &(0x7f0000000e80)="$eJzs3cFvI1cZAPBvZjebdJs2KVQqIKBLKSxotXbibaOqp3IBoaoSouLEIQ2JN4rixFHslCastMn/gEQlDghOnJFAcKjUE0cEN7j1Ug5IBVagphIHoxmPs+7GTtxN1lbj308aed7MZL73xpr34i/OvADG1rWI2I+IKxHxRkTMFNuTYolX2kt23If37iwf3ruznESr9fq/knx/ti26fibzeHHOqYj4/ncifpQcj9vY3VtfqtWq20W53NzYKjd2926ubSytVlerm5XKwvzC3Eu3XqwM1I6pAY55duM3H3x77dUfvPOHL73/l/1v/iSr1nSxr7sd56nd9ImjOJnLEfHqowg2ApeK9lwZdUV4KGlEfCYinsvv/5m4lL+bg+lxWwMAnwKt1ky0ZrrLAMBFl+Y5sCQtFbmA6UjTUqmdw3s6rqa1eqN543Z9Z3OlnSubjYn09lqtOlfkCmdjIsnK83ez9fvlSny8fCsinoqIn04+lpdLy4PnGQCA8/X4A+P/fyfb4z8AcMH1/PJM9+fzxeHVBQAYjkG+PAsAXCzt8f/uqKsBAAzR/c//V0daDwBgeOT/AWD8GP8BYNy81xn/L426JgDAUHzvtdeypXVYPP965c3dnfX6mzdXqo310sbOcmm5vr1VWq3XV2vV0nJ947Tz1er1rfkXYuetcrPaaJYbu3uLG/WdzeZi/lzvxerEUFoFAJzkqWff/VsSEfsvP5Yv0TWXg7EaLrZ01BUARkbOH8aXp3DD+PIZH8bXb4v/+D1tLs++XxF++yGCtu5+9BA/BZyz65+X/4dxJf8P40v+H8aX/D+Mr1Yr6Tfnf3p0CABwoXzCHL8/CcAFNNS//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAFMZ0vs13lNC2VIp6IiNmYSG6v1apzEfFkRPx1cmIyK8+PtMYAwFldivQfSTH/1/WZ56cf3H8l+Wgyf42IH//89Z+9tdRsbs9n2/99tL35drG9MooWAACn6YzTnXG848N7d5Y7yzDr88G32pOLZnEPi6W953Jczl7+PJVPOnz1P0m7XEjy313Obv8gIj7Xq/1JnhuZLWY+fTB+FvuJocZPPxY/zfe1X7Nr8dljZ57sG/O0uV5hXLyb9T+v9Lr/0riWv071nPx4Ku+hzq7T/x0e6/869/tU3tf06v+uDRrjhT9+t+++g4gvXO4VPzmKn/SJ//yA8d/74pef67ev9cuI69E7fnescnNjq9zY3buZXfjqanWzUlmYX5h76daLlXKeoy53MtXd2iPEP1++8WTf9v/690VHeTz+1Cnt/9qJrW4ddcC/+t8bP/xKv/gHEd/4au/3/+kT4mdj4teL9f49fdvS1d/1nb47i7/Svv4Hn/T9v3FK3I73/763MuChAMAQNHb31pdqter2ua5MxDmfsGsleUR1tjKClRhirOzX5LOe55kiZbbUuX+6j/nTL955Jts28qt6Liuj65OA4bh/04+6JgAAAAAAAAAAAAAAQD+P/N+J0pOin8cTNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhn/w8AAP//gMjG1Q==") (rerun: 64) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x6200}], 0x1, 0x0, 0x0, 0x0) (async) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) (async, rerun: 64) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f0000001900"}) (async, rerun: 64) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) (async, rerun: 64) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x0) (rerun: 64) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x8e05a, 0x0) 7.121455538s ago: executing program 4 (id=802): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x101001) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x4, &(0x7f0000006680)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xe2242, 0xfb) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), 0x0, 0x0, 0x1) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x11b802, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r2, 0x2, {0x0, 0x0, 0x0, 0x520e46dc, 0xffc0000000000000, 0x0, 0x5, 0x15, 0x18, "51c722018d2c8e71713588e11efa9c5eb42dbb9144351abbbbb508b94b402ece9b8fb18fda1f5a9b7262ba5edbed6ed76c2cd489fbbe6a3cfde2a9963fe76a1e", "0f01aaba24299995f92110b4f8a16ebc7c63f90bf5de363929ac95b2bbe7335f25aa04ae9c0ea8a536c7e801f92d871be6b884752d1434cc4ce3ced522749dc2", "140a560be256a7969ee812822336bd05bdcb334e698b011af2ba43a85e407e46", [0x9, 0x3]}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0xe, 0x0, &(0x7f0000000240)="259a53f271a76d2608004c6588a8", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.900343691s ago: executing program 4 (id=803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000001000000004e20004ff7ff00000a008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000000000000000000800000000000000000fcffffff000000000000030100000000c4000500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb00000000320000000200000000000000000000000000000000000001fdffffff0403000000080000000800000000000000000000000000000000000000000000000004d43200000002"], 0x17c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 6.667538046s ago: executing program 4 (id=804): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) io_uring_setup(0x0, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x1) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x2040400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xba, 0x33, &(0x7f0000000180)="650435e092318ccd82c373904f6aa650acc64766189e59aac4da27d7472d258052bec6ce56fb8078f160424800d9340d5070a2adf4d1607d09377078efad6a347997cf43456070f6e8cc9ba713f5e89c857c22518211ead272f4f372b5a7b5960ae8818e9ad7a52c4b8a07c7577550a836dfb4ca47a363c1e5ee205c322b964930f9bea6069f747bed5945f5b90c8762937962fb502e0fdb9353235c14a07ccf2ea70c1b930719e0ac9c411e6fca72626f73a17643bd9629ccbb", &(0x7f0000000240)=""/51, 0x1, 0x0, 0x64, 0x0, &(0x7f0000000340)="4d00c6a853f621892ea00885f8df81af97ac00fcf58948e0210682b4a849a5a0d41c02b25248cd800f367fb8d524825ac8270c59fe016c99eb5c49b95014d089bc605b7b1b706c1e00464508f0cd6582f3ad6166cc781fc52ce41934caa0b74434a94fae", &(0x7f00000003c0), 0x0, 0x0, 0x40}, 0x50) io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x2}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r3, 0xffff800000000002, 0x1) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.271525087s ago: executing program 5 (id=809): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, 0x0, 0xc810) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000180)}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) 6.054238508s ago: executing program 4 (id=812): socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x35eb0000) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@bh}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") io_setup(0x20fe, 0x0) open(0x0, 0x148640, 0x78e22799f4a46eaf) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x0, 0x9, 0x6, 0x8, 0x6, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="7000f120", @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf2500000000050006007f00000006000300df0d00000c000f00050000000000000005000d000100000006000200010000000c001600d80e000000000000060003000000000008001900ac1e00010c000f00000000000000000006001a004e240000"], 0x70}, 0x1, 0x0, 0x0, 0x8801}, 0x80) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x7, 0x0, 0x82, 0x3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xcd43a52fc7de7ba1, 0x1, 0x0, 0x9, 0x0, 0x1fffffff, 0x4000, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x0, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0xc0104d08, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x5, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, 0x40, 0x20, 0x7, 0x800}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00\x00\x00\x00'], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) r8 = fsopen(&(0x7f0000000080)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 5.893559073s ago: executing program 5 (id=817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008414}, 0x4800) 5.893358963s ago: executing program 43 (id=817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008414}, 0x4800) 5.86862237s ago: executing program 0 (id=818): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = io_uring_setup(0x6de2, &(0x7f0000000440)={0x0, 0x28a8, 0x10, 0x10000, 0x33f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000001c0)) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f00000004c0)={0x64, "adbc26c018e25694b7c656d6467b7774d9ce236029f84d8164827778f823cdf459e804da6c053eff649f4758b82dccad5f49f4e4ebf7d04a195d0f70c1d85f1de56786b6cfcecbefdab2960afd3811d972e6407c3216ca0eac068ab98f6ece760104a3d7b2357321e2f2d8d95309055a86a8b39e4d655e23fbf23b798151fae5"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf41dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x204, 0xf1fc, 0xa, 0x3, 0x9, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) rseq(0xfffffffffffffffe, 0xfffffffffffffeb2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000200000001005, 0x19dff, 0x7fffffff}}}, 0x90) 5.553552619s ago: executing program 4 (id=820): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) 5.545535832s ago: executing program 0 (id=821): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x5, 0x10022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x8c84, 0x0, 0x11000, 0x9, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xe000000000000001, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x4000804) 4.429202115s ago: executing program 0 (id=823): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5a}, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x48bdfe675c756438) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) listen(0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000000000086111500000000000180000000000005a0000004000000000d500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x2042, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x60000526) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x4010) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x4008414}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) socket$pppoe(0x18, 0x1, 0x0) 4.194497891s ago: executing program 0 (id=824): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0xc) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x4004550c, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffe0) (async) socket$key(0xf, 0x3, 0x2) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) (async) socket$inet6(0xa, 0x5, 0x88c) bpf$MAP_CREATE(0x0, &(0x7f0000003b00)=@bloom_filter={0x1e, 0x33, 0x9, 0x7f89, 0x68000, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x8, @value=r5}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nomblk_io_submit}, {@nombcache}]}, 0x1, 0x4dd, &(0x7f0000001040)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="280000000000000029000000040000003c01020012004402000204"], 0x28}, 0xc0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x6, 0x4, 0x410, 0x1, 0xd27, '\x00', 0x0, r6, 0x1, 0x5, 0x0, 0x2}, 0x50) 3.929505395s ago: executing program 4 (id=826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000001000000004e20004ff7ff00000a008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000000000000000000800000000000000000fcffffff000000000000030100000000c4000500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb00000000320000000200000000000000000000000000000000000001fdffffff0403000000080000000800000000000000000000000000000000000000000000000004d43200000002"], 0x17c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 3.891583396s ago: executing program 44 (id=826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001002dbd7040ffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000001000000004e20004ff7ff00000a008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000000000000000000800000000000000000fcffffff000000000000030100000000c4000500fc000000000000000000000000000004000000053c000000000000000000000000000000000000000000000002350000000200000000000000000000fc7f0000fe8000000000000000000000000000bb00000000320000000200000000000000000000000000000000000001fdffffff0403000000080000000800000000000000000000000000000000000000000000000004d43200000002"], 0x17c}, 0x1, 0x0, 0x0, 0x40015}, 0x20000010) 3.227451103s ago: executing program 9 (id=834): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0xb0}}], 0x1, 0x4000801) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e00000000000000000028000280240003801000018004000300080001"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x7}}, {@errors_continue}, {@errors_continue}]}, 0x9, 0x3d6, &(0x7f00000004c0)="$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") chmod(&(0x7f0000000180)='./file0\x00', 0x379) 3.093764721s ago: executing program 0 (id=835): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) preadv(r0, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f0000000800)=""/190, 0xbe}], 0x2, 0x39, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000000)="5312a2937fa1f45ef261b8cb53fd9eef5c2f705a9e55f85052e92d6ac15028f69bf5e7fbb7627f2674", 0x29, r2}, 0x68) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@norecovery}, {@dioread_nolock}, {@norecovery}]}, 0x5, 0x4f3, &(0x7f00000005c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r3, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) setns(0xc9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) listen(0xffffffffffffffff, 0x100) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000400000000000000000000020000ac1435bb00000000"], 0x18}, 0x8050) socket$unix(0x1, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f00000005c0)) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x4}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d40)=ANY=[@ANYBLOB="b8000000190001000000000000000100e0000002000000000000000000000000000000000000000000000000000000000000fffc000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800020000000000100000000000000002000000010000000000000000000000060000000000000075b4ffffffffffffffffffffffffffff0400000000001200030000001000000000000000000000200200000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000ca9e467de4e37a6d17aac31c53b84b9b5137f1f493ff13a033908ff4c7132bc56c653eb084919f30a04a82257cc8a248c3180d2d6bda1233a38657d8154b0e266b003cbb49947b67a68b2d4d6111e591805f9a5d027b3633f3e413bd87ceb0461ff480a96c0480f089bbc39cb55882ac2f51786f7c120c4aafef51d1b3f4b88768d0d1a330664f55940bf842bd23b5b8d0fff78cbbe496fa8e0aa9af48", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) 2.968401746s ago: executing program 9 (id=836): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0xc810) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) 2.797972064s ago: executing program 9 (id=837): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003462000bfa30000000000001702000000feffff7a0af0ff14ffffff61a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f008500000088000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81e48439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b51949b7d4b67300580d854c280206bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccffff0000360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb933d81967c4d0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794c3133bdfa17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc69a0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cb3475be3376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a4552d4550a717339bdcae1d5c2e78d0a2f550a865811c0162d6dd0b5f834b6295f2a2b0045d8b0033a878daae3db955f2689e3e13842a6219da4e38dc4a14e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440), 0x10}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockname$unix(r0, &(0x7f0000019080)=@abs, &(0x7f0000019100)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xb5, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xf}, 0x80, 0x1224, 0xffffffff, 0x8, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010020000000"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 1.401773016s ago: executing program 0 (id=839): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x40000000, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x4000800) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x100188, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c45c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x4, 0x1, 0x7, 0x94da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000ac0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB='b *:4\tm'], 0xa) close(r3) r6 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x7fffffffffffffff, 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 1.20936364s ago: executing program 6 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x4c}}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0xc, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000440)=0x634, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 918.696522ms ago: executing program 9 (id=842): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x9c}}, 0x0) read$msr(r0, &(0x7f000000c300)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000300), 0xa}, 0x116614, 0x8, 0x11000, 0x6, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) personality(0xfe47fef9f5ff7379) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/tunl0/threaded\x00', 0x2, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) 765.882125ms ago: executing program 6 (id=843): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x2, 0x1, 0x5c4842ee, 0x6}) write(r0, &(0x7f0000000240)="333f4a4922f66fef0b360300a5df", 0xe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x70bd2d, 0x4000800, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x0, 0x1}}, @NDA_DST_IPV6={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x90) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r4, 0x7}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x64}}, 0x804) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x9}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x7c}}, 0x0) connect$packet(r0, &(0x7f0000000200)={0x11, 0xe3, r8, 0x1, 0x8, 0x6, @multicast}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680)) getgroups(0x0, 0x0) 586.440755ms ago: executing program 2 (id=827): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x141) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0xc040480) mkdir(0x0, 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 441.371727ms ago: executing program 6 (id=844): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x10, 0x84, 0x7, @local}, @dstaddrv6={0x1c, 0x84, 0x8, @rand_addr=' \x01\x00'}, @dstaddrv6={0x1c, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x48, 0x4855}, 0x24000052) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000200)={@val={0x0, 0x880a}, @val={0x2, 0x1, 0x0, 0x8, 0xfffa, 0x7}, @eth={@random="d06d6558b77d", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_mc={0x8864, {[], @ipv6=@udp={0xe, 0x6, "22a577", 0x64, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, {[], {0x4e22, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "2db8870d38857cee26893eb1093477fe10bcf27c89ae1dc4ed36c1c32a384c93", "93d7db5c03de28d26f7bf944ab0e4f10", {"d282b297362c2b25cee711c9c69b1159", "4def0d0ed696b812a9690d7da706265a"}}}}}}}}}}, 0xac) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x29}, {[], {0x4e1d, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "dd43aa8d95b33e5ed596e6919597253719a9e125249b6aca315aa74bffebcb89", "1d23c4aa9abb464b4435c00dd2466c6253294e6a7fba0cec79daec4f865c54fba8f22e3a8d7c557f5823fd9ef365734a", "a0a8856e2c0d5612402647995a3e249e1564d82433fa98bf29211c6d", {"ab1b63c06eedb59420c9f32c6f3e2c88", "75d0edc57873724774ae62f865611e1a"}}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 400.583948ms ago: executing program 9 (id=845): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0xc810) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) 352.378391ms ago: executing program 2 (id=846): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001100)={[{@grpquota}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@test_dummy_encryption}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = syz_io_uring_setup(0x6818, &(0x7f0000000100)={0x0, 0x5cd3, 0x4, 0x0, 0x54}, &(0x7f0000000f00), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@mcast2, 0x4e20, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x4000000000}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x2f}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x80}, {0x0, 0x400000000, 0x1}, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff, 0x0, 0x800}}, 0xe8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x9, 0x2e046481c294e94a, 0x30, r0, 0x0) inotify_init() ioprio_set$pid(0x2, 0x0, 0x6000) ioprio_get$uid(0x3, 0x0) socketpair(0x29, 0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x0, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000120a01020000000000000000020000000900020073797a3100000000080004400000000008000340000000011400000011118ff705000000000000000000000a"], 0x58}}, 0x0) socket$inet(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x1, 0x3ff]) 277.515542ms ago: executing program 9 (id=847): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) 277.118753ms ago: executing program 6 (id=848): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8040) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100)=0x2, 0x4) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 258.314868ms ago: executing program 6 (id=849): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5a}, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x48bdfe675c756438) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) listen(0xffffffffffffffff, 0x0) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000000000086111500000000000180000000000005a0000004000000000d500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x2042, 0x0) prlimit64(0x0, 0x2, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x60000526) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020601020000000000000010000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008000640000000cd050005000a0000000500010006"], 0x58}}, 0x4010) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x4008414}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) socket$pppoe(0x18, 0x1, 0x0) 220.782038ms ago: executing program 2 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0xc, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000440)=0x634, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00', @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdf252e00000008000300", @ANYRES32=r8, @ANYBLOB="500051804c0000800500020005000000090001004f23b93436063020ef000000130004008f9c97606876743f0107cf50fb217c0009000100ab40c43d1c000000090001002a886fa317000000040006000400060019003400cde6a37c987aac6a3ead48604d971afe9a0cca0dd100000004000101bdc1090f443e726bdc806f101b64b31d4e1876cffc6c6362c426e9df0d2c643ddc652df8cae8022fc7698272d938556d99bad95327fdca49e6e4e3dc0f61f0a58d377479c38bdc9517633f83a9a83ae064e8a89deb8fde8c"], 0x8c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) recvmsg$inet_nvme(r10, &(0x7f0000002300)={&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000ac0)=""/60, 0x3c}, {&(0x7f0000000840)=""/1, 0x1}, {&(0x7f0000000b40)=""/164, 0xa4}, {&(0x7f0000000940)=""/110, 0x6e}, {0xfffffffffffffffd}, {&(0x7f00000009c0)=""/36, 0x24}, {&(0x7f0000000a00)=""/144, 0x90}, {&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000c80)=""/223, 0xdf}, {&(0x7f0000000d80)=""/219, 0xdb}], 0xa, &(0x7f0000001300)=""/4096, 0x1000}, 0x40000002) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xb) r11 = socket$inet(0x2, 0x1, 0x6) bind$inet(r11, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r11, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) 121.387666ms ago: executing program 6 (id=851): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440), 0x10}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockname$unix(r0, &(0x7f0000019080)=@abs, &(0x7f0000019100)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xb5, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0xf}, 0x80, 0x1224, 0xffffffff, 0x8, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2081}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x24, 0x1, {{0x1d, 0x0, 0x4, 0x7fff, 0x800, 0x6795}, {0xa, 0x2, 0x7ff, 0x8, 0x40, 0xffffff81}, 0x3, 0xd6d2, 0xd11}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b67, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010020000000"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) 0s ago: executing program 2 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x4c}}, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0xc12a, 0x6, 0xc, 0x6, 0x7, 0x400004, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000440)=0x634, 0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, 0x17, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x8854) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0xc840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) kernel console output (not intermixed with test programs): tclass=dir permissive=1 [ 100.327029][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.327059][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.327187][ T6087] bridge_slave_0: entered allmulticast mode [ 100.327673][ T6087] bridge_slave_0: entered promiscuous mode [ 100.335536][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.335573][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.335756][ T6087] bridge_slave_1: entered allmulticast mode [ 100.336269][ T6087] bridge_slave_1: entered promiscuous mode [ 100.350056][ T29] audit: type=1400 audit(1790780321.152:667): avc: denied { write } for pid=6165 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.451888][ T6087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.454477][ T6087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.586084][ T6170] loop8: detected capacity change from 0 to 8192 [ 100.600014][ T6087] team0: Port device team_slave_0 added [ 100.601526][ T6087] team0: Port device team_slave_1 added [ 100.619674][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.619687][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.643108][ T6087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.646972][ T6087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.647116][ T6087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.647195][ T6087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.699763][ T6087] hsr_slave_0: entered promiscuous mode [ 100.704072][ T6087] hsr_slave_1: entered promiscuous mode [ 100.704617][ T6087] debugfs: 'hsr0' already exists in 'hsr' [ 100.704647][ T6087] Cannot create hsr debugfs directory [ 100.917216][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.9.514'. [ 101.103309][ T6087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.111860][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.114468][ T6087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.123036][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.125234][ T6087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.137891][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.142433][ T6087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.146964][ T6087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.183897][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.183959][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.184122][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.184255][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.243912][ T6087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.255717][ T6087] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.303200][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.441883][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.441921][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.442025][ T6088] bridge_slave_0: entered allmulticast mode [ 101.442433][ T6088] bridge_slave_0: entered promiscuous mode [ 101.453855][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.453885][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.453951][ T6088] bridge_slave_1: entered allmulticast mode [ 101.454453][ T6088] bridge_slave_1: entered promiscuous mode [ 101.504701][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.519355][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.580967][ T3609] bridge_slave_1: left allmulticast mode [ 101.580989][ T3609] bridge_slave_1: left promiscuous mode [ 101.581119][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.581786][ T3609] bridge_slave_0: left allmulticast mode [ 101.581951][ T3609] bridge_slave_0: left promiscuous mode [ 101.582105][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.625625][ T3609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.628901][ T3609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.629223][ T3609] bond0 (unregistering): Released all slaves [ 101.638430][ T6088] team0: Port device team_slave_0 added [ 101.643398][ T6088] team0: Port device team_slave_1 added [ 101.655242][ T29] audit: type=1400 audit(1790780322.462:668): avc: denied { mount } for pid=6189 comm="syz.9.515" name="/" dev="rpc_pipefs" ino=16076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 101.671315][ T29] audit: type=1400 audit(1790780322.482:669): avc: denied { write } for pid=6199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.679150][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.688171][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.707056][ T3609] hsr_slave_0: left promiscuous mode [ 101.708033][ T3609] hsr_slave_1: left promiscuous mode [ 101.708498][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.713603][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.735780][ T29] audit: type=1400 audit(1790780322.542:670): avc: denied { write } for pid=6211 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.781876][ T3609] team0 (unregistering): Port device team_slave_1 removed [ 101.784502][ T3609] team0 (unregistering): Port device team_slave_0 removed [ 101.814965][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.814979][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.815008][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.819108][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 101.819629][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.829269][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.829303][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.901170][ T6088] hsr_slave_0: entered promiscuous mode [ 101.901541][ T6088] hsr_slave_1: entered promiscuous mode [ 101.989230][ T6087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.005411][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.005447][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.005512][ T6145] bridge_slave_0: entered allmulticast mode [ 102.005996][ T6145] bridge_slave_0: entered promiscuous mode [ 102.010309][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.010339][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.010477][ T6145] bridge_slave_1: entered allmulticast mode [ 102.010931][ T6145] bridge_slave_1: entered promiscuous mode [ 102.027736][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.029157][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.058307][ T29] audit: type=1400 audit(1790780322.862:671): avc: denied { write } for pid=6218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.078602][ T6145] team0: Port device team_slave_0 added [ 102.081885][ T3609] IPVS: stop unused estimator thread 0... [ 102.082140][ T6145] team0: Port device team_slave_1 added [ 102.084654][ T29] audit: type=1400 audit(1790780322.892:672): avc: denied { write } for pid=6244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.113869][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.113882][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.113980][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.118953][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 102.129039][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.129054][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.129082][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.164145][ T6145] hsr_slave_0: entered promiscuous mode [ 102.164650][ T6145] hsr_slave_1: entered promiscuous mode [ 102.164814][ T6145] debugfs: 'hsr0' already exists in 'hsr' [ 102.164827][ T6145] Cannot create hsr debugfs directory [ 102.166415][ T6251] loop8: detected capacity change from 0 to 512 [ 102.176053][ T6251] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 102.184601][ T6251] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.520: bad orphan inode 131083 [ 102.184627][ T6251] loop8: lost filesystem error report for type 5 error -117 [ 102.185230][ T6251] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.209108][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.234243][ T6087] veth0_vlan: entered promiscuous mode [ 102.257865][ T6087] veth1_vlan: entered promiscuous mode [ 102.278360][ T29] audit: type=1400 audit(1790780323.082:673): avc: denied { unmount } for pid=5307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 102.304879][ T6087] veth0_macvtap: entered promiscuous mode [ 102.308497][ T6087] veth1_macvtap: entered promiscuous mode [ 102.318993][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.325960][ T6087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.337991][ T6274] FAULT_INJECTION: forcing a failure. [ 102.337991][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.338055][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.8.524 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.338079][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.338170][ T6274] Call Trace: [ 102.338177][ T6274] [ 102.338184][ T6274] __dump_stack+0x1d/0x30 [ 102.338208][ T6274] dump_stack_lvl+0x95/0xd0 [ 102.338230][ T6274] dump_stack+0x15/0x1b [ 102.338250][ T6274] should_fail_ex+0x262/0x280 [ 102.338306][ T6274] should_fail+0xb/0x20 [ 102.338330][ T6274] should_fail_usercopy+0x1a/0x20 [ 102.338356][ T6274] _copy_from_iter+0xcc/0xe70 [ 102.338423][ T6274] ? should_failslab+0x8c/0xb0 [ 102.338512][ T6274] ? __kvmalloc_node_noprof+0x326/0x5c0 [ 102.338592][ T6274] ? file_tty_write+0x1cc/0x6a0 [ 102.338626][ T6274] file_tty_write+0x339/0x6a0 [ 102.338659][ T6274] ? __pfx_tty_write+0x10/0x10 [ 102.338685][ T6274] tty_write+0x25/0x30 [ 102.338765][ T6274] vfs_write+0x57f/0x9a0 [ 102.338851][ T6274] ksys_write+0xdc/0x1a0 [ 102.338882][ T6274] __x64_sys_write+0x40/0x50 [ 102.338910][ T6274] x64_sys_call+0x154e/0x2550 [ 102.338954][ T6274] do_syscall_64+0x112/0x360 [ 102.339055][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.339077][ T6274] RIP: 0033:0x7f30cc32e159 [ 102.339094][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.339116][ T6274] RSP: 002b:00007f30cad87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.339197][ T6274] RAX: ffffffffffffffda RBX: 00007f30cc5b5fa0 RCX: 00007f30cc32e159 [ 102.339268][ T6274] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000003 [ 102.339281][ T6274] RBP: 00007f30cad87090 R08: 0000000000000000 R09: 0000000000000000 [ 102.339293][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.339306][ T6274] R13: 00007f30cc5b6038 R14: 00007f30cc5b5fa0 R15: 00007ffd936afdf8 [ 102.339351][ T6274] [ 102.339524][ T3660] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.339559][ T3660] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.339726][ T3660] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.486088][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 102.499015][ T6088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.507517][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.525917][ T6145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.525950][ T6145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.532361][ T6088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.535628][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.553227][ T6088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.557415][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.562372][ T6088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.585414][ T6088] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.607264][ T6145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.607298][ T6145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.340568][ T6283] loop9: detected capacity change from 0 to 8192 [ 103.370750][ T3553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.466978][ T6145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.467088][ T6145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.558616][ T6145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.558683][ T6145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.630301][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.684731][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.686623][ T6317] loop3: detected capacity change from 0 to 512 [ 103.687978][ T6145] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.707603][ T6314] loop8: detected capacity change from 0 to 512 [ 103.707990][ T6314] EXT4-fs: Ignoring removed bh option [ 103.711434][ T6317] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.529: inode has both inline data and extents flags [ 103.711461][ T6317] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.711764][ T6317] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.529: couldn't read orphan inode 15 (err -117) [ 103.711838][ T6317] loop3: lost filesystem error report for type 5 error -117 [ 103.712354][ T6317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.713216][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.724410][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.724446][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.729756][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.729792][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.733981][ T6314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.734091][ T6314] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.739855][ T6145] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.745429][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.753526][ T6145] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.762048][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.762612][ T6145] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.773711][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.832780][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.869210][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 103.964326][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.992178][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.003998][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.004029][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.019343][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.019413][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.096777][ T6331] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.200779][ T6355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21536 sclass=netlink_route_socket pid=6355 comm=syz.8.532 [ 104.307347][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.422407][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 104.422437][ T6373] bridge_slave_1: left allmulticast mode [ 104.422455][ T6373] bridge_slave_1: left promiscuous mode [ 104.425999][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.444356][ T6373] bridge_slave_0: left allmulticast mode [ 104.444435][ T6373] bridge_slave_0: left promiscuous mode [ 104.444593][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.551423][ T6365] loop9: detected capacity change from 0 to 1024 [ 104.642136][ T6365] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.642487][ T6365] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.659112][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.9.531'. [ 104.680019][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.9.531'. [ 104.739665][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.772610][ T5307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.822430][ T6088] veth0_vlan: entered promiscuous mode [ 104.833846][ T6088] veth1_vlan: entered promiscuous mode [ 104.864315][ T6088] veth0_macvtap: entered promiscuous mode [ 104.876257][ T6088] veth1_macvtap: entered promiscuous mode [ 104.888621][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.899404][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.939948][ T3609] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.940024][ T3609] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.940074][ T3609] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.940165][ T3609] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.025043][ T6431] loop8: detected capacity change from 0 to 512 [ 105.045952][ T6431] EXT4-fs: Mount option(s) incompatible with ext2 [ 105.080943][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 105.081033][ T29] audit: type=1400 audit(1790780325.893:696): avc: denied { write } for pid=6424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.090615][ T6431] loop8: detected capacity change from 0 to 512 [ 105.090884][ T6431] EXT4-fs: Ignoring removed bh option [ 105.090907][ T6431] EXT4-fs: Ignoring removed nobh option [ 105.090983][ T6431] EXT4-fs: quotafile must be on filesystem root [ 105.160832][ T29] audit: type=1400 audit(1790780325.973:697): avc: denied { write } for pid=6445 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.164607][ T6145] veth0_vlan: entered promiscuous mode [ 105.177737][ T29] audit: type=1400 audit(1790780325.983:698): avc: denied { mac_admin } for pid=6420 comm="syz.8.535" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.201989][ T6145] veth1_vlan: entered promiscuous mode [ 105.223403][ T6431] loop8: detected capacity change from 0 to 512 [ 105.223650][ T6431] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 105.253034][ T6145] veth0_macvtap: entered promiscuous mode [ 105.266966][ T6145] veth1_macvtap: entered promiscuous mode [ 105.295220][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.302246][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.331359][ T3683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.331538][ T3683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.331756][ T3683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.331796][ T3683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.540818][ T6477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.367250][ T6478] loop6: detected capacity change from 0 to 8192 [ 106.547257][ T29] audit: type=1400 audit(1790780327.353:699): avc: denied { write } for pid=6461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.558593][ T29] audit: type=1400 audit(1790780327.363:700): avc: denied { bind } for pid=6482 comm="syz.9.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.559706][ T29] audit: type=1400 audit(1790780327.373:701): avc: denied { connect } for pid=6482 comm="syz.9.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.564390][ T29] audit: type=1400 audit(1790780327.373:702): avc: denied { write } for pid=6482 comm="syz.9.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.626125][ T29] audit: type=1400 audit(1790780327.433:703): avc: denied { write } for pid=6490 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.692891][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 106.967386][ T29] audit: type=1400 audit(1790780327.773:704): avc: denied { write } for pid=6495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.022934][ T29] audit: type=1400 audit(1790780327.833:705): avc: denied { getopt } for pid=6511 comm="syz.8.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.063519][ T6512] loop8: detected capacity change from 0 to 128 [ 107.217306][ T6512] FAULT_INJECTION: forcing a failure. [ 107.217306][ T6512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.217339][ T6512] CPU: 0 UID: 0 PID: 6512 Comm: syz.8.547 Not tainted syzkaller #0 PREEMPT(lazy) [ 107.217366][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.217380][ T6512] Call Trace: [ 107.217387][ T6512] [ 107.217404][ T6512] __dump_stack+0x1d/0x30 [ 107.217431][ T6512] dump_stack_lvl+0x95/0xd0 [ 107.217455][ T6512] dump_stack+0x15/0x1b [ 107.217477][ T6512] should_fail_ex+0x262/0x280 [ 107.217575][ T6512] should_fail+0xb/0x20 [ 107.217600][ T6512] should_fail_usercopy+0x1a/0x20 [ 107.217665][ T6512] strncpy_from_user+0x27/0x250 [ 107.217693][ T6512] do_getname+0x59/0x1c0 [ 107.217726][ T6512] getname_flags+0x1d/0x30 [ 107.217764][ T6512] do_sys_openat2+0x6c/0x130 [ 107.217792][ T6512] __x64_sys_openat+0xf2/0x120 [ 107.217840][ T6512] x64_sys_call+0x1f72/0x2550 [ 107.217868][ T6512] do_syscall_64+0x112/0x360 [ 107.217904][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.217927][ T6512] RIP: 0033:0x7f30cc32e159 [ 107.217944][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.217964][ T6512] RSP: 002b:00007f30cad87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.218019][ T6512] RAX: ffffffffffffffda RBX: 00007f30cc5b5fa0 RCX: 00007f30cc32e159 [ 107.218074][ T6512] RDX: 00000000000026e1 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 107.218118][ T6512] RBP: 00007f30cad87090 R08: 0000000000000000 R09: 0000000000000000 [ 107.218131][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.218145][ T6512] R13: 00007f30cc5b6038 R14: 00007f30cc5b5fa0 R15: 00007ffd936afdf8 [ 107.218165][ T6512] [ 107.424536][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.548'. [ 107.598255][ T6537] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.622694][ T6537] loop8: detected capacity change from 0 to 512 [ 107.625951][ T6537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 107.645281][ T6537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.645410][ T6537] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.777265][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.843287][ T6550] loop9: detected capacity change from 0 to 512 [ 107.850297][ T6550] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.864223][ T6550] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 107.866368][ T6550] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 107.866527][ T6550] EXT4-fs (loop9): orphan cleanup on readonly fs [ 107.866972][ T6550] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.552: Failed to acquire dquot type 1 [ 107.866996][ T6550] loop9: lost filesystem error report for type 5 error -5 [ 107.867248][ T6550] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.552: Failed to acquire dquot type 1 [ 107.867270][ T6550] loop9: lost filesystem error report for type 5 error -5 [ 107.867542][ T6550] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.552: Invalid block bitmap block 0 in block_group 0 [ 107.867601][ T6550] loop9: lost filesystem error report for type 5 error -117 [ 107.867724][ T6550] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 107.867778][ T6550] loop9: lost filesystem error report for type 5 error -117 [ 107.868117][ T6550] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.552: Failed to acquire dquot type 1 [ 107.868160][ T6550] loop9: lost filesystem error report for type 5 error -5 [ 107.869051][ C0] EXT4-fs (loop9): error count since last fsck: 5 [ 107.869067][ C0] EXT4-fs (loop9): last error at time 1790780328: ext4_acquire_dquot:7069 [ 107.879392][ T6550] EXT4-fs (loop9): 1 orphan inode deleted [ 107.880388][ T6550] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.027183][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.555'. [ 108.027205][ T6570] sch_fq: defrate 0 ignored. [ 108.043081][ T6570] loop3: detected capacity change from 0 to 128 [ 108.051086][ T6570] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 108.057413][ T6570] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.057610][ T6570] ext2 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.121601][ T6087] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.261909][ T5307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.290724][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.554'. [ 109.182345][ T6596] loop8: detected capacity change from 0 to 8192 [ 109.273856][ T6595] loop9: detected capacity change from 0 to 164 [ 109.376399][ T6594] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.423503][ T6594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.555772][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 109.775691][ T6619] netlink: 12 bytes leftover after parsing attributes in process `syz.9.565'. [ 109.794189][ T6619] vlan2: entered promiscuous mode [ 109.794210][ T6619] bond0: entered promiscuous mode [ 109.794225][ T6619] bond_slave_0: entered promiscuous mode [ 109.794348][ T6619] bond_slave_1: entered promiscuous mode [ 109.838639][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 109.962842][ T6594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.963302][ T6594] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.066288][ T6594] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.560: bg 0: block 217: padding at end of block bitmap is not set [ 110.091758][ T6594] EXT4-fs (loop3): Remounting filesystem read-only [ 110.156018][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.6.567'. [ 110.156568][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.6.567'. [ 110.156887][ T6649] netlink: 52 bytes leftover after parsing attributes in process `syz.6.567'. [ 110.162571][ T6649] netlink: 48 bytes leftover after parsing attributes in process `syz.6.567'. [ 110.224440][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 110.224459][ T29] audit: type=1400 audit(1790780331.033:725): avc: denied { write } for pid=6642 comm="syz.8.566" path="socket:[17116]" dev="sockfs" ino=17116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.261900][ T3553] IPVS: starting estimator thread 0... [ 110.338694][ T29] audit: type=1400 audit(1790780331.143:726): avc: denied { write } for pid=6656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.349376][ T6661] IPVS: using max 2448 ests per chain, 122400 per kthread [ 110.404570][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.404898][ T3609] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 110.404925][ T3609] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 110.505753][ T29] audit: type=1400 audit(1790780331.313:727): avc: denied { write } for pid=6673 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.583597][ T6670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 110.588087][ T6649] set_capacity_and_notify: 1 callbacks suppressed [ 110.588111][ T6649] loop6: detected capacity change from 0 to 512 [ 110.603316][ T6649] ext4: Bad value for 'commit' [ 111.046684][ T6670] sd 0:0:1:0: device reset [ 111.055034][ T6654] loop9: detected capacity change from 0 to 512 [ 111.071705][ T6654] EXT4-fs: Ignoring removed bh option [ 111.153824][ T29] audit: type=1400 audit(1790780331.964:728): avc: denied { write } for pid=6677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.159674][ T6654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.163934][ T6654] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.179385][ T29] audit: type=1400 audit(1790780331.984:729): avc: denied { write } for pid=6653 comm="syz.9.569" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.242547][ T29] audit: type=1400 audit(1790780332.054:730): avc: denied { listen } for pid=6700 comm="syz.6.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 111.251486][ T29] audit: type=1400 audit(1790780332.064:731): avc: denied { write } for pid=6653 comm="syz.9.569" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.265513][ T6702] loop3: detected capacity change from 0 to 512 [ 111.279456][ T29] audit: type=1400 audit(1790780332.094:732): avc: denied { write } for pid=6703 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.280056][ T6702] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 111.283867][ T6702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.575: bg 0: block 4: invalid block bitmap [ 111.283894][ T6702] loop3: lost filesystem error report for type 5 error -117 [ 111.284463][ T6702] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 111.284484][ T6702] loop3: lost filesystem error report for type 5 error -117 [ 111.286001][ T6702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.575: invalid indirect mapped block 1 (level 1) [ 111.286044][ T6702] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 111.288212][ T6702] EXT4-fs (loop3): 1 truncate cleaned up [ 111.290648][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.348220][ T5307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.354748][ T3683] IPVS: starting estimator thread 0... [ 111.459467][ T6710] IPVS: using max 2496 ests per chain, 124800 per kthread [ 112.586429][ T6802] loop6: detected capacity change from 0 to 512 [ 112.658018][ T6802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.659360][ T6802] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.716249][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.749703][ T6803] loop4: detected capacity change from 0 to 128 [ 112.763653][ T3288] udevd[3288]: incorrect ext4 checksum on /dev/loop4 [ 112.776930][ T6803] ext2: Bad value for 'barrier' [ 112.863342][ T6807] loop9: detected capacity change from 0 to 512 [ 112.896278][ T6807] ext4: Unknown parameter 'uid' [ 112.951239][ T6807] tmpfs: Bad value for 'size' [ 112.969148][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.9.583'. [ 113.035466][ T6842] 9p: Bad value for 'wfdno' [ 113.111290][ T6088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.144842][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 113.146631][ T6862] PM: suspend entry (deep) [ 113.221484][ T3547] Bluetooth: hci0: Frame reassembly failed (-84) [ 113.241523][ T3535] Filesystems sync: 0.094 seconds [ 113.440156][ T6862] Freezing user space processes [ 115.230655][ T3802] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 115.237706][ T6862] Freezing user space processes completed (elapsed 1.797 seconds) [ 115.237721][ T6862] OOM killer disabled. [ 115.237724][ T6862] Freezing remaining freezable tasks [ 115.244619][ T6862] Freezing remaining freezable tasks completed (elapsed 0.006 seconds) [ 115.244819][ T6862] printk: Suspending console(s) (use no_console_suspend to debug) [ 115.320272][ T6862] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 115.320313][ T6862] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 115.320352][ T6862] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 115.320419][ T6862] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 115.320451][ T6862] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 115.320500][ T6862] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 115.320530][ T6862] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 115.320560][ T6862] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 115.320630][ T6862] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 115.320666][ T6862] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 115.320704][ T6862] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 115.320933][ T6862] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 115.320969][ T6862] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 115.321009][ T6862] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 115.321061][ T6862] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 115.321172][ T6862] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 115.378193][ T3660] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 115.889511][ T6862] ACPI: PM: Preparing to enter system sleep state S3 [ 115.889775][ T6862] ACPI: PM: Saving platform NVS memory [ 115.889893][ T6862] Disabling non-boot CPUs ... [ 115.894076][ T6862] smpboot: CPU 1 is now offline [ 115.901920][ T6862] ACPI: PM: Low-level resume complete [ 115.901968][ T6862] ACPI: PM: Restoring platform NVS memory [ 115.917850][ T6862] Enabling non-boot CPUs ... [ 115.917975][ T6862] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 115.921739][ T6862] CPU1 is up [ 115.921905][ T6862] ACPI: PM: Waking up from system sleep state S3 [ 115.975521][ T3564] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 116.167664][ T6862] OOM killer enabled. [ 116.167675][ T6862] Restarting tasks: Starting [ 116.217083][ T6862] Restarting tasks: Done [ 116.217187][ T6862] random: crng reseeded on system resumption [ 116.228083][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 116.229473][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 116.229489][ T29] audit: type=1400 audit(1790780337.002:789): avc: denied { write } for pid=6884 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.237700][ T6862] PM: suspend exit [ 116.314032][ T6876] loop3: detected capacity change from 0 to 8192 [ 116.445606][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.8.595'. [ 116.449990][ T29] audit: type=1400 audit(1790780337.262:790): avc: denied { ioctl } for pid=6902 comm="syz.4.597" path="socket:[17268]" dev="sockfs" ino=17268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.454893][ T29] audit: type=1400 audit(1790780337.262:791): avc: denied { write } for pid=6888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.493469][ T6903] xt_hashlimit: size too large, truncated to 1048576 [ 116.494220][ T29] audit: type=1400 audit(1790780337.302:792): avc: denied { write } for pid=6913 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.554806][ T6922] –: renamed from vxcan1 (while UP) [ 116.623247][ T6894] ipvlan2: entered promiscuous mode [ 116.652489][ T6894] bridge0: port 3(ipvlan2) entered blocking state [ 116.652771][ T6894] bridge0: port 3(ipvlan2) entered disabled state [ 116.653200][ T6894] ipvlan2: entered allmulticast mode [ 116.653302][ T6894] bridge0: entered allmulticast mode [ 116.660710][ T6894] ipvlan2: left allmulticast mode [ 116.660810][ T6894] bridge0: left allmulticast mode [ 116.756361][ T6931] bridge_slave_0: left allmulticast mode [ 116.756387][ T6931] bridge_slave_0: left promiscuous mode [ 116.756497][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.761166][ T6931] bridge_slave_1: left allmulticast mode [ 116.761187][ T6931] bridge_slave_1: left promiscuous mode [ 116.761380][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.771102][ T6931] bond0: (slave bond_slave_0): Releasing backup interface [ 116.778920][ T6931] bond0: (slave bond_slave_1): Releasing backup interface [ 116.790164][ T6931] team0: Port device team_slave_0 removed [ 116.793159][ T6931] team0: Port device team_slave_1 removed [ 116.794226][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.794244][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.795902][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.795915][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.801810][ T6931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.885944][ T6931] team0: Mode changed to "loadbalance" [ 116.887882][ T6931] netlink: 60 bytes leftover after parsing attributes in process `syz.6.601'. [ 116.993857][ T29] audit: type=1400 audit(1790780337.802:793): avc: denied { write } for pid=6940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.023248][ T29] audit: type=1400 audit(1790780337.832:794): avc: denied { write } for pid=6958 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.046991][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 117.067487][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.9.604'. [ 117.075798][ T6962] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.081412][ T6962] loop4: detected capacity change from 0 to 512 [ 117.083973][ T6962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.094339][ T6962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.094402][ T6962] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.098456][ T6962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.602: bg 0: block 217: padding at end of block bitmap is not set [ 117.098716][ T29] audit: type=1400 audit(1790780337.912:795): avc: denied { write } for pid=6946 comm="syz.4.602" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.102347][ T6962] EXT4-fs (loop4): Remounting filesystem read-only [ 117.253478][ T29] audit: type=1400 audit(1790780338.052:796): avc: denied { write } for pid=6966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.265056][ T29] audit: type=1400 audit(1790780338.062:797): avc: denied { map } for pid=6972 comm="syz.8.607" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.278822][ T29] audit: type=1400 audit(1790780338.082:798): avc: denied { write } for pid=6983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.304568][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 117.362612][ T6986] 9p: Bad value for 'rfdno' [ 117.441898][ T6998] netlink: 'syz.6.610': attribute type 10 has an invalid length. [ 117.441920][ T6998] netlink: 168 bytes leftover after parsing attributes in process `syz.6.610'. [ 117.634240][ T7023] netlink: 'syz.9.616': attribute type 1 has an invalid length. [ 117.673759][ T6973] loop8: detected capacity change from 0 to 512 [ 117.703468][ T6973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.765373][ T6973] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 117.778850][ T6973] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.607: corrupted in-inode xattr: e_value size too large [ 117.779071][ T6973] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.784028][ T6973] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.607: couldn't read orphan inode 15 (err -117) [ 117.784366][ T6973] loop8: lost filesystem error report for type 5 error -117 [ 117.817039][ T6145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.833096][ T6973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.875734][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.9.618'. [ 117.991513][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.012796][ T7056] tipc: Enabling of bearer rejected, failed to enable media [ 118.067345][ T7063] loop6: detected capacity change from 0 to 512 [ 118.087101][ T7063] FAULT_INJECTION: forcing a failure. [ 118.087101][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 118.087131][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.6.624 Not tainted syzkaller #0 PREEMPT(lazy) [ 118.087208][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.087221][ T7063] Call Trace: [ 118.087228][ T7063] [ 118.087236][ T7063] __dump_stack+0x1d/0x30 [ 118.087267][ T7063] dump_stack_lvl+0x95/0xd0 [ 118.087345][ T7063] dump_stack+0x15/0x1b [ 118.087368][ T7063] should_fail_ex+0x262/0x280 [ 118.087396][ T7063] ? alloc_empty_file+0x70/0x1e0 [ 118.087421][ T7063] should_failslab+0x8c/0xb0 [ 118.087468][ T7063] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 118.087501][ T7063] ? alloc_empty_file+0x70/0x1e0 [ 118.087526][ T7063] ? _parse_integer_limit+0x174/0x190 [ 118.087570][ T7063] alloc_empty_file+0x70/0x1e0 [ 118.087597][ T7063] path_openat+0x50/0x10d0 [ 118.087631][ T7063] ? kstrtouint+0x76/0xc0 [ 118.087680][ T7063] do_file_open+0x16c/0x290 [ 118.087722][ T7063] do_sys_openat2+0xa0/0x130 [ 118.087752][ T7063] __x64_sys_openat+0xf2/0x120 [ 118.087861][ T7063] x64_sys_call+0x1f72/0x2550 [ 118.087891][ T7063] do_syscall_64+0x112/0x360 [ 118.087926][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.087988][ T7063] RIP: 0033:0x7f826bcbe159 [ 118.088006][ T7063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.088026][ T7063] RSP: 002b:00007f826a717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.088048][ T7063] RAX: ffffffffffffffda RBX: 00007f826bf45fa0 RCX: 00007f826bcbe159 [ 118.088076][ T7063] RDX: 0000000000181042 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 118.088089][ T7063] RBP: 00007f826a717090 R08: 0000000000000000 R09: 0000000000000000 [ 118.088102][ T7063] R10: 0000000000000065 R11: 0000000000000246 R12: 0000000000000001 [ 118.088116][ T7063] R13: 00007f826bf46038 R14: 00007f826bf45fa0 R15: 00007ffe0d73a138 [ 118.088137][ T7063] [ 118.154561][ T7070] loop8: detected capacity change from 0 to 512 [ 118.244036][ T7068] netlink: 4256 bytes leftover after parsing attributes in process `syz.4.625'. [ 118.244099][ T7068] netlink: 356 bytes leftover after parsing attributes in process `syz.4.625'. [ 118.273548][ T7071] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 118.346481][ T7037] loop3: detected capacity change from 0 to 32768 [ 118.381756][ T7037] loop3: p1 p3 < > [ 118.442713][ T7102] loop6: detected capacity change from 0 to 512 [ 118.541176][ T7114] netlink: 'syz.4.632': attribute type 4 has an invalid length. [ 118.614053][ T7107] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.621359][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 118.622821][ T3687] udevd[3687]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 118.659623][ T7111] loop3: detected capacity change from 0 to 512 [ 118.738371][ T7107] loop8: detected capacity change from 0 to 512 [ 118.738910][ T7111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 118.739368][ T7111] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.761240][ T3676] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.775241][ T7107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.815451][ T3676] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.833794][ T7107] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.834609][ T7107] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.883367][ T7107] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.631: bg 0: block 217: padding at end of block bitmap is not set [ 118.884369][ T7107] EXT4-fs (loop8): Remounting filesystem read-only [ 118.911605][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.920130][ T3676] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.967172][ T3676] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.050773][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.572556][ T7195] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 119.632135][ T7210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=7210 comm=syz.3.644 [ 119.744978][ T7227] loop3: detected capacity change from 0 to 512 [ 119.765925][ T7227] EXT4-fs (loop3): 1 orphan inode deleted [ 119.766544][ T7227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.769703][ T7227] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.771586][ T3676] bond0 (unregistering): Released all slaves [ 119.830391][ T7214] bridge_slave_0: left allmulticast mode [ 119.830411][ T7214] bridge_slave_0: left promiscuous mode [ 119.830527][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.898817][ T7214] bridge_slave_1: left allmulticast mode [ 119.898840][ T7214] bridge_slave_1: left promiscuous mode [ 119.898951][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.911228][ T7214] bond0: (slave bond_slave_0): Releasing backup interface [ 119.914908][ T7214] bond0: (slave bond_slave_1): Releasing backup interface [ 119.934947][ T7214] team0: Port device team_slave_0 removed [ 119.938829][ T7254] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.941147][ T7214] team0: Port device team_slave_1 removed [ 119.942209][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.942224][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.942416][ T7254] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.650: corrupted xattr block 8: invalid header [ 119.942691][ T7254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 119.942720][ T7254] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.650: corrupted xattr block 8: invalid header [ 119.942906][ T7254] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 119.943137][ T7254] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.650: corrupted xattr block 8: invalid header [ 119.943544][ T7214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.943554][ T7214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.965834][ T7214] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.972871][ T7265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.974975][ T7228] team0: Mode changed to "loadbalance" [ 119.975337][ T7239] netlink: 60 bytes leftover after parsing attributes in process `syz.4.646'. [ 119.976609][ T7140] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.976640][ T7140] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.976759][ T7140] bridge_slave_0: entered allmulticast mode [ 119.977317][ T7140] bridge_slave_0: entered promiscuous mode [ 119.985482][ T7140] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.985515][ T7140] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.985606][ T7140] bridge_slave_1: entered allmulticast mode [ 119.986037][ T7140] bridge_slave_1: entered promiscuous mode [ 119.994166][ T7265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.994262][ T7265] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.002960][ T7265] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.647: bg 0: block 217: padding at end of block bitmap is not set [ 120.003115][ T7265] EXT4-fs (loop9): Remounting filesystem read-only [ 120.004387][ T7238] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.005416][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.018595][ T3676] hsr_slave_0: left promiscuous mode [ 120.019042][ T3676] hsr_slave_1: left promiscuous mode [ 120.026227][ T3676] veth1_macvtap: left promiscuous mode [ 120.026255][ T3676] veth0_macvtap: left promiscuous mode [ 120.026396][ T3676] veth1_vlan: left promiscuous mode [ 120.029003][ T3676] veth0_vlan: left promiscuous mode [ 120.074657][ T6087] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.075094][ T6087] EXT4-fs error (device loop3): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.075336][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.075417][ T6087] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.075695][ T6087] EXT4-fs error (device loop3): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.075866][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.076022][ T6087] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.076762][ T6087] EXT4-fs error (device loop3): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.076920][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.077156][ T6087] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.077379][ T6087] EXT4-fs error (device loop3): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.078982][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.079198][ T6087] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 4: comm syz-executor: path /22/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.080883][ T6087] EXT4-fs error (device loop3): ext4_empty_dir:3093: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 120.081110][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.081597][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.082036][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.082497][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.084554][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.085036][ T6087] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.' [ 120.187979][ T7140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.201061][ T7140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.216149][ T7140] team0: Port device team_slave_0 added [ 120.219365][ T7140] team0: Port device team_slave_1 added [ 120.235935][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.235950][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.235976][ T7140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.243134][ T7140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.243148][ T7140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.243181][ T7140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.244006][ T7276] syz.4.653 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 120.269318][ T7140] hsr_slave_0: entered promiscuous mode [ 120.269709][ T7140] hsr_slave_1: entered promiscuous mode [ 120.398559][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 120.418887][ T7300] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 120.430182][ T6087] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.481655][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.656'. [ 120.493396][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.534587][ T5307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.564392][ T3676] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.593921][ T3676] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.653373][ T7140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.660749][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.663664][ T3676] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.666007][ T7140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.671120][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.672123][ T7140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.674416][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.678392][ T7140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.680744][ T7140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.706895][ T7334] syzkaller0: entered promiscuous mode [ 120.706912][ T7334] syzkaller0: entered allmulticast mode [ 120.748960][ T3676] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.763125][ T7346] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.929773][ T7346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.961565][ T7346] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.962216][ T7346] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.964272][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.966024][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.967261][ T3676] bond0 (unregistering): Released all slaves [ 120.998568][ T3676] hsr_slave_0: left promiscuous mode [ 120.998949][ T3676] hsr_slave_1: left promiscuous mode [ 120.999342][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.999359][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.999843][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.999857][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.002638][ T3676] veth1_macvtap: left promiscuous mode [ 121.002664][ T3676] veth0_macvtap: left promiscuous mode [ 121.002709][ T3676] veth1_vlan: left promiscuous mode [ 121.002743][ T3676] veth0_vlan: left promiscuous mode [ 121.025142][ T7346] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.665: bg 0: block 217: padding at end of block bitmap is not set [ 121.025612][ T7346] EXT4-fs (loop9): Remounting filesystem read-only [ 121.054310][ T5307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.094400][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 121.101557][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 121.132902][ T7140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.156522][ T7140] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.181161][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.181198][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.193689][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.193723][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.200245][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.200285][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.200360][ T7313] bridge_slave_0: entered allmulticast mode [ 121.200902][ T7313] bridge_slave_0: entered promiscuous mode [ 121.202985][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.203015][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.203070][ T7313] bridge_slave_1: entered allmulticast mode [ 121.203580][ T7313] bridge_slave_1: entered promiscuous mode [ 121.214953][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.225425][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.237504][ T7376] loop9: p1 p3 < > p4 < p5 > [ 121.237516][ T7376] loop9: partition table partially beyond EOD, truncated [ 121.237674][ T7376] loop9: p1 size 196608 extends beyond EOD, truncated [ 121.242349][ T7376] loop9: p3 start 614273 is beyond EOD, truncated [ 121.244128][ T7376] loop9: p5 size 196608 extends beyond EOD, truncated [ 121.255539][ T7313] team0: Port device team_slave_0 added [ 121.268848][ T7313] team0: Port device team_slave_1 added [ 121.316882][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.316896][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.316967][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.317577][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.317588][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.317693][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.351292][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 121.351308][ T29] audit: type=1400 audit(1790780342.153:1003): avc: denied { write } for pid=7381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.369967][ T7313] hsr_slave_0: entered promiscuous mode [ 121.370546][ T7313] hsr_slave_1: entered promiscuous mode [ 121.370768][ T7313] debugfs: 'hsr0' already exists in 'hsr' [ 121.370779][ T7313] Cannot create hsr debugfs directory [ 121.413584][ T7401] set_capacity_and_notify: 6 callbacks suppressed [ 121.413604][ T7401] loop8: detected capacity change from 0 to 512 [ 121.430798][ T7401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.430867][ T7401] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.432140][ T29] audit: type=1400 audit(1790780342.233:1004): avc: denied { write } for pid=7403 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.433837][ T29] audit: type=1400 audit(1790780342.233:1005): avc: denied { ioctl } for pid=7398 comm="syz.8.672" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.489338][ T29] audit: type=1400 audit(1790780342.293:1006): avc: denied { mounton } for pid=7405 comm="syz.4.673" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 121.628319][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.664607][ T7416] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 121.700555][ T7425] loop8: detected capacity change from 0 to 512 [ 121.717968][ T7425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.717989][ T7425] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 121.719786][ T7140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.755478][ T29] audit: type=1400 audit(1790780342.553:1007): avc: denied { connect } for pid=7435 comm="syz.9.679" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.759594][ T29] audit: type=1400 audit(1790780342.563:1008): avc: denied { read } for pid=7435 comm="syz.9.679" laddr=fe80::b0b3:47ff:fe81:1a61 lport=255 faddr=ff01::1 fport=243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.761621][ T7437] netlink: 'syz.9.679': attribute type 4 has an invalid length. [ 121.762159][ T29] audit: type=1400 audit(1790780342.563:1009): avc: denied { ioctl } for pid=7435 comm="syz.9.679" path="socket:[19344]" dev="sockfs" ino=19344 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.792808][ T7437] netlink: 'syz.9.679': attribute type 4 has an invalid length. [ 121.822417][ T29] audit: type=1400 audit(1790780342.623:1010): avc: denied { write } for pid=7432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.868144][ T29] audit: type=1400 audit(1790780342.653:1011): avc: denied { write } for pid=7450 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.908011][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 121.919139][ T7458] loop4: detected capacity change from 0 to 512 [ 122.083159][ T7140] veth0_vlan: entered promiscuous mode [ 122.088103][ T7140] veth1_vlan: entered promiscuous mode [ 122.219080][ T7140] veth0_macvtap: entered promiscuous mode [ 122.226558][ T7468] loop8: detected capacity change from 0 to 512 [ 122.241315][ T7140] veth1_macvtap: entered promiscuous mode [ 122.255310][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.260027][ T7313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.260928][ T7468] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 122.267222][ T7468] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.683: bg 0: block 4: invalid block bitmap [ 122.267275][ T7468] loop8: lost filesystem error report for type 5 error -117 [ 122.267735][ T7468] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 122.267773][ T7468] loop8: lost filesystem error report for type 5 error -117 [ 122.267972][ T7468] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.683: invalid indirect mapped block 1 (level 1) [ 122.268001][ T7468] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.268418][ T7468] EXT4-fs (loop8): 1 truncate cleaned up [ 122.268816][ T7468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.420696][ T7313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.421356][ T7313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.471315][ T7313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.473076][ T7140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.483349][ T7313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.588497][ T7313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.597951][ T3611] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.598136][ T3611] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.598416][ T3611] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.599116][ T3611] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.611892][ T7313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.637913][ T7313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.683039][ T29] audit: type=1400 audit(1790780343.483:1012): avc: denied { read } for pid=7473 comm="syz.9.685" name="/" dev="configfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.800411][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.823608][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.827035][ T7483] loop4: detected capacity change from 0 to 512 [ 122.832812][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.832950][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.843196][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.843330][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.849811][ T7483] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 122.872790][ T7483] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.684: bg 0: block 4: invalid block bitmap [ 122.872818][ T7483] loop4: lost filesystem error report for type 5 error -117 [ 122.873937][ T7483] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 122.873955][ T7483] loop4: lost filesystem error report for type 5 error -117 [ 122.874763][ T7483] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.684: invalid indirect mapped block 1 (level 1) [ 122.874882][ T7483] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 122.876111][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 122.876131][ C1] EXT4-fs (loop4): initial error at time 1790780343: ext4_validate_block_bitmap:436 [ 122.876153][ C1] EXT4-fs (loop4): last error at time 1790780343: ext4_free_branches:1023: inode 11 [ 122.890611][ T7483] EXT4-fs (loop4): 1 truncate cleaned up [ 122.891749][ T7483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.893292][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.077477][ T7517] loop6: detected capacity change from 0 to 1024 [ 123.078024][ T7517] EXT4-fs: inline encryption not supported [ 123.078070][ T7517] EXT4-fs: Ignoring removed bh option [ 123.078446][ T7517] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 123.091607][ T7517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.150094][ T6145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.170889][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.195877][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.8.689'. [ 123.206222][ T7533] PM: suspend entry (deep) [ 123.322900][ T7313] veth0_vlan: entered promiscuous mode [ 123.325201][ T7313] veth1_vlan: entered promiscuous mode [ 123.335061][ T3584] Filesystems sync: 0.128 seconds [ 123.345523][ T7313] veth0_macvtap: entered promiscuous mode [ 123.350676][ T7313] veth1_macvtap: entered promiscuous mode [ 123.359686][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.368484][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.378141][ T7533] Freezing user space processes [ 123.381893][ T7533] Freezing user space processes completed (elapsed 0.003 seconds) [ 123.381906][ T7533] OOM killer disabled. [ 123.381909][ T7533] Freezing remaining freezable tasks [ 123.383194][ T7533] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 123.383264][ T7533] printk: Suspending console(s) (use no_console_suspend to debug) [ 123.386266][ T3611] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.386301][ T3611] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.386339][ T3611] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.386447][ T3611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.448186][ T7533] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 123.448346][ T7533] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 123.448384][ T7533] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 123.448414][ T7533] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 123.448479][ T7533] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 123.448561][ T7533] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 123.448662][ T7533] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 123.448725][ T7533] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 123.448763][ T7533] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 123.448800][ T7533] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 123.449212][ T7533] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 123.449251][ T7533] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 123.449331][ T7533] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 123.449352][ T7533] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 123.449372][ T7533] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 123.449455][ T7533] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 123.487960][ T3619] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 124.015706][ T7533] ACPI: PM: Preparing to enter system sleep state S3 [ 124.016087][ T7533] ACPI: PM: Saving platform NVS memory [ 124.016157][ T7533] Disabling non-boot CPUs ... [ 124.020420][ T7533] smpboot: CPU 1 is now offline [ 124.030420][ T7533] ACPI: PM: Low-level resume complete [ 124.030467][ T7533] ACPI: PM: Restoring platform NVS memory [ 124.044551][ T7533] Enabling non-boot CPUs ... [ 124.044746][ T7533] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 124.049057][ T7533] CPU1 is up [ 124.049229][ T7533] ACPI: PM: Waking up from system sleep state S3 [ 124.097945][ T3676] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 124.302738][ T7533] OOM killer enabled. [ 124.302759][ T7533] Restarting tasks: Starting [ 124.319883][ T7533] Restarting tasks: Done [ 124.322721][ T7533] random: crng reseeded on system resumption [ 124.325809][ T7533] PM: suspend exit [ 124.373228][ T7140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.391477][ T7566] loop8: detected capacity change from 0 to 512 [ 124.401218][ T7576] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 124.450586][ T7566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.450788][ T7566] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.480679][ T5233] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.559398][ T7576] loop9: detected capacity change from 0 to 164 [ 124.565170][ T7615] FAULT_INJECTION: forcing a failure. [ 124.565170][ T7615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.565264][ T7615] CPU: 0 UID: 0 PID: 7615 Comm: syz.8.700 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.565300][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.565319][ T7615] Call Trace: [ 124.565328][ T7615] [ 124.565336][ T7615] __dump_stack+0x1d/0x30 [ 124.565364][ T7615] dump_stack_lvl+0x95/0xd0 [ 124.565387][ T7615] dump_stack+0x15/0x1b [ 124.565426][ T7615] should_fail_ex+0x262/0x280 [ 124.565519][ T7615] should_fail+0xb/0x20 [ 124.565540][ T7615] should_fail_usercopy+0x1a/0x20 [ 124.565573][ T7615] _copy_from_user+0x1c/0xb0 [ 124.565664][ T7615] copy_from_bpfptr+0x5c/0x90 [ 124.565695][ T7615] bpf_prog_load+0x84c/0x1060 [ 124.565720][ T7615] ? avc_has_perm_noaudit+0xac/0x160 [ 124.565781][ T7615] ? vfs_write+0x850/0x9a0 [ 124.565810][ T7615] __sys_bpf+0xbae/0xc30 [ 124.565865][ T7615] ? vfs_write+0x850/0x9a0 [ 124.565896][ T7615] ? vfs_write+0x850/0x9a0 [ 124.565934][ T7615] __x64_sys_bpf+0x69/0x80 [ 124.565999][ T7615] x64_sys_call+0xf26/0x2550 [ 124.566028][ T7615] do_syscall_64+0x112/0x360 [ 124.566054][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.566084][ T7615] RIP: 0033:0x7f30cc32e159 [ 124.566153][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.566173][ T7615] RSP: 002b:00007f30cad87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 124.566192][ T7615] RAX: ffffffffffffffda RBX: 00007f30cc5b5fa0 RCX: 00007f30cc32e159 [ 124.566226][ T7615] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 124.566242][ T7615] RBP: 00007f30cad87090 R08: 0000000000000000 R09: 0000000000000000 [ 124.566373][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.566392][ T7615] R13: 00007f30cc5b6038 R14: 00007f30cc5b5fa0 R15: 00007ffd936afdf8 [ 124.566415][ T7615] [ 124.673498][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 124.688375][ T7632] netlink: 16 bytes leftover after parsing attributes in process `syz.6.705'. [ 124.734851][ T7639] loop6: detected capacity change from 0 to 512 [ 124.748555][ T7639] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.831462][ T7658] netlink: 36 bytes leftover after parsing attributes in process `syz.6.709'. [ 124.925950][ T7663] xt_TCPMSS: Only works on TCP SYN packets [ 125.029804][ T7678] 9p: Bad value for 'wfdno' [ 125.150677][ T7690] netlink: 'syz.9.714': attribute type 4 has an invalid length. [ 125.391520][ T7692] loop8: detected capacity change from 0 to 512 [ 125.396663][ T7692] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 125.407935][ T7692] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.715: bg 0: block 4: invalid block bitmap [ 125.408667][ T7699] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 125.409176][ T7692] loop8: lost filesystem error report for type 5 error -117 [ 125.418966][ T7692] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 125.419210][ T7692] loop8: lost filesystem error report for type 5 error -117 [ 125.421267][ T7692] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.715: invalid indirect mapped block 1 (level 1) [ 125.421429][ T7692] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.421781][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 125.421798][ C1] EXT4-fs (loop8): initial error at time 1790780346: ext4_validate_block_bitmap:436 [ 125.421821][ C1] EXT4-fs (loop8): last error at time 1790780346: ext4_mb_clear_bb:6680 [ 125.439298][ T7692] EXT4-fs (loop8): 1 truncate cleaned up [ 125.440480][ T7699] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.716: bg 0: block 4: invalid block bitmap [ 125.441452][ T7699] loop4: lost filesystem error report for type 5 error -117 [ 125.441778][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 125.441795][ C1] EXT4-fs (loop4): initial error at time 1790780346: ext4_validate_block_bitmap:436 [ 125.441834][ C1] EXT4-fs (loop4): last error at time 1790780346: ext4_validate_block_bitmap:436 [ 125.451559][ T7699] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 125.451839][ T7699] loop4: lost filesystem error report for type 5 error -117 [ 125.454129][ T7699] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.716: invalid indirect mapped block 1 (level 1) [ 125.454350][ T7699] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 125.456865][ T7699] EXT4-fs (loop4): 1 truncate cleaned up [ 125.513832][ T7706] ext4: Unknown parameter '"' [ 126.178189][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 126.439791][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 126.439808][ T29] audit: type=1400 audit(1790780347.241:1054): avc: denied { write } for pid=7800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.461658][ T29] audit: type=1400 audit(1790780347.261:1055): avc: denied { write } for pid=7811 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.550745][ T29] audit: type=1400 audit(1790780347.351:1056): avc: denied { write } for pid=7814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.571671][ T29] audit: type=1400 audit(1790780347.371:1057): avc: denied { write } for pid=7825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.589847][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 126.719191][ T7842] FAULT_INJECTION: forcing a failure. [ 126.719191][ T7842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.719231][ T7842] CPU: 0 UID: 0 PID: 7842 Comm: syz.9.728 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.719258][ T7842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.719273][ T7842] Call Trace: [ 126.719280][ T7842] [ 126.719288][ T7842] __dump_stack+0x1d/0x30 [ 126.719320][ T7842] dump_stack_lvl+0x95/0xd0 [ 126.719345][ T7842] dump_stack+0x15/0x1b [ 126.719407][ T7842] should_fail_ex+0x262/0x280 [ 126.719434][ T7842] should_fail+0xb/0x20 [ 126.719457][ T7842] should_fail_usercopy+0x1a/0x20 [ 126.719486][ T7842] _copy_from_user+0x1c/0xb0 [ 126.719562][ T7842] ___sys_sendmsg+0xc1/0x1e0 [ 126.719594][ T7842] __x64_sys_sendmsg+0xd4/0x160 [ 126.719618][ T7842] x64_sys_call+0x22ab/0x2550 [ 126.719645][ T7842] do_syscall_64+0x112/0x360 [ 126.719724][ T7842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.719747][ T7842] RIP: 0033:0x7f345d05e159 [ 126.719777][ T7842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.719798][ T7842] RSP: 002b:00007f345bab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.719835][ T7842] RAX: ffffffffffffffda RBX: 00007f345d2e5fa0 RCX: 00007f345d05e159 [ 126.719848][ T7842] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 126.719935][ T7842] RBP: 00007f345bab7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.719950][ T7842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.719965][ T7842] R13: 00007f345d2e6038 R14: 00007f345d2e5fa0 R15: 00007ffff057e7a8 [ 126.719986][ T7842] [ 126.800281][ T29] audit: type=1400 audit(1790780347.601:1058): avc: denied { write } for pid=7828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.841442][ T29] audit: type=1400 audit(1790780347.641:1059): avc: denied { write } for pid=7858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.874842][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 126.890837][ T7862] IPv6: Can't replace route, no match found [ 127.007365][ T7843] set_capacity_and_notify: 2 callbacks suppressed [ 127.007410][ T7843] loop4: detected capacity change from 0 to 512 [ 127.014548][ T7872] loop5: detected capacity change from 0 to 128 [ 127.035985][ T7872] EXT4-fs mount: 6 callbacks suppressed [ 127.036001][ T7872] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.040855][ T7872] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.048137][ T7843] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.056629][ T29] audit: type=1400 audit(1790780347.861:1060): avc: denied { write } for pid=7871 comm="syz.5.733" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.061095][ T7843] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 127.078413][ T7843] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 127.083367][ T7843] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.723: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 127.083530][ T7843] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 127.084592][ T7843] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.723: couldn't read orphan inode 13 (err -117) [ 127.084631][ T7843] loop4: lost filesystem error report for type 5 error -117 [ 127.166218][ T7843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.357922][ T7891] hub 8-0:1.0: USB hub found [ 127.358049][ T7891] hub 8-0:1.0: 8 ports detected [ 127.384927][ T29] audit: type=1400 audit(1790780348.181:1061): avc: denied { write } for pid=7871 comm="syz.5.733" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.406065][ T29] audit: type=1400 audit(1790780348.201:1062): avc: denied { write } for pid=7871 comm="syz.5.733" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.414922][ T29] audit: type=1400 audit(1790780348.211:1063): avc: denied { write } for pid=7871 comm="syz.5.733" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.464778][ T7896] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.723: deleted inode referenced: 12 [ 127.613910][ T6145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.686603][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.686635][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.686725][ T7851] bridge_slave_0: entered allmulticast mode [ 127.687178][ T7851] bridge_slave_0: entered promiscuous mode [ 127.696108][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.696143][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.696373][ T7851] bridge_slave_1: entered allmulticast mode [ 127.697055][ T7851] bridge_slave_1: entered promiscuous mode [ 127.723339][ T7851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.726647][ T7851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.738592][ T7851] team0: Port device team_slave_0 added [ 127.739311][ T7851] team0: Port device team_slave_1 added [ 127.740140][ T7313] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.767822][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.767838][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.767868][ T7851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.768543][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.768557][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.768616][ T7851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.859149][ T7851] hsr_slave_0: entered promiscuous mode [ 127.859549][ T7851] hsr_slave_1: entered promiscuous mode [ 127.859821][ T7851] debugfs: 'hsr0' already exists in 'hsr' [ 127.859833][ T7851] Cannot create hsr debugfs directory [ 127.931793][ T7921] --map-set only usable from mangle table [ 127.945491][ T7923] loop6: detected capacity change from 0 to 512 [ 127.950997][ T7923] EXT4-fs: Mount option(s) incompatible with ext2 [ 128.003376][ T7923] loop6: detected capacity change from 0 to 512 [ 128.003715][ T7923] EXT4-fs: Ignoring removed bh option [ 128.003736][ T7923] EXT4-fs: Ignoring removed nobh option [ 128.003847][ T7923] EXT4-fs: quotafile must be on filesystem root [ 128.076317][ T7923] loop6: detected capacity change from 0 to 512 [ 128.076525][ T7923] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 128.161795][ T7933] loop4: detected capacity change from 0 to 1024 [ 128.195390][ T7851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.196580][ T7933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 128.196630][ T7933] System zones: 0-1, 3-12 [ 128.197175][ T7933] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.241683][ T6145] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 128.244828][ T7851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.294767][ T7851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.302069][ T7862] loop9: detected capacity change from 0 to 8192 [ 128.337189][ T7851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.429196][ T7851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.435914][ T7851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.450725][ T7851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.459542][ T7851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.469817][ T7851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.481204][ T7851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.485640][ T7851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.580130][ T7851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.637850][ T7851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.645455][ T7851] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.783116][ T7960] loop5: detected capacity change from 0 to 8192 [ 128.811316][ T7851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.811398][ T7851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.015511][ T7851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.154744][ T7851] veth0_vlan: entered promiscuous mode [ 129.161102][ T7851] veth1_vlan: entered promiscuous mode [ 129.178841][ T7851] veth0_macvtap: entered promiscuous mode [ 129.209743][ T7851] veth1_macvtap: entered promiscuous mode [ 129.222343][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.225730][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.419079][ T7984] netlink: 196 bytes leftover after parsing attributes in process `syz.4.747'. [ 130.572175][ T3571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.575451][ T3565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.575642][ T3565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.575835][ T3565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.148531][ T7982] loop9: detected capacity change from 0 to 8192 [ 131.199440][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.199479][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.254064][ T3659] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.254112][ T3659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.577572][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.746'. [ 131.635219][ T7997] loop0: detected capacity change from 0 to 128 [ 131.635517][ T7997] vfat: Unknown parameter '@' [ 132.681392][ T8010] xt_bpf: check failed: parse error [ 133.118088][ T8004] loop0: detected capacity change from 0 to 1024 [ 133.134350][ T8004] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.323151][ T8038] loop5: detected capacity change from 0 to 1024 [ 133.343513][ T8038] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 133.344067][ T8038] JBD2: no valid journal superblock found [ 133.344076][ T8038] EXT4-fs (loop5): Could not load journal inode [ 133.503388][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 133.503402][ T29] audit: type=1326 audit(1790780354.312:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.503511][ T29] audit: type=1326 audit(1790780354.312:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.503672][ T29] audit: type=1326 audit(1790780354.312:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.503797][ T29] audit: type=1326 audit(1790780354.312:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.504632][ T29] audit: type=1326 audit(1790780354.312:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.504819][ T29] audit: type=1326 audit(1790780354.312:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.505096][ T29] audit: type=1326 audit(1790780354.312:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.505218][ T29] audit: type=1326 audit(1790780354.312:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.505414][ T29] audit: type=1326 audit(1790780354.312:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.505586][ T29] audit: type=1326 audit(1790780354.312:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8040 comm="syz.9.757" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345d05e159 code=0x7ffc0000 [ 133.527200][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.9.757'. [ 133.766010][ T8046] loop6: detected capacity change from 0 to 8192 [ 134.833319][ T8047] loop5: detected capacity change from 0 to 512 [ 135.282711][ T8047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.282892][ T8047] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.316329][ T8044] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.756: bg 0: block 217: padding at end of block bitmap is not set [ 135.317906][ T8064] IPv6: Can't replace route, no match found [ 135.354355][ T8070] netlink: 196 bytes leftover after parsing attributes in process `syz.6.766'. [ 135.470007][ T8077] loop4: detected capacity change from 0 to 512 [ 135.489721][ T8077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.497821][ T8077] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.769: corrupted xattr block 8: invalid header [ 135.498097][ T8077] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 135.498162][ T8077] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.769: corrupted xattr block 8: invalid header [ 135.498611][ T8077] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 135.498677][ T8077] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.769: corrupted xattr block 8: invalid header [ 135.655643][ T7313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.685941][ T8064] loop9: detected capacity change from 0 to 8192 [ 135.703057][ T6145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.715860][ T8080] loop0: detected capacity change from 0 to 512 [ 135.731312][ T8080] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 135.785940][ T8080] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.770: bg 0: block 4: invalid block bitmap [ 135.786038][ T8080] loop0: lost filesystem error report for type 5 error -117 [ 135.799752][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 135.799772][ C1] EXT4-fs (loop0): initial error at time 1790780356: ext4_validate_block_bitmap:436 [ 135.799802][ C1] EXT4-fs (loop0): last error at time 1790780356: ext4_validate_block_bitmap:436 [ 135.800760][ T8084] loop6: detected capacity change from 0 to 512 [ 135.827807][ T8084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.838836][ T8084] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.771: corrupted xattr block 8: invalid header [ 135.839036][ T8084] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 135.839066][ T8084] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.771: corrupted xattr block 8: invalid header [ 135.839242][ T8084] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 135.839345][ T8084] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.771: corrupted xattr block 8: invalid header [ 135.896344][ T8080] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 135.896391][ T8080] loop0: lost filesystem error report for type 5 error -117 [ 135.910006][ T8080] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.770: invalid indirect mapped block 1 (level 1) [ 135.910066][ T8080] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 135.940913][ T8080] EXT4-fs (loop0): 1 truncate cleaned up [ 135.958765][ T8080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.023325][ T7140] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.071625][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.6.776'. [ 136.071840][ T8101] loop4: detected capacity change from 0 to 256 [ 136.166185][ T8106] random: crng reseeded on system resumption [ 136.198665][ T8106] netlink: 104 bytes leftover after parsing attributes in process `syz.9.775'. [ 136.306906][ T8110] netlink: 196 bytes leftover after parsing attributes in process `syz.4.778'. [ 136.309221][ T7851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.366721][ T8112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8112 comm=syz.0.779 [ 136.376155][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.780'. [ 136.443465][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.780'. [ 136.460123][ T8120] FAULT_INJECTION: forcing a failure. [ 136.460123][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 136.460154][ T8120] CPU: 1 UID: 0 PID: 8120 Comm: syz.0.782 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.460183][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.460198][ T8120] Call Trace: [ 136.460204][ T8120] [ 136.460327][ T8120] __dump_stack+0x1d/0x30 [ 136.460355][ T8120] dump_stack_lvl+0x95/0xd0 [ 136.460378][ T8120] dump_stack+0x15/0x1b [ 136.460402][ T8120] should_fail_ex+0x262/0x280 [ 136.460435][ T8120] ? security_file_alloc+0x32/0xf0 [ 136.460480][ T8120] should_failslab+0x8c/0xb0 [ 136.460515][ T8120] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 136.460626][ T8120] ? security_file_alloc+0x32/0xf0 [ 136.460763][ T8120] security_file_alloc+0x32/0xf0 [ 136.460847][ T8120] init_file+0x5b/0x1b0 [ 136.460873][ T8120] alloc_empty_file+0x85/0x1e0 [ 136.460944][ T8105] netlink: 20 bytes leftover after parsing attributes in process `syz.6.777'. [ 136.460898][ T8120] alloc_file_pseudo+0x92/0x120 [ 136.461008][ T8120] sock_alloc_file+0x9c/0x1e0 [ 136.461040][ T8120] __sys_socket+0x118/0x180 [ 136.461117][ T8120] __x64_sys_socket+0x3f/0x50 [ 136.461149][ T8120] x64_sys_call+0x246e/0x2550 [ 136.461201][ T8120] do_syscall_64+0x112/0x360 [ 136.461229][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.461289][ T8120] RIP: 0033:0x7fd13059f9c7 [ 136.461304][ T8120] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.461325][ T8120] RSP: 002b:00007fd12eff5f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 136.461348][ T8120] RAX: ffffffffffffffda RBX: 00007fd130825fa0 RCX: 00007fd13059f9c7 [ 136.461365][ T8120] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 136.461380][ T8120] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 136.461416][ T8120] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000000 [ 136.461428][ T8120] R13: 00007fd130826038 R14: 00007fd130825fa0 R15: 00007ffecdcb6dc8 [ 136.461448][ T8120] [ 136.800566][ T8149] ip_tables: iptables: counters copy to user failed while replacing table [ 136.804866][ T8149] device-mapper: table: 252:1: mirror: Insufficient mirror log arguments (-EINVAL) [ 136.804886][ T8149] device-mapper: ioctl: error adding target to table [ 136.830762][ T8152] netlink: 196 bytes leftover after parsing attributes in process `syz.0.791'. [ 136.866874][ T8154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8154 comm=syz.0.792 [ 136.885481][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.5.785'. [ 137.002986][ T8169] sg_write: data in/out 4757856/136 bytes for SCSI command 0xf-- guessing data in; [ 137.002986][ T8169] program syz.5.799 not setting count and/or reply_len properly [ 137.043846][ T8169] syzkaller0: entered promiscuous mode [ 137.043861][ T8169] syzkaller0: entered allmulticast mode [ 137.046900][ T8171] netlink: 12 bytes leftover after parsing attributes in process `syz.9.797'. [ 137.123518][ T8173] loop5: detected capacity change from 0 to 512 [ 137.124678][ T8173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.125959][ T8173] EXT4-fs (loop5): 1 truncate cleaned up [ 137.126339][ T8173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.128183][ T8173] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.154234][ T8175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.154302][ T8175] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.288410][ T8184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.288513][ T8184] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.689523][ T6145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.721801][ T8208] netlink: 196 bytes leftover after parsing attributes in process `syz.4.803'. [ 138.038985][ T8247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8247 comm=syz.6.805 [ 138.089932][ T7313] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 138.090929][ T7313] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 138.270127][ T8261] set_capacity_and_notify: 3 callbacks suppressed [ 138.270148][ T8261] loop6: detected capacity change from 0 to 1024 [ 138.287074][ T8261] ext4: Unknown parameter 'euid<00000000000000000000' [ 138.313291][ T8268] loop4: detected capacity change from 0 to 1024 [ 138.315159][ T8268] EXT4-fs: Ignoring removed bh option [ 138.315177][ T8268] EXT4-fs: Ignoring removed oldalloc option [ 138.315195][ T8268] EXT4-fs: Ignoring removed orlov option [ 138.320574][ T8268] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 138.411429][ T7313] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.430301][ T8290] loop4: detected capacity change from 0 to 128 [ 138.432343][ T8290] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 138.437703][ T8290] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.439041][ T8290] ext2 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.467126][ T8278] loop9: detected capacity change from 0 to 1024 [ 138.476451][ T8278] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 138.476480][ T8278] EXT4-fs (loop9): can't mount with data_err=abort, fs mounted w/o journal [ 138.535254][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 138.535269][ T29] audit: type=1400 audit(1790780359.342:1223): avc: denied { checkpoint_restore } for pid=8283 comm="{-*.)!-&]" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.587802][ T29] audit: type=1400 audit(1790780359.392:1224): avc: denied { write } for pid=8271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.629865][ T29] audit: type=1400 audit(1790780359.432:1225): avc: denied { write } for pid=8310 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.792390][ T29] audit: type=1400 audit(1790780359.602:1226): avc: denied { write } for pid=8317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.832308][ T29] audit: type=1400 audit(1790780359.642:1227): avc: denied { write } for pid=6145 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.832338][ T29] audit: type=1400 audit(1790780359.642:1228): avc: denied { rmdir } for pid=6145 comm="syz-executor" name="proc" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 138.833614][ T29] audit: type=1400 audit(1790780359.642:1229): avc: denied { write } for pid=6145 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.835645][ T29] audit: type=1400 audit(1790780359.642:1230): avc: denied { write } for pid=6145 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.835729][ T29] audit: type=1400 audit(1790780359.642:1231): avc: denied { write } for pid=6145 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.835753][ T29] audit: type=1400 audit(1790780359.642:1232): avc: denied { write } for pid=6145 comm="syz-executor" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.130235][ T8339] loop6: detected capacity change from 0 to 8192 [ 139.452169][ T8306] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.452206][ T8306] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.453200][ T8306] bridge_slave_0: entered allmulticast mode [ 139.456322][ T8306] bridge_slave_0: entered promiscuous mode [ 139.467481][ T8306] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.467637][ T8306] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.468486][ T8306] bridge_slave_1: entered allmulticast mode [ 139.472829][ T8306] bridge_slave_1: entered promiscuous mode [ 139.519287][ T3565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.587385][ T8306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.589557][ T8355] loop9: detected capacity change from 0 to 512 [ 139.595168][ T8355] EXT4-fs: Mount option(s) incompatible with ext2 [ 139.602055][ T3565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.605148][ T8306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.658850][ T3565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.662986][ T8306] team0: Port device team_slave_0 added [ 139.670551][ T8306] team0: Port device team_slave_1 added [ 139.712113][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.712134][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.712163][ T8306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.718514][ T8306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.718526][ T8306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.718554][ T8306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.721482][ T3565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.801116][ T8306] hsr_slave_0: entered promiscuous mode [ 139.801441][ T8306] hsr_slave_1: entered promiscuous mode [ 139.801624][ T8306] debugfs: 'hsr0' already exists in 'hsr' [ 139.801642][ T8306] Cannot create hsr debugfs directory [ 140.185613][ T3565] bond0 (unregistering): Released all slaves [ 140.254772][ T3565] hsr_slave_0: left promiscuous mode [ 140.255053][ T3565] hsr_slave_1: left promiscuous mode [ 140.263751][ T3565] veth1_macvtap: left promiscuous mode [ 140.263809][ T3565] veth0_macvtap: left promiscuous mode [ 140.263901][ T3565] veth1_vlan: left promiscuous mode [ 140.263931][ T3565] veth0_vlan: left promiscuous mode [ 140.325195][ T8383] loop0: detected capacity change from 0 to 2048 [ 140.361545][ T8383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.375504][ T6145] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.796718][ T8404] loop9: detected capacity change from 0 to 164 [ 140.832791][ T8403] rock: directory entry would overflow storage [ 140.832805][ T8403] rock: sig=0x4f50, size=4, remaining=3 [ 140.832829][ T8403] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 140.885950][ T8403] x_tables: duplicate entry at hook 4 [ 141.015551][ T3565] IPVS: stop unused estimator thread 0... [ 141.102043][ T8439] loop6: detected capacity change from 0 to 512 [ 141.254797][ T8449] loop9: detected capacity change from 0 to 512 [ 141.266603][ T7851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.270282][ T8449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.284484][ T8306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.293469][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.303606][ T8306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.307104][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.307581][ T8306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.321789][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.329171][ T8306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.331817][ T8449] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.834: corrupted xattr block 8: invalid header [ 141.332093][ T8449] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 141.332124][ T8449] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.834: corrupted xattr block 8: invalid header [ 141.332392][ T8449] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 141.332434][ T8449] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.834: corrupted xattr block 8: invalid header [ 141.336017][ T8306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.427485][ T5307] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.449181][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.449213][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.450486][ T8399] bridge_slave_0: entered allmulticast mode [ 141.450898][ T8399] bridge_slave_0: entered promiscuous mode [ 141.456587][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.456620][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.456739][ T8399] bridge_slave_1: entered allmulticast mode [ 141.457194][ T8399] bridge_slave_1: entered promiscuous mode [ 141.476259][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.478901][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.493844][ T8399] team0: Port device team_slave_0 added [ 141.496304][ T8399] team0: Port device team_slave_1 added [ 141.519261][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.519276][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.519305][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.519754][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.519766][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.519794][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.552966][ T8477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.553067][ T8477] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.564221][ T8306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.575074][ T8399] hsr_slave_0: entered promiscuous mode [ 141.575675][ T8399] hsr_slave_1: entered promiscuous mode [ 141.575976][ T8399] debugfs: 'hsr0' already exists in 'hsr' [ 141.575989][ T8399] Cannot create hsr debugfs directory [ 141.668540][ T8306] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.681061][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.681096][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.687197][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.687233][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.003774][ T7851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.099239][ T8527] __nla_validate_parse: 3 callbacks suppressed [ 143.099257][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.840'. [ 143.230185][ T8306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.247753][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.841'. [ 143.404915][ T8306] veth0_vlan: entered promiscuous mode [ 143.416276][ T8306] veth1_vlan: entered promiscuous mode [ 143.456837][ T8306] veth0_macvtap: entered promiscuous mode [ 143.467580][ T8306] veth1_macvtap: entered promiscuous mode [ 143.502956][ T8306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.528330][ T8306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.586156][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 143.586232][ T29] audit: type=1400 audit(1790780364.393:1348): avc: denied { write } for pid=8565 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.690365][ T3600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.690411][ T3600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.690553][ T3600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.690678][ T3600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.694110][ T8572] netlink: 'syz.6.843': attribute type 3 has an invalid length. [ 143.952301][ T29] audit: type=1400 audit(1790780364.763:1349): avc: denied { write } for pid=8573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.988666][ T29] audit: type=1400 audit(1790780364.793:1350): avc: denied { write } for pid=8596 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.023161][ T8399] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 144.033442][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.043014][ T8399] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 144.060156][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.060712][ T8399] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 144.081340][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.088733][ T8399] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 144.105463][ T8399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 144.121091][ T8605] set_capacity_and_notify: 1 callbacks suppressed [ 144.121106][ T8605] loop2: detected capacity change from 0 to 1024 [ 144.122828][ T8605] EXT4-fs: Ignoring removed mblk_io_submit option [ 144.122885][ T8605] EXT4-fs: test_dummy_encryption option not supported [ 144.143839][ T8609] PM: suspend entry (deep) [ 144.269106][ T3659] Filesystems sync: 0.119 seconds [ 144.430677][ T8609] Freezing user space processes [ 144.447474][ T8609] Freezing user space processes completed (elapsed 0.016 seconds) [ 144.447489][ T8609] OOM killer disabled. [ 144.447492][ T8609] Freezing remaining freezable tasks [ 144.448803][ T8609] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 144.448859][ T8609] printk: Suspending console(s) (use no_console_suspend to debug) [ 144.531212][ T8609] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 144.531265][ T8609] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 144.531296][ T8609] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 144.531326][ T8609] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 144.531393][ T8609] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 144.532186][ T8609] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 144.532258][ T8609] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 144.532360][ T8609] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 144.532443][ T8609] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 144.532528][ T8609] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 144.532550][ T8609] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 144.532584][ T8609] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 144.532645][ T8609] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 144.532665][ T8609] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 144.532694][ T8609] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 144.532723][ T8609] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 144.569573][ T3555] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 145.091365][ T8609] ACPI: PM: Preparing to enter system sleep state S3 [ 145.091654][ T8609] ACPI: PM: Saving platform NVS memory [ 145.091706][ T8609] Disabling non-boot CPUs ... [ 145.096333][ T8609] smpboot: CPU 1 is now offline [ 145.101110][ T8609] ACPI: PM: Low-level resume complete [ 145.101161][ T8609] ACPI: PM: Restoring platform NVS memory [ 145.114374][ T8609] Enabling non-boot CPUs ... [ 145.114611][ T8609] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 145.119866][ T8609] CPU1 is up [ 145.120154][ T8609] ACPI: PM: Waking up from system sleep state S3 [ 145.122264][ T3571] ================================================================== [ 145.122286][ T3571] BUG: KCSAN: data-race in acpi_ut_status_exit / acpi_ut_track_stack_ptr [ 145.122312][ T3571] [ 145.122316][ T3571] read to 0xffffffff896258c8 of 4 bytes by task 3636 on cpu 1: [ 145.122326][ T3571] acpi_ut_track_stack_ptr+0x5f/0xd0 [ 145.122343][ T3571] acpi_get_handle+0x40/0x180 [ 145.122358][ T3571] acpi_has_method+0x46/0x80 [ 145.122370][ T3571] acpi_pci_set_power_state+0x5d/0x190 [ 145.122384][ T3571] pci_power_up+0x40/0x3b0 [ 145.122399][ T3571] pci_pm_power_up_and_verify_state+0x29/0x130 [ 145.122415][ T3571] pci_pm_resume_noirq+0xcb/0x320 [ 145.122428][ T3571] dpm_run_callback+0x53/0x2f0 [ 145.122441][ T3571] device_resume_noirq+0x851/0x880 [ 145.122454][ T3571] async_resume_noirq+0x2c/0x40 [ 145.122467][ T3571] async_run_entry_fn+0x52/0x180 [ 145.122477][ T3571] process_scheduled_works+0x56a/0xa50 [ 145.122495][ T3571] worker_thread+0x569/0x750 [ 145.122512][ T3571] kthread+0x223/0x270 [ 145.122524][ T3571] ret_from_fork+0x146/0x330 [ 145.122540][ T3571] ret_from_fork_asm+0x1a/0x30 [ 145.122555][ T3571] [ 145.122559][ T3571] write to 0xffffffff896258c8 of 4 bytes by task 3571 on cpu 0: [ 145.122569][ T3571] acpi_ut_status_exit+0xfe/0x120 [ 145.122612][ T3571] acpi_ns_search_and_enter+0x456/0x860 [ 145.122626][ T3571] acpi_ns_lookup+0xbd8/0x1070 [ 145.122643][ T3571] acpi_ns_get_node_unlocked+0x143/0x2d0 [ 145.122657][ T3571] acpi_ns_get_node+0x76/0xc0 [ 145.122670][ T3571] acpi_get_handle+0xfd/0x180 [ 145.122684][ T3571] acpi_has_method+0x46/0x80 [ 145.122695][ T3571] acpi_pci_set_power_state+0x5d/0x190 [ 145.122709][ T3571] pci_power_up+0x40/0x3b0 [ 145.122724][ T3571] pci_pm_power_up_and_verify_state+0x29/0x130 [ 145.122736][ T3571] pci_pm_resume_noirq+0xcb/0x320 [ 145.122747][ T3571] dpm_run_callback+0x53/0x2f0 [ 145.122760][ T3571] device_resume_noirq+0x851/0x880 [ 145.122772][ T3571] async_resume_noirq+0x2c/0x40 [ 145.122785][ T3571] async_run_entry_fn+0x52/0x180 [ 145.122795][ T3571] process_scheduled_works+0x56a/0xa50 [ 145.122812][ T3571] worker_thread+0x569/0x750 [ 145.122829][ T3571] kthread+0x223/0x270 [ 145.122841][ T3571] ret_from_fork+0x146/0x330 [ 145.122857][ T3571] ret_from_fork_asm+0x1a/0x30 [ 145.122871][ T3571] [ 145.122874][ T3571] value changed: 0x00000004 -> 0x00000006 [ 145.122880][ T3571] [ 145.122882][ T3571] Reported by Kernel Concurrency Sanitizer on: [ 145.122889][ T3571] CPU: 0 UID: 0 PID: 3571 Comm: kworker/u8:49 Not tainted syzkaller #0 PREEMPT(lazy) [ 145.122905][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.122913][ T3571] Workqueue: async async_run_entry_fn [ 145.122925][ T3571] ================================================================== [ 145.162531][ T3636] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 145.375669][ T8609] OOM killer enabled. [ 145.375679][ T8609] Restarting tasks: Starting [ 145.490140][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.6.851'. [ 146.334387][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'. [ 146.347332][ T8609] Restarting tasks: Done [ 146.347378][ T8609] random: crng reseeded on system resumption [ 146.347394][ T8609] hwrng_fill thread creation failed [ 146.347482][ T8609] PM: suspend exit [ 146.507978][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.538011][ T29] audit: type=1400 audit(1790780367.353:1351): avc: denied { write } for pid=8625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.538548][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.551968][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.552003][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.567285][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.567363][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.622515][ T29] audit: type=1400 audit(1790780367.433:1352): avc: denied { write } for pid=8643 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.668712][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 146.864162][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.886216][ T29] audit: type=1400 audit(1790780367.703:1353): avc: denied { write } for pid=8651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.920249][ T29] audit: type=1400 audit(1790780367.733:1354): avc: denied { write } for pid=8670 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.943871][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 147.073458][ T8399] veth0_vlan: entered promiscuous mode [ 147.076531][ T8399] veth1_vlan: entered promiscuous mode [ 147.091031][ T8399] veth0_macvtap: entered promiscuous mode [ 147.100455][ T29] audit: type=1400 audit(1790780367.913:1355): avc: denied { write } for pid=8679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.101916][ T8399] veth1_macvtap: entered promiscuous mode [ 147.110199][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.121384][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.131177][ T29] audit: type=1400 audit(1790780367.943:1356): avc: denied { write } for pid=8693 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.151004][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 147.175383][ T3619] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.175454][ T3619] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.175509][ T3619] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.175556][ T3619] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.257393][ T29] audit: type=1400 audit(1790780368.073:1357): avc: denied { write } for pid=8697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.293302][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 148.652342][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 148.652356][ T29] audit: type=1400 audit(1790780369.463:1385): avc: denied { write } for pid=8879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.674653][ T29] audit: type=1400 audit(1790780369.493:1386): avc: denied { write } for pid=8890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.751045][ T29] audit: type=1400 audit(1790780369.563:1387): avc: denied { write } for pid=8892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.771945][ T29] audit: type=1400 audit(1790780369.583:1388): avc: denied { write } for pid=8903 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.844530][ T29] audit: type=1400 audit(1790780369.653:1389): avc: denied { write } for pid=8905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.865670][ T29] audit: type=1400 audit(1790780369.683:1390): avc: denied { write } for pid=8916 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.941591][ T29] audit: type=1400 audit(1790780369.753:1391): avc: denied { write } for pid=8918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.961961][ T29] audit: type=1400 audit(1790780369.773:1392): avc: denied { write } for pid=8929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.048390][ T29] audit: type=1400 audit(1790780369.863:1393): avc: denied { write } for pid=8931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.076239][ T29] audit: type=1400 audit(1790780369.893:1394): avc: denied { write } for pid=8942 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1